3370076 matches found
EUVD-2026-91233
Memory allocation with excessive size value in the HSS/LMS signature code HssPublicKeyParameters, HssSignature in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote unauthenticated attacker who can supply both an HSS public key and a signature to cause a denial of service...
CVE-2026-103603 Unbounded HSS public key level count allows huge array allocation during signature verification
Memory allocation with excessive size value in the HSS/LMS signature code HssPublicKeyParameters, HssSignature in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote unauthenticated attacker who can supply both an HSS public key and a signature to cause a denial of service...
RSPET
RSPET RSPET Reverse Shell and Post Exploitation Tool is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario. DISCLAIMER: This software is provided for educational and PenTesting purposes and as a proof of concept. The developers do not endorse,...
janusec
Janusec Application Gateway / JANUSECๅบ็จ็ฝๅ ณ English Readme ๆไพๅฟซ้ใๅฎๅ จ็ๅบ็จไบคไป ไป็ปPPT๏ผ https://www.janusec.com/download/Janusec-Application-Gateway-CN.pdf ไธป่ฆๅ่ฝ JANUSECๅบ็จ็ฝๅ ณ็ไธป่ฆๅ่ฝๆ๏ผ ๅWebๅบ็จๆไพ็ปไธ็ๅฎๅ จๆฅๅ ฅ๏ผๅ ๆฌHTTPSใ่บซไปฝ่ฎค่ฏใๅฎๅ จ้ฒๅพก๏ผWAF/CC๏ผ็ญใๅฆWebๅบ็จๆฏ้่ฟK8S Pods้จ็ฝฒ็๏ผ่ฏฅ็ฝๅ ณไนๅฏไปฅไฝไธบK8S Ingress Controllerไฝฟ็จ๏ผๅPodsๆไพ่ทๆฎ้Webๅบ็จๅๆ ท็ๆฅๅ ฅๅๅฎๅ จ็นๆงใ...
tkeypoc
PoC for CVE-2015-5477 BIND9 TKEY DoS This code sends UDP packet that crashes vulnerable BIND9 DNS servers. elceef@osiris:/tkeypoc$ ./tkeypoc.py localhost CVE-2015-5477 BIND9 TKEY PoC Sending packet to localhost ... Done...
BlackHole
BlackHole C RAT Remote Adminitration Tool Educational purposes only Technologies protobuf-net : message serialization/deserialization in slavemaster protocol NetMQ : network library used for the slavemaster system clientserver Lz4.Net : compression library ILMerge : packaging assemblies into a...
APKHunt
APKHunt | OWASP MASVS Static Analyzer APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential...
CVE-2025-24813
๐จ CVE-2025-24813 โ Apache Tomcat PUT JSP RCE Exploit This repository contains a complete proof-of-concept PoC for CVE-2025-24813 , a Remote Code Execution RCE vulnerability in Apache Tomcat using the HTTP PUT method to deploy a malicious JSP web shell. ๐ฅ This exploit demonstrates how an attacker...
cve-2021-45046
Although log4j RCE CVE-2021-44228 was patched in 2.15, a new vulnerability, CVE-2021-45046 causing DoS, has been discovered. Below are the test results. Test Environment log4j-2.15.0 api , core JRE-1.8.0 jdk1.8.0151 Eclipse IDE Maven Project 1. Log4j RCE CVE-2021-44228 syntax test - Not Vuln 2...
EUVD-2026-91231
Release of unverified plaintext in the CCM CcmBlockCipher and DSTU 7624 CCM KCcmBlockCipher AEAD modes in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker to obtain decryptions of ciphertexts of their choosing via forged messages sent to an application that lets th...
CVE-2026-103601 CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check
Release of unverified plaintext in the CCM CcmBlockCipher and DSTU 7624 CCM KCcmBlockCipher AEAD modes in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker to obtain decryptions of ciphertexts of their choosing via forged messages sent to an application that lets th...
NeuroCore
NeuroCore High-Performance Structural Binary Analysis and Visualization Utility Abstract NeuroCore is a native macOS utility engineered for the structural analysis of binary data through high-velocity visualization. By leveraging General-Purpose Computing on Graphics Processing Units GPGPU via...
rmx3888-cve-2026-43499-config
CVE-2026-43499 Exploit Configuration for realme RMX3888 Device Information Brand/Model : realme RMX3888 Android Version : 16 SDK 36 Build ID : BP2A.250605.015 Kernel : Linux 6.1.141-android14-11-o-gffc54a6d2287 SoC : Qualcomm SM8650 Snapdragon 8 Gen 3 Architecture : ARM64 aarch64 Overview This...
Thick-Client-Pentest-Checklist
THICK CLIENT PENTESTING CHECKLIST OWASP Based Checklist ๐๐ 80+ Test Cases ๐๐ Notion link: https://hariprasaanth.notion.site/THICK-CLIENT-PENTESTING-CHECKLIST-35c6803f26eb4c9d89ba7f5fdc901fb0 INFORMATION GATHERING Information Gathering Find out the application architecture two-tier or three-tier...
EUVD-2026-91230
Uncontrolled recursion in the ASN.1 parser Asn1InputStream, Asn1StreamParser in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote unauthenticated attacker to cause a denial of service via a crafted ASN.1 encoding of deeply nested constructed elements for example SEQUENCE...
CVE-2026-103600 Unbounded ASN.1 nesting depth causes process-terminating stack overflow
Uncontrolled recursion in the ASN.1 parser Asn1InputStream, Asn1StreamParser in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote unauthenticated attacker to cause a denial of service via a crafted ASN.1 encoding of deeply nested constructed elements for example SEQUENCE...
CVE-2026-103600
Uncontrolled recursion in the ASN.1 parser Asn1InputStream, Asn1StreamParser in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote unauthenticated attacker to cause a denial of service via a crafted ASN.1 encoding of deeply nested constructed elements for example SEQUENCE...
njsscan
njsscan njsscan is a static application testing SAST tool that can find insecure code patterns in your node.js applications using simple pattern matcher from libsast and syntax-aware semantic code pattern search tool semgrep. Made with in India Support njsscan Donate via Paypal: Sponsor the...
Kautilya
Kautilya Kautilya is a toolkit which provides various payloads for a Human Interface Device which may help in breaking in a computer during penetration tests. By nikhilmitt List of Payloads Windows Gather Gather Information Hashdump and Exfiltrate Keylog and Exfiltrate Sniffer WLAN keys dump Get...
Pyramid
Pyramid What is it Pyramid is composed of: 1. a Python HTTP/S server that can deliver encrypted files chacha, xor 2. Python modules that can load in-memory dependencies of offensive tooling such as Bloodhound-py, secretsdump, LaZagne, Pythonnet, DonPAPI, pythonmemorymodule, paramiko, pproxy. 3...