reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

x64dbg

x64dbg 一个开源的Windows二进制调试器，旨在进行恶意软件分析和你没有源代码的可执行文件的逆向工程。有许多可用的功能和一个全面的插件系统 来添加你自己的功能。你可以在博客上找到更多信息! 屏幕截图 | ---|--- 安装与使用 1. 下载快照，并将其解压缩到您的用户具有写权限的位置。 2. 可选择 使用 x96dbg.exe 来注册一个shell扩展，并在桌面上添加快捷方式。 3. 如果你想调试一个32位的可执行文件，你现在可以运行 x32\x32dbg.exe 或者 x64\x64dbg.exe来调试一个64位的可执行文件。如果你不确定，你可以随时运行 x96dbg.exe...

CVE-2019-15107

服务器管理工具 Webmin RCE 漏洞CVE-2019-15107 摘要 CVE-2019-15107 是 Unix 系统中使用的基于 Web 的系统管理工具 Webmin 中出现的漏洞。该管理工具的功能中，在修改密码的代码中，特定参数未经过滤直接传递给 Shell 命令执行，从而导致任意代码执行（Remote Code Execution, RCE）。 环境配置与漏洞条件 使用 Webmin 1.920 版本或 1.920 之前的版本时，在修改密码的 passwordchange.cgi 中发现了漏洞。Webmin 通过 SourceForge...

DSpace__DSpace_CVE-2016-10726_4-4

Las instrucciones de instalación pueden encontrarse en DSpace-Manual.pdf, ofrecido con los archivos fuente en el proyecto SourceForge: http://sourceforge.net/projects/dspace/files/DSpace%20Stable/VERSION/ Reemplace "VERSION" con la versión que está instalando, por ejemplo "4.0". La información de...

cve-2019-15107

CVE-2019-15107 - Webmin 未认证远程代码执行 描述 此仓库包含针对 CVE-2019-15107 的概念验证（PoC）漏洞利用程序，影响 Webmin 1.890 至 1.920 版本。 该脚本利用了 1.890 至 1.920 版本中的后门，允许未认证用户通过 old（在 v1.890 中为 expired）参数向 passwordchange.cgi 端点注入命令。只有 SourceForge 的下载被植入了后门，但它们却被列为项目官网上的官方下载。 未知攻击者曾两次在构建服务器的源代码中插入 Perl qx 语句：一次是在 2018 年 4 月，在 1.890...

Jumbo Website Manager - Remote Code Execution

Exploit Title: Jumbo Website Manager - Remote Code Execution Application: Jumbo Website Manager Version: v1.3.7 Bugs: RCE Technology: PHP Vendor URL: https://sourceforge.net/projects/jumbo/ Software Link: https://sourceforge.net/projects/jumbo/ Date of found: 28.10.2025 Author: Mirabbas Ağalarov...

Sourceforge SimplePress CMS SQL注入漏洞

SourceForge SimplePress CMS is an open-source content management system developed by SourceForge. Version 1.0.7 of SourceForge SimplePress CMS has a SQL injection vulnerability. This vulnerability stems from the presence of SQL injections in the p and s parameters, which could allow unauthenticat...

Ctags 安全漏洞

CTags is a utility developed by SourceForge OpenSource, designed to generate index files from the program source code tree, thereby facilitating quick location of text in text editors. Ctags versions 6.2.1 and earlier contained security vulnerabilities, which stemmed from improper recursive contr...

PT-2026-7973

CVE-2026-25251 - "SourceForge Information Disclosure Vulnerability" CVE ID : CVE-2026-25251 Published : Feb. 10, 2026, 11:16 p.m. | 4 hours, 3 minutes ago Description : Rejected reason: This has been moved to the REJECTED state because the information source is under review. If circumstances...

SourceForge MinaliC Webserver 资源管理错误漏洞

SourceForge MinaliC Webserver is a SourceForge open source web service program. A resource management error vulnerability exists in SourceForge MinaliC Webserver version 2.0.0, which stems from improper handling of oversized GET requests and could lead to a denial of service attack...

SourceForge QaTraq 安全漏洞

SourceForge QaTraq is an open source test management tool from SourceForge. A security vulnerability exists in SourceForge QaTraq version 6.9.2, which stems from an insufficient file type restriction that could lead to the upload and execution of arbitrary PHP files...

SourceForge QaTraq 安全漏洞

SourceForge QaTraq is an open source test management tool from SourceForge. A security vulnerability exists in SourceForge QaTraq version 6.9.2 that stems from enabling administrative account credentials by default, which could result in gaining administrative privileges...

Sourceforge Easywork Enterprise 安全漏洞

Sourceforge Easywork Enterprise is a Sourceforge open source enterprise management system. A security vulnerability exists in Sourceforge Easywork Enterprise version 2.1.3.354, which originates from storing sensitive information in memory in clear text and could lead to unauthorized activation of...

Amazon Linux 2023 : giflib, giflib-devel, giflib-utils (ALAS2023-2025-1220)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1220 advisory. Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c CVE-2023-48161 Giflib Projec...

EUVD-2006-5547

Malware in sbrugna...

SourceForge Dogfood CRM 安全漏洞

SourceForge Dogfood CRM is a SourceForge open source information management system. A security vulnerability exists in SourceForge Dogfood CRM version 2.0.10, which stems from insufficient cleanup of the data parameter in the spell.php script, which could lead to remote command execution...

SourceForge Subtitle Processor 安全漏洞

SourceForge Subtitle Processor is an open source movie subtitle processing software from SourceForge. A security vulnerability exists in SourceForge Subtitle Processor version 7.7.1, which originates from a buffer overflow when parsing .m3u files and could lead to the execution of arbitrary code...

Sourceforge PHP Volunteer Management 安全漏洞

Sourceforge PHP Volunteer Management is a Sourceforge open source PHP-based volunteer management system. A security vulnerability exists in Sourceforge PHP Volunteer Management version 1.0.2, which stems from the document upload feature not restricting file types, which could lead to arbitrary fi...

Sourceforge WeBid 安全漏洞

Sourceforge WeBid is a Sourceforge open source web project for online auctions and selling products. A security vulnerability exists in Sourceforge WeBid version 1.0.2, which stems from a converter.php script that does not clean up the to parameter in a POST request, which could lead to remote co...

Sourceforge Phptax 安全漏洞

Sourceforge Phptax is an open source tax calculator from Sourceforge. A security vulnerability exists in Sourceforge Phptax version 0.8, which stems from the pfilez parameter being passed unvalidated directly to the exec function, which could lead to remote code execution...