bitcoin

Bitcoin Core integration/staging tree https://bitcoincore.org Для готовой к использованию бинарной версии программного обеспечения Bitcoin Core см. https://bitcoincore.org/en/download/. Что такое Bitcoin Core? Bitcoin Core подключается к пиринговой сети Bitcoin для загрузки и полной проверки блок...

Orbit

ＯＲＢＩＴ Инструмент для исследования блокчейн-транзакций 3.2-blue.svg" Введение Orbit предназначен для исследования сети блокчейн-кошелька путем рекурсивного обхода истории транзакций. Данные визуализируются в виде графа, чтобы выявить основные источники, приёмники и подозрительные связи. Примечание...

polymaster

Whale Watcher ПРИМЕЧАНИЕ: репозиторий превращается в полнофункционального торгового бота — openclaw-подобного агента, с которым вы общаетесь в Telegram и который может разворачивать команду агентов для проведения исследования перед принятием решения. Rust CLI-инструмент для отслеживания крупных...

LogFileParser

기능 $LogFile 레코드와 트랜잭션 항목을 디코딩하고 덤프합니다. NTFS 속성 변경을 디코딩합니다. 선택적으로 $LogFile에서 사용 가능한 모든 데이터런 목록 정보를 해석합니다. 옵션: "Reconstruct data runs". $LogFile 내의 슬랙 공간에서 트랜잭션을 복구합니다. 슬랙에서 발견된 트랜잭션의 누락되거나 손상된 헤더를 재구성하도록 선택합니다. 옵션: "Rebuild header". 선택적으로 LSN 오류 수준 값으로 결과를 미세 조정합니다. 옵션: "LSN error level". csv로 로깅하...

CVE-2026-1337

CVE-2026-1337 - Neo4j - 로그 인젝션 Neo4j가 json 형식으로 구성되지 않은 경우, 인증된 사용자가 Neo4j query.log에 로그 인젝션을 수행할 수 있습니다. 요약 Neo4j는 bolt 트랜잭션의 메타데이터 필드에서 제어 문자를 이스케이프하지 않습니다. 인증된 사용자는 줄바꿈\n을 주입하여 가짜 로그 항목을 주입하기 위해 제어 문자를 보낼 수 있습니다. 첨부된 POC 코드에서 다음 쿼리들은 둘 다 정상으로 보이도록 query.log에 추가되지만, 실제로는 첫 번째 쿼리만 정상입니다. 인젝션으로 인...

theo

Theo Obsolete, not maintained anymore, don't install it, don't use it, you were warned! Theo aims to be an exploitation framework and a blockchain recon and interaction tool. Features: Automatic smart contract scanning which generates a list of possible exploits. Sending transactions to exploit a...

CVE-2026-105989

The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or request-validation checks on one of its AJAX actions, allowing unauthenticated attackers to forge the stored transaction status of records and to write the Accept PayPal Payments...

CVE-2026-105989

The Accept PayPal Payments using Contact Form 7 WordPress plugin, in versions before 4.0.7 , is vulnerable to unauthenticated transaction status forgery. The root cause is a lack of authorization and request-validation checks on one of its AJAX actions. This allows an unauthenticated attacker to ...

CVE-2026-105989 Accept PayPal Payments using Contact Form 7 < 4.0.7 - Unauthenticated Transaction Status Forgery

The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or request-validation checks on one of its AJAX actions, allowing unauthenticated attackers to forge the stored transaction status of records and to write the Accept PayPal Payments...

Wallet-Transaction-Monitor

Moniteur de transactions de portefeuille Ce script surveille une adresse de portefeuille Bitcoin et notifie l'utilisateur en cas de changement de solde ou de nouvelles transactions. Il fournit des mises à jour en temps réel sur les transactions entrantes et sortantes, ainsi que les montants et...

CVE-2015-6620-POC

CVE-2015-6620-POC-1 POC pour un bug dans CVE-2015-6620-1 ANDROIDID-24123723, écriture arbitraire lors du démarshalage d'AMessage. Les deux bugs ont été fusionnés en un seul CVE, et voici le POC pour l'un d'eux. Explication 533 sp AMessage::FromParcelconst Parcel &parcel 534 int32t what =...

KTM_POCS

KTMPOCS Ce dépôt contient les rapports pour CVE 2024-43570 et CVE 2024-43535, deux vulnérabilités que j'ai trouvées dans le pilote Windows Kernel Transaction Manager tm.sys. Ce dépôt contient également le code d'exploitation que j'ai utilisé pour les démos dans la présentation OffensiveCon25 :...

CVE-2026-94244

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing every customer's wallet transaction history, allowing any authenticated user,...

CVE-2026-105197

The Appointment Booking Plugin WordPress plugin before 5.6.5 does not verify that a backend staff user is authorized to act on the specific record targeted for deletion, allowing an authenticated user with a record-scoped staff role to irreversibly delete any order, customer, or transaction on th...

EUVD-2026-94750

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing every customer's wallet transaction history, allowing any authenticated user,...

CVE-2026-94244 Wallet System for WooCommerce < 2.8.0 - Subscriber+ Store-Wide Wallet Transaction Disclosure via Export

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end page, before generating a report containing every customer's wallet transaction history, allowing any authenticated user,...

WordPress Wallet System for WooCommerce plugin < 2.8.0 - Subscriber+ Store-Wide Wallet Transaction Disclosure vulnerability

Subscriber+ Store-Wide Wallet Transaction Disclosure vulnerability discovered by Sanyam Jain, Astra Security in WordPress Plugin Wallet System for WooCommerce versions 2.8.0...

CVE-2026-105197

The LatePoint (Appointment Booking Plugin) for WordPress is vulnerable in versions before 5.6.5 . The software fails to verify if a backend staff user is authorized to act on a specific record during a deletion request. This Insecure Direct Object Reference (IDOR) flaw allows an authenticated use...

regipy

regipy ⚠️ Breaking Changes in v6.0.0 Version 6.0.0 includes significant modernization changes: Python 3.9+ required - Dropped support for Python 3.6, 3.7, and 3.8 attrs library removed - Data classes now use Python's built-in dataclasses module If your code imports internal classes Cell,...

CVE-2026-95112 Gitea issue reference parsing CPU exhaustion

When processing issue and comment bodies, Gitea scanned the entire preceding text for action keywords such as "closes" or "fixes" once per Markdown link, giving processing time quadratic in the input size. An authenticated user able to submit issue or comment content could send a crafted body of...