regipy

regipy ⚠️ Breaking Changes in v6.0.0 Version 6.0.0 includes significant modernization changes: Python 3.9+ required - Dropped support for Python 3.6, 3.7, and 3.8 attrs library removed - Data classes now use Python's built-in dataclasses module If your code imports internal classes Cell,...

theo

Theo Obsolete, not maintained anymore, don't install it, don't use it, you were warned! Theo aims to be an exploitation framework and a blockchain recon and interaction tool. Features: Automatic smart contract scanning which generates a list of possible exploits. Sending transactions to exploit a...

CVE-2026-23111

🐧 CVE-2026-23111 - Linux Kernel nftables Use-After-Free Vulnerability ⚠️ Use-After-Free in Linux Kernel nftables 📖 Overview CVE-2026-23111 is a high-severity Use-After-Free UAF vulnerability affecting the Linux kernel's netfilter/nftables subsystem. The flaw originates from incorrect handling of...

Orbit

ＯＲＢＩＴ Blockchain Transactions Investigation Tool 3.2-blue.svg" Introduction Orbit is designed to explore network of a blockchain wallet by recursively crawling through transaction history. The data is rendered as a graph to reveal major sources, sinks and suspicious connections. Note: Orbit only...

bitcoin

Bitcoin Core integration/staging tree https://bitcoincore.org For an immediately usable, binary version of the Bitcoin Core software, see https://bitcoincore.org/en/download/. What is Bitcoin Core? Bitcoin Core connects to the Bitcoin peer-to-peer network to download and fully validate blocks and...

KTM_POCS

KTMPOCS This repo contains reports for CVE 2024-43570 and CVE 2024-43535, two vulnerabilities I found in the Windows Kernel Transaction Manager driver tm.sys. This repo also contains exploit code I used for the demos in the OffensiveCon25 Presentation: Hunting for Overlooked Cookies in Windows 11...

CVE-2023-49540

CVE-2023-49540 Book Store Management System v1.0 - Cross-site scripting XSS vulnerability in /index.php/history - vulnerable field: "Customer's Name". Description : Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/history. T...

LogFileParser

Features Decode and dump $LogFile records and transaction entries. Decode NTFS attribute changes. Optionally resolve all datarun list information available in $LogFile. Option: "Reconstruct data runs". Recover transactions from slack space within $LogFile. Choose to reconstruct missing or damaged...

polymaster

Whale Watcher NOTE: repo is transitioning to a full featured trading bot, openclaw like agent that you talk in your telegram with power yo deploy a team of agents to perform research before making a decision. A Rust CLI tool that monitors large transactions on Polymarket and Kalshi prediction...

CVE-2026-1337

CVE-2026-1337 - Neo4j - Log Injection Log injection by an authenticated user is possible in the Neo4j query.log when Neo4j is not configured to be in json format. Summary Neo4j does not escape control characters in the metadata field when of a bolt transaction. An autenticated user could send...

Dumpy

Description This tool dynamically calls MiniDumpWriteDump to dump lsass memory content. This process is done without opening a new process handle to lsass and using DInvokers to make it harder to detect its malicious behaviour. In order to obtain a valid process handle without calling OpenProcess...

CVE-2015-6620-POC

CVE-2015-6620-POC-1 POC for one bug in CVE-2015-6620-1 ANDROIDID-24123723, AMessage unmarshal arbitrary write. The two bugs are merged to one CVE, and here is POC for one of them. Explaination 533 sp AMessage::FromParcelconst Parcel &parcel 534 int32t what = parcel.readInt32; 535 sp msg = new...

CVE-2026-41651

CVE-2026-41651 CVSS 3.x : 7.8 HIGH CWE : CWE-367 Time-of-Check Time-of-Use Fix : PackageKit 1.3.5+ Affects : PackageKit 1.0.2 – 1.3.4 Local privilege escalation via TOCTOU race condition in PackageKit's D-Bus transaction handler. Any unprivileged local user can install arbitrary packages as root ...

Wallet-Transaction-Monitor

Wallet Transaction Monitor This script monitors a Bitcoin wallet address and notifies the user when there are changes in the balance or new transactions. It provides real-time updates on incoming and outgoing transactions, along with the corresponding amounts and timestamps. Additionally, it can...

EUVD-2026-109205

The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifies that they belong together: commerceTransactionHash — selects which Craft Commerce transaction is completed id — selects which Mollie payment is queried for its status An unauthenticated attacker...

CVE-2026-79980 Predictable and reused DHCPv4 transaction identifier allows spoofed DHCP replies to reconfigure gateway and DNS

The DHCPv4 client in subsys/net/lib/dhcpv4/dhcpv4.c maintained its transaction identifier iface-config.dhcpv4.xid as a counter rather than as a per-transaction random value. It was seeded once with sysrand32get in dhcpv4startinternal, incremented by one in dhcpv4senddiscover and dhcpv4senddecline...

CVE-2026-114354 DJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as root

Missing authorization in the native binder service 'android.dji.server' transaction code 1018 in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local application with no permissions to execute arbitrary OS commands as root, because the handler passes a caller-supplie...

CVE-2026-114354

The DJI CrystalSky ZS600C firmware (v0.3.9.7 through v0.6.6.9) on Android is vulnerable to a command injection vulnerability due to missing authorization in the native binder service 'android.dji.server' (transaction code 1018). A local application with no permissions can execute arbitrary OS com...

Linux Distros Unpatched Vulnerability : CVE-2026-111804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards unvalidated guest-supplied metric IDs to the...

DEBIAN-CVE-2026-111804

Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards unvalidated guest-supplied metric IDs to the internal stats API. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.4, 10.2.0. Users are recommended to upgrade to...