3332685 matches found
tandasat.github.io
System Programming Lab Our Training Our next public Hypervisor Development class is: Date: Oct 12 - 15, 2026 4 days Time: 8am - 4pm PDT/UTC-7 Format: Remote Register at RegFox If you want to receive future class schedule announcements, subscribe to our mailing list by sending an empty email to...
poodle-PoC
Poodle PoC 🐩 🐩 🐩 Una prueba de concepto del ataque Poodle Padding Oracle On Downgraded Legacy Encryption : un exploit de hombre en el medio que aprovecha la degradación a SSL 3.0 de los clientes de software de seguridad y de Internet El ataque Poodle te permite recuperar datos cifrados enviados p...
CVE-2024-7120
Raisecom Devices Command Injection CVE-2024-7120 Proof of concept! Overview A command injection vulnerability has been identified in the RAISECOM Gateway devices, affecting models MSG1200, MSG2100E, MSG2200, and MSG2300. This vulnerability allows remote attackers to execute arbitrary commands on...
cve-2024-46483
CVE-2024-46483 - Pre-Authentication Heap Overflow in Xlight SFTP server Affected versions Xlight 32 and 64-bit versions = 3.9.4.2 Impact An unauthenticated attacker with access to Xlight SFTP could gain code execution or cause a denial or service. Root Cause Strings sent across the wire in the SF...
ALPC-Enumerator
PPL-Aware ALPC Port Enumerator A Windows userland tool for enumerating and classifying Advanced Local Procedure Call ALPC ports, including those owned by PPL Protected Process Light processes where standard handle duplication fails. Standard enumeration tools often skip protected or access-denied...
SCOPE
SCOPE: Security Cloud Ops Purple Engagement SCOPE ejecuta flujos de trabajo de equipo púrpura en AWS con inventario determinista en Python y agentes de IA acotados. Audita recursos de AWS, valida rutas de ataque, genera manuales de explotación solo para revisión, produce controles y guía...
porterminal
Hand a computer to an agent, full control, and watch it. One command, one URL. Also a slick terminal for your own phone. 1. uvx ptn 2. Hand the URL to an AI agent, or scan the QR yourself 3. Watch it work in any browser, and take over anytime...
Burp_AES_Plugin
Burpsuite Plugin For AES Crack 0x00 mvn install to get jar git clone https://github.com/jas502n/BurpAESPlugin/ cd /github/BurpAESPlugin/AESDecode vi src/main/java/burp/BurpExtender.java mvn install root@kitploit: INFO --- maven-install-plugin:2.4:install default-install @ AESCrack --- INFO...
Critical: Red Hat Security Advisory: unbound security update
An update for unbound is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
unbound: Unbound: Heap buffer overflow via malicious DNSSEC response
A flaw was found in Unbound. This vulnerability allows a remote attacker to cause a heap buffer overflow during the processing of DNSSEC responses. By sending a specially crafted DNSSEC response, a malicious server or an attacker tampering with network traffic can trigger this flaw. This could le...
unbound: Unbound: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY
A flaw was found in Unbound's DNSSEC validator. A remote attacker can exploit this vulnerability by controlling a malicious zone and sending a specially crafted DNSKEY record. This can lead to a heap buffer overflow, potentially resulting in a denial of service or remote code execution...
unbound: Unbound: Remote Code Execution Vulnerability in CNAME Synthesis
A flaw was found in Unbound. Improper handling of buffer positions and compression pointers in Unbound's CNAME synthesis allows a remote attacker to corrupt heap memory via upstream DNS responses. This vulnerability can result in a denial of service DoS or, under specific conditions, remote code...
ATEAM
ATEAM: Azure Tenant Enumeration and Attribution Module A Python reconnaissance tool designed to discover Azure services and attribute tenant ownership information based on their responses. Author, Contributors, and License Authors: Karl Fosaaen @kfosaaen - On most platforms, NetSPI Thomas Elling...
guarddog
GuardDog GuardDog is a CLI tool that identifies malicious PyPI and npm packages, Go modules, Rust crates, RubyGems, GitHub actions, or VSCode extensions. It runs static analysis on package source code through YARA rules and analyzes package metadata to detect supply chain attacks. What makes...
feroxbuster
!WARNING Security Notice – Domain Impersonation The domain feroxbuster.com is NOT affiliated with this project, its maintainers, or any official feroxbuster releases. Official feroxbuster downloads are distributed ONLY through: https://github.com/epi052/feroxbuster open source...
CVE-2026-0006-openapv-poc
CVE-2026-0006: Heap Buffer Overflow in libopenapv Android APV Codec Patch Analysis & Reproduction by Mobile Hacking Lab CVSS 9.8 Critical | Actively exploited in the wild | Patched March 2026 Note: We did not discover this vulnerability. All credit for finding and responsibly reporting...
SELinux-Permissive-Only-CVE-2025-21479
SELinux-Permissive-Only-version-of-Cheese-aka-CVE-2025-21479 This is an SELinux permissive only version, for now, of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices Some of the code has been recycled from the...
MSRC-Security-Research
Intro This project hosts security research from the Microsoft Security Response Center MSRC. Contributing At this time, this project does not accept external contributions, but we hope to do so in the future. Most contributions require you to agree to a Contributor License Agreement CLA declaring...