FIASSE

A Framework for Integrating Application Security into Software Engineering FIASSE Note: This repository is an ongoing work. Contributions are welcome! Overview TL;DR: please read the DOC. Explore FIASSE website. Visit GitHub Discussions to contribute. This repository contains resources and...

linux_screenshot_xwindows

Intro The goal of this volatility plugin is to extract a screenshot of all open X windows from a memory dump. Previous work The volatility plugin linuxxwindows realised by Adam Bridge https://github.com/bridgeythegeek/linuxxwindows extracts various metadata from the window objects registered to X...

HIDEAGEM

888 888 8888888 8888888b. 8888888888 d8888 .d8888b. 8888888888 888b d888 888 888 888 888 "Y88b 888 d88888 d88P Y88b 888 8888b d8888 888 888 888 888 888 888 d88P888 888 888 888 88888b.d88888 8888888888 888 888 888 8888888 d88P 888 888 8888888 888Y88888P888 888 888 888 888 888 888 d88P 888 888 8888...

wsvuls

WSVuls Website vulnerability scanner detect issues outdated server software and insecure HTTP headers. What's WSVuls? WSVuls is a simple and powerful command line tool for Linux, Windows and macOS. It's designed for developers/testers and for those workers in IT who want to test vulnerabilities a...

MaliciousBrowserExtensions

Malicious Browser Extensions Join the Discord Try our Extension Try ExterminAI Overview ❗ The owner and contributors are NOT RESPONSIBLE in any shape or form for any damage inflicted by the negligent use of samples stored in the repository, users must take necessary precautions prior to executing...

ChaseHQ

Pulling apart Chase H.Q. for the ZX Spectrum Reverse engineering by David Thomas, 2023-2024 Project started: March 2023 This is an in-progress disassembly of the ZX Spectrum conversion of Chase H.Q. by Ocean Software. So far this only covers the 48K version and the first stage of the game. The 12...

amd_eop_poc

amdeoppoc CVE-2020-8950 AMD User Experience Program Launcher from Radeon Software Privilege Escalation FileWrite eop Read the note.txt https://heynowyouseeme.blogspot.com/2020/02/privilege-escalation-filewrite-eop-in.html...

jvmxray

JVMXRay: Java Application Security Monitoring Duke history Documentation | Changes from Upstream | Project Blog JVMXRay monitors Java applications in real-time via bytecode injection, detecting vulnerabilities and suspicious activity without code changes. 19 modular sensors track file access,...

Attacker-Group-Predictor

Attacker-Group-Predictor The tool predicts attacker groups from techniques and softwares used. It searches based on the MITRE ATT&CK™ framework How it works? 1- Collect data from https://attack.mitre.org/ about attacker groups 2- Get data from user about attack 3- Compare data and create result...

CVE-2024-6670

CVE-2024-6670 PoC for Progress Software WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability CVE-2024-6670 A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/ Usage python CVE-2024-6670.py...

CVE-2017-0290-

CVE-2017-0290- Hello i,am Gihad Alkmaty froom Libya script CVE-2017-0290- specialist smash Windows DEFINDER windows/8.1/10/...

CVE-2023-43147

CVE-2023-43147 Vendor: PHPJabbers Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/limo-booking-software Version: 1.0 Tested on: Windows 10 Pro Impact: Add an attacker user with admin privileges CVE: Cross Site Request Forgery vulnerability in...

CVE-2023-40869

CVE-2023-40869 Cross Site Scripting vulnerability in mooSocial mooSocial Software v.3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions XSS STORE via CSRF. Paths Affected...

CVE-2021-3438

CVE-2021-3438 A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege...

privacytools.io

Encryption Against Global Mass Surveillance. Contributing This project is archived. See our Welcome to Privacy Guides post for more information. Our project has now moved on to Privacy Guides. It's important for a website on privacy to be up-to-date. Keep an eye on software updates of the...

swicc

swICC Library Project needs to be cloned recursively. Downloading the ZIP is not enough. Software ICC or swICC is a framework providing an easy and flexible way to develop most types of smart cards. It also allows any swICC-based card to be connected to the PC through the PC/SC interface using th...

CVE-2026-111997

ip-address before 10.7.4 allows a denial of service CPU consumption from quadratic complexity, and application stall via many % characters in input reaching a function call that uses the Address6 constructor...

binary-cartography

Binary Cartography Technical webinars on reverse engineering, malware analysis, and software protection. This repository hosts materials for Binary Cartography , Tim's independent webinar series on binary security. The focus is practical reverse engineering, malware analysis, and software...

CVE-2025-66838

CVE-2025-66838 Lack of Rate Limiting - File Upload Description An attacker can rapidly upload a large volume of files to cause denial of service CVSS Score: 6.5 Medium Attack Type Remote Authenticated Affected Versions Versions before 10.0.23.0.3587512 Discovered By: Yazan Abu-Nadi...

CVE-2026-14459-14460-pardus-software

Pardus Software Center — Local Privilege Escalation CVE-2026-14459 & CVE-2026-14460 Proof-of-concept and exploit-ready code for two local privilege escalation issues in the pardus-software package Pardus Software Center version 1.0.4 , both fixed in 1.0.5. CVE| Class| Summary| CVSS 3.1 CERT-TR...