CVE-2026-108433

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally...

BLEBoy

BLEBoy Goal Create a BLE peripheral that supports all BLE pairing methods that can be used for training and testing, including out-of-band OOB pairing. The perpiheral must be configurable and easy to re-create using consumer parts. About BLEBoy is a BLE peripheral implemented using the Adafruit...

AutoRepeater

AutoRepeater: Automated HTTP Request Repeating With Burp Suite tl;dr Within extender import AutoRepeater.jar Some Brief Instructions AutoRepeater will only resend requests which are changed by a defined replacement. When AutoRepeater receives a request that matches the conditions set for a given...

Reverse-Ip

Reverse-Ip python 2.7 BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...

cq

cq Code Query, a universal code security scanning tool. CQ scans code for security vulnerabilities and other items of interest to security-focussed code reviewers. It outputs text files containing references to issues found, into an output directory. These output files can then be reviewed,...

ConMachi

Conmachi Container Scanner Is It Wrong To Pick Up Capabilities In A Container? Conmachi is a tool written in Golang intended to be used to collect information about a container environment and list potential security issues. It can be statically compiled so that it can be dropped into a container...

cve2024-49740

cve2024-49740 cve2024-49740...

RFC-Security-Research

RFC-Security-Research Original paper and helper scripts to help analyse security aspects of Internet RFCs. Overview This repository hosts a review of RFC security written in the syle of an RFC, in addition to various python helper scripts that were used to obtain the data necessary for the...

readable-thrift

Readable Thrift Readable Thrift makes binary Thrift protocol messages easy to work with by converting them to and from a human-friendly format. This makes manual analysis of and tampering with binary format Thrift messages just as easy as working with plaintext protocols like HTTP. The library is...

CVE-2026-108433

A security feature bypass vulnerability exists in Microsoft Office Word due to the reliance on untrusted inputs in a security decision (CWE-807 ). This flaw allows an unauthorized attacker to bypass a security feature locally. The vulnerability has a HIGH base severity score of 7.8 , impacting co...

EUVD-2026-102445

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally...

thingernet-graph

thingernet-graph Python script to generate neo4j Cypher representation of a collection of IoT devices for visualisation and query. The script reads a directory of JSON files describing 'things' and creates the relevant neo4j cypher text for import to neo4j in order to produce a graph database...

umap2

Umap2 Umap2 is the second revision of NCC Group's python based USB host security assessment tool. This revision will have all the features that were supported in the first revision: umap2emulate - USB device emulation umap2scan - USB host scanning for device support umap2detect - USB host OS...

PayloadAllTheThings

This repository does not have a README...

Writeups

Writeups Collection of detailed and optimized? write-ups for various CTF challenges. Challenge Name| Category| CTF Competition| Short Description ---|---|---|--- The wilderness| pwn| openECSC 2024| Breaking ASLR by timing memory access😈 Lua.efi| pwn| UIUCTF 2025| Booting an unsigned kernel using...

pasteguard-PoC

PasteGuard: security advisory CVE status: requested, pending assignment. This finding is published as GHSA-q94x-p9rc-q89f. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-pasteguard-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox...

AI_Security_Top

🛡️ AI-Security-Knowledge-Base This is a systematic AI security research project, covering a complete knowledge system from foundational machine learning algorithm theory to cutting-edge large model injection attacks, AI evasion countermeasures, and Deepfake. 🏗️ Knowledge System Architecture The...

code-graph-rag-PoC

code-graph-rag: security advisory CVE status: requested, pending assignment. This finding is published as GHSA-85gg-2gfq-q95m. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-code-graph-rag-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox...

ginger

Ginger Ginger is an open source security assessment tool that helps in assessing the security of a given Pentaho BA application instance. Please keep in mind that this project is still a work in progress, and not all features might be present or work as intended. Usage Ginger has only one mandato...

sweyntooth_bluetooth_low_energy_attacks

SweynTooth - Unleashing Mayhem over Bluetooth Low Energy This repository is part of a research outcome from theASSET Research Group. SweynTooth captures a family of 18 vulnerabilities across different Bluetooth Low Energy BLE software development kits SDKs of six major system-on-a-chip SoC vendor...