yari

YARI - YARA Interattivo Debugger interattivo per il linguaggio YARA scritto in Rust. Il debugger chiama direttamente libyara evitando l'emulazione per ottenere i risultati più accurati. 🚀 Funzionalità: Chiamare funzioni dai moduli Ottenere il valore delle costanti dei moduli Valutare espressioni...

reverse-engineering-workshop

...

CVE-2018-15499

CVE-2018-15499 PoC code for CVE-2018-15499 You can find out more @ https://downwithup.github.io/CVEPosts.html Vulnerable Software Download @: http://www.gearsoftware.com/support/drivers.php...

CVE-2021-42667

CVE-2021-42667 CVE-2021-42667 - SQL Injection vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: An SQL Injection vulnerability exists in the Event management software version 2.3.0. An attacker can leverage the vulnerable "id" parameter in the...

AV_Kernel_Vulns

AVKernelVulns Pocs for Antivirus Software‘s Kernel Vulnerabilities found by myself...

CVE-2026-92085

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management Software allows Stored XSS. This issue affects Talassoft Industrial Management Software: before V16.0.1...

EUVD-2026-95775

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management Software allows Stored XSS. This issue affects Talassoft Industrial Management Software: before V16.0.1...

CVE-2026-92085 Stored XSS in TMT Machine's Talassoft Industrial Management Software

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management Software allows Stored XSS. This issue affects Talassoft Industrial Management Software: before V16.0.1...

CVE-2026-92085

The Talassoft Industrial Management Software by TMT Machinery Industry and Trade Co. Ltd. contains a Stored XSS vulnerability (CWE-79) caused by improper neutralization of input during web page generation. This issue affects versions before V16.0.1 . Attackers could potentially execute malicious ...

CVE-2026-98212

A flaw was found in the Linux kernel's MultiMediaCard MMC host software queue. A local user could exploit a use-after-free vulnerability when pending retry operations are not cancelled before device removal, allowing tasks to access memory after it has been released. This issue can lead to a Deni...

swsim

swSIM Il progetto deve essere clonato in modo ricorsivo. Scaricare il file ZIP non è sufficiente. swSIM è una scheda SIM completamente software. È il primo simulatore di scheda SIM disponibile pubblicamente per quanto ne so che non dipende da alcun hardware SIM per funzionare. Ambito Un simulator...

swsim

swSIM Project needs to be cloned recursively. Downloading the ZIP is not enough. swSIM is an all-software SIM card. It's the first publicly available to the best of my knowledge SIM card simulator which does not rely on any SIM hardware to work. Scope A software-only SIM card simulator. It does N...

ROOT-OS-UBUNTU-2204-CVE-2026-64303 CVE-2026-64303 in linux - Patched by Root

Root has patched CVE-2026-64303 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-38348 CVE-2025-38348 in linux - Patched by Root

Root has patched CVE-2025-38348 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-31403 CVE-2026-31403 in linux - Patched by Root

Root has patched CVE-2026-31403 in the linux package for Root:Debian:13. Multiple fixed versions available...

csw-slides-2024

Developing Secure Software in 2024 Abstract As humanity increases its dependence on computer systems, the need for safe and secure software becomes paramount. Today, everything from planes, trains, and automobiles to toothbrushes and cooktops contain a multitude of tiny computers. Each of these...

wibu-codemeter-analysis

Cryptographic Analysis of WIBU CodeMeter DLL Independent security research on WIBU-Systems CodeMeter protection Responsible Disclosure Vendor notified: December 24, 2025 Disclosure period: 90 days Public release: March 24, 2026 Scope: WibuBz32.dll analysis only Summary Analysis of WIBU CodeMeter...

Supply-Chain

Software Supply Chain Security A comprehensive three-book series on software supply chain security, covering threats, defenses, and governance. This open-source manuscript provides security professionals, developers, and organizational leaders with practical guidance for securing modern software...

gps-sdr-sim

GPS-SDR-SIM GPS-SDR-SIM generates GPS baseband signal data streams, which can be converted to RF using software-defined radio SDR platforms, such as ADALM-Pluto, bladeRF, HackRF, and USRP. Windows build instructions 1. Start Visual Studio. 2. Create an empty project for a console application. 3. ...

urh

The Universal Radio Hacker URH is a complete suite for wireless protocol investigation with native support for many common Software Defined Radios. URH allows easy demodulation of signals combined with an automatic detection of modulation parameters making it a breeze to identify the bits and byt...