python-haystack

python-haystack メモリフォレンジックス |travis| |coverage| |landscape| |pypi| |docs| クイックスタート クイック使用ガイド docs/ フォルダ内 Haystack-reverse CLI docs/ フォルダ内 詳細ドキュメント はじめに python-haystack は、割り当てられたメモリ内の C 構造体の検索とリバースエンジニアリングに特化したヒープ分析フレームワークです。 最初の機能/API は SEARCH 関数です。プロセスメモリダンプや動作中のプロセスメモリ内で既知のレコードタイプを検索する機能を提供します。...

XorStringsNET

XorStringsNET 一个用于对 .NET 二进制文件进行简单快速的基于 XOR 的字符串加密的工具 XORStrings 实现了一种简单的基于 XOR 的加密算法，我称之为 RXOR。RXOR 不仅对字符串进行加密，还会反转其字符顺序。每个字符串都使用唯一的密钥进行加密。解密例程所使用的参数也经过 XOR 加密。 它是如何工作的？ XorStrings.exe 既可以使用命令行，也可以将待混淆的二进制文件拖放到 XorStrings 可执行文件上。 XORStrings 支持 .NET Framework 4.6+ 以及 .NET Core 直至 .NET 更多细节 如果你想了解...

vxworks_hash

vxworkshash 用于逆向 vxworks 5.x 密码哈希的代码 这现在已经非常老旧了！: 更多信息请参见我的博客文章：http://cvk.posthaven.com/how-to-crack-vxworks-password-hashes...

NSEC3-X

免責事項： このプロジェクトは人工知能（AI）によって生成されましたが、厳格な「ヒューマン・イン・ザ・ループ（HITL）」プロセスを経ています。つまり、コードは人間のソフトウェアエンジニアによってレビュー・リファクタリングされ、アーキテクチャ設計は人間が指示し、基本的なセキュリティ監査も実施されて、機能が確認され、典型的なAIの幻覚が排除されています。このプロセスにより、純粋なAI生成では保証できない品質と信頼性のレベルが確保されています。 NSEC3-X...

CVE-2026-61795

Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, hostnameRegexHandler.OnUpdate in internal/webhook/tenant/validation/hostnameregex.go reverses the new and old Tenant parameters and validates the previous AllowedHostnames.Regex instead of the submitte...

PT-2026-89151

A stored Cross-Site Scripting XSS vulnerability exists in the announcement preview component of REBUILD 4.4.3. Although the announcement content undergoes HTML escaping on the server side, the client-side preview code reverses the escaped entities using jQuery's html.text method and subsequently...

EUVD-2026-68120

pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attackers can authenticate through a weaker client and access resources requiring a stronger profile type by satisfying generic profile checks...

PT-2026-69662

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pvr set uobj array function where kernel objects are copied to a userspace array. When the out-stride variable differs from the kernel object size, the slow path...

kernel-nday-exploits

Linux Kernel N-Day Exploits Local privilege escalation rese...

CVE-2026-50110

Storage Concentrator SC & SCVM contains hardcoded credentials for numerous internal services embedded within a configuration file. While the credentials are stored in an encoded format, the encoding can be reversed to plaintext. The exposed credentials span a broad range of internal services,...

CVE-2026-53692

Redeight CMS version 1.0 uses the MD5 algorithm without a salt to store user passwords. Because MD5 is a cryptographically broken algorithm and lacks salting, attackers who obtain the password hashes can trivially reverse them using rainbow tables, leading to the exposure of plaintext credentials...

CVE-2026-36609

Mercusys AC12G EU V1 router with firmware AC12GEUV1200909 uses a static authentication nonce that does not change between requests from the same source IP. Combined with the predictable XOR-based password encoding securityEncode function, this allows an attacker to reverse captured authentication...

CVE-2026-6866

CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials...

Data Sharing Framework 安全漏洞

Data Sharing Framework is an open-source distributed medical data sharing and processing framework based on BPMN and FHIR. Versions of Data Sharing Framework prior to 2.1.0 contained security vulnerabilities, which were caused by the incorrect use of reverse time comparison logic in the OIDC and...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lock order reversal between nfcunregisterdevice and rfkillfopwrite, which could lead to a deadlock...

SUSE SLES12 Security Update : curl (SUSE-SU-2026:0066-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0066-1 advisory. - CVE-2025-14524: Fixed bearer token leak on cross-protocol redirect bsc1255731 - CVE-2025-15079: Fixed unknown host connection acceptance when...

CVE-2025-14819

The libcurl library is vulnerable to an OpenSSL partial chain store policy bypass (CVE-2025-14819). When performing TLS transfers using reused easy or multi-handles while altering the CURLSSLOPT_NO_PARTIALCHAIN option, libcurl may incorrectly reuse a CA store cached in memory where the partial ch...

Traefik 安全漏洞

Traefik is an open source reverse proxy and load balancing tool from Traefik Open Source. A security vulnerability exists in Traefik versions 3.5.0 through 3.6.2, which stems from a reversal of TLS authentication logic and could lead to a man-in-the-middle attack...

AVEVA Edge 加密问题漏洞

AVEVA Edge is a highly scalable and flexible HMI/SCADA software from UK-based Jianwei Software AVEVA. AVEVA Edge suffers from an encryption issue vulnerability that stems from an attacker being able to reverse engineer an Edge user's application native password or Active Directory password by...

Machine and Deep Learning for Indoor UWB Jammer Localization

Ultra-wideband UWB localization delivers centimeter-scale accuracy but is vulnerable to jamming attacks, creating security risks for asset tracking and intrusion detection in smart buildings. Although machine learning ML and deep learning DL methods have improved tag localization, localizing...