44706 matches found
CVE-2026-82414
The BACnet Stack C library, an open source protocol stack for embedded systems, contains a decode overflow vulnerability in the MS/TP receive path. Affecting versions 1.4.0 to before 1.4.6 , 1.5.0 to before 1.5.1 , and 1.6.0 to before 1.6.1 , the library decodes COBS frames into an output pointer...
ufuzz
UFuzz, or Universal Plug and Fuzz, is an automatic UPnP fuzzing tool. It will enumerate all UPnP endpoints on the network, find the available services and fuzz them. It also has the capability to fuzz HTTP using Burp proxy logs. It is designed to fuzz embedded systems, and as such, is only single...
heartbleedscanner
Heartbleed Scanner Network Scanner for OpenSSL Memory Leak CVE-2014-0160 -t parameter to optimize the timeout in seconds. -f parameter to log the memleak of vulnerable systems. -n parameter to scan entire network. -i parameter to scan from a list file. Useful if you already have targets. -r...
sslsplit
SSLsplit - transparent SSL/TLS interception https://www.roe.ch/SSLsplit Overview SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. It is intended to be useful for network forensics, application security analysis and penetration testing. SSLsplit is...
pkexec-exploit
pkexec-exploit Local Privilege Escalation in polkit's pkexec CVE-2021-4034 Summary Polkit formerly PolicyKit is a component for controlling system-wide privileges in Unix-like operating systems. It provides an organized way for non-privileged processes to communicate with privileged ones Exploit...
tinyos-rtos
TinyOS — Ultra-Lightweight RTOS for IoT An ultra-lightweight real-time operating system for resource-constrained IoT and embedded devices. Kernel footprint under 10 KB, 2 KB minimum RAM, preemptive priority-based scheduling. Features Category| Details ---|--- Kernel| Preemptive priority-based...
distributed-system-testing
Distributed Systems Testing Skills Two skills that help an AI coding agent design meaningful tests, run them, and explain the results for systems that store data or run across multiple processes or machines. Start with a product promise—such as “once saving succeeds, the data is still there after...
Kerberos Privilege Escalation
The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
renode
Renode Copyright c 2010-2026 Antmicro What is Renode? Renode was created by Antmicro as a virtual development tool for multi-node embedded networks both wired and wireless and is intended to enable a scalable workflow for creating effective, tested and secure IoT systems. With Renode, developing,...
EUVD-2026-125344
A integer overflow that can lead to a buffer overrread in the XRes QueryResourceBytes Swap Path in the X.Org xwayland before 24.1.15 and X Server before 21.1.26 on 32bit systems could be used by authenticated clients to crash the X server...
CVE-2026-109094
A integer overflow that can lead to a buffer overrread in the XRes QueryResourceBytes Swap Path in the X.Org xwayland before 24.1.15 and X Server before 21.1.26 on 32bit systems could be used by authenticated clients to crash the X server...
CVE-2026-109094
The X.Org Server is vulnerable to an integer overflow in the XRes QueryResourceBytes Swap Path. This flaw can lead to a buffer overflow on 32-bit systems , potentially allowing authenticated clients to crash the X server. Affected versions include Xwayland before 24.1.15 and X Server before 21.1....
cve-2018-10933
CVE-2018-10933 CVE-2018-10933 libssh authentication bypass, a vulnerable Docker container that listens on port 2222 for exploitation. A basic proof-of-concept libssh patch included in the container to bypass auth. To login use the default "myuser" / "mypassword" from libssh. A patch is applied to...
airgeddon
airgeddon This is a multi-use bash script for Linux systems to audit wireless networks. All the needed info about how to "install | use | enjoy" airgeddon is present at GitHub's Wiki. I. Content & Features Home Features Screenshots Wallpapers II. Requirements Requirements Compatibility Cards and...
r2ai
R2AI - Augmented reversing with LLM for radare2 ╭─────────────────────────────────╮ │ , . . , │ ╭──╮ │ : \ \ |: \ : | │ │ │ │ | |/ || , || : | │ │ O O | : \ \ . || : || | │ │ │╷ │ | |\ :||| || | │ │ ││ │ || : |||| │ │ ─╯│ ╰─────────────────────────────────╯ ╰───╯ Components This repository...
Shellshock
Shellshock Exploit CVE-2014-6271 Exploit Description This repository contains an exploit for a vulnerability that affects unix-based systems. Please note that this is merely a proof-of-concept script created for educational purposes and should be used responsibly. This exploit is designed to...
fwknop
fwknop - Single Packet Authorization Introduction fwknop implements an authorization scheme known as Single Packet Authorization SPA for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired...
lynis
Documentation Do you like this software? Star the project and become a stargazer. lynis Lynis - Security auditing and hardening tool, for UNIX-based systems. Lynis is a security auditing tool for systems based on UNIX like Linux, macOS, BSD, and others. It performs an in-depth security scan and...
lrs-pager-systems-bruteforce
lrs-pager-systems-bruteforce Long Range Pager Systems pagers and coasters URH and YS1 yardstick one / cc11xx information and brute force tool lrs-pager-systems-bruteforce Long Range Pager Systems pagers and coasters URH and YS1 yardstick one / cc11xx information and brute force tool Inspired by...
sqlancer
SQLancer is a tool to automatically test Database Management Systems DBMSs in order to find bugs in their implementation. That is, it finds bugs in the code of the DBMS implementation, rather than in queries written by the user. SQLancer has found hundreds of bugs in mature and widely-known DBMSs...