376771 matches found
VUL4J-23
Apache Sling Bringing Back the Fun! Apache Sling is a web framework that uses a Java Content Repository, such as Apache Jackrabbit, to store and manage content. Sling applications use either scripts or Java servlets, selected based on simple name conventions, to process HTTP requests in a RESTful...
Vulnerability-Research-CVE-2017-0144
Vulnerability-Research-CVE-2017-0144 LAB: ATTACK ON WINDOWS OPERATING SYSTEM BASED ON SMB PROTOCOL VULNERABILITY. I. DESCRIPTION In this lab, we will use two computers to simulate an attack based on a vulnerability in the SMB protocol of the Windows operating system. One machine runs Kali Linux,...
CVE-2025-50361
Global Buffer Overflow in SmallBASIC SmallBASIC is a fast and easy to learn BASIC language interpreter ideal for everyday calculations, scripts and prototypes. SmallBASIC includes trigonometric, matrices and algebra functions, a built in IDE, a powerful string library, system, sound, and graphic...
CVE-2015-1635
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2015-1635 Run bellow command to check CVE-2015-1635 -h Configurations 2. We integrated with the Telegram API to receive...
CVE-2015-7297
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2015-7297 Run bellow command to check CVE-2015-7297 -h Configurations 2. We integrated with the Telegram API to receive...
RedbloodC2
Public version of Redblood C2 This is a simple command and control server to handle sessions and your victims installation $ git clone https://github.com/kira2040k/RedbloodC2.git $ cd RedbloodC2 $ npm install $ node server.js Usage After install node.js and and all modules from npm execute: node...
PS2EXE
AI free repository - artificial intelligence is killing creativity and our nature! PS2EXE Overworking of the great script of Ingo Karstein with GUI support. The GUI output and input is activated with one switch, real windows executables are generated. Compiles only Powershell 5.x compatible...
yls
YLS Language server for YARA language. š Features: Code completion of all available modules including function parameters Function documentation for hovers and code completion Opinionated code formatting Signature help Linting Go-to definition and references Symbol highlighting under the cursor...
Argus
Argus This repo contains the code for our USENIX Security '23 paper "ARGUS: A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions". Argus is a comprehensive security analysis tool specifically designed for GitHub Actions. Built with an aim to enhance the security of CI/CD...
CVE-2026-98828 wifi: ath9k: reject short WMI command responses
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: reject short WMI command responses ath9kwmirspcallback removes the validated WMI header and copies the number of bytes expected by the waiting command into its response buffer. A device response shorter than that...
CVE-2026-98828
The Linux kernel contains a vulnerability in the ath9k wifi driver within the ath9k_wmi_rsp_callback() function. The root cause is that the function copies the number of bytes expected by a waiting command into a response buffer without sufficiently verifying the length of the device response. If...
erebus
Fast and customisable parameter based vulnerability scanner based on simple YAML Rules How ā¢ Install ā¢ Templates ā¢ Interceptor ā¢ Usage ā¢ Join Discord Erebus is used to test every parameter across targets based on Yaml templates leading to zero false positives and providing fast scanning on large...
EUVD-2026-103768
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: reject short WMI command responses ath9kwmirspcallback removes the validated WMI header and copies the number of bytes expected by the waiting command into its response buffer. A device response shorter than that...
HTMLSmuggler
HTMLSmuggler āļø HTMLSmuggler - JS payload generator for IDS bypass and payload delivery via HTML smuggling. Description The full explanation what is HTML Smuggling may be found here. The primary objective of HTML smuggling is to bypass network security controls, such as firewalls and intrusion...
lmg
Linux Memory Grabber A script for dumping Linux memory and creating VolatilityTM profiles. Hal Pomeranz [email protected], 2020-02-01 THANKS! "If I have seen further it is by standing on the shoulders of giants." Issac Newton There are a lot of people who deserve thanks for making this simpl...
CVE-2026-98820 blk-mq: set RQF_USE_SCHED when the operation is known
In the Linux kernel, the following vulnerability has been resolved: blk-mq: set RQFUSESCHED when the operation is known The cached requests are allocated for one operation but can be handed out for another. A passthrough command has RQFUSESCHED cleared, so using those flags for a subsequent...
CVE-2026-98820
The Linux kernel contains a vulnerability in blk-mq where cached requests, initially allocated for one operation, could be reused for another. Specifically, if a passthrough command has RQF_USE_SCHED cleared, subsequent read/write bios might use these flags incorrectly. This results in requests b...
EUVD-2026-103905
In the Linux kernel, the following vulnerability has been resolved: blk-mq: set RQFUSESCHED when the operation is known The cached requests are allocated for one operation but can be handed out for another. A passthrough command has RQFUSESCHED cleared, so using those flags for a subsequent...
OWA-Password-Sprayer
OWA-Password-Sprayer OWA Password Sprayer This Python script facilitates password spraying against Outlook Web Access OWA endpoints. Password spraying is a technique used to test a single password against multiple usernames, aiming to find valid credentials for accessing the OWA. Features: Suppor...
CVE-2026-98814
The Linux kernel contains a use-after-free vulnerability within the nvme_core component. The issue occurs when an I/O passthrough command is sent through a multipath namespace head after the controller path that initially created the head has been removed. KASAN identified the bug as a slab-use-a...