ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

CVE-2025-32432

CraftCMS CVE-2025-32432 Exploit By Chirag Artani Overview This repository contains a proof-of-concept exploit script for CVE-2025-32432, a pre-authentication Remote Code Execution RCE vulnerability affecting CraftCMS versions 4.x and 5.x. The vulnerability exists in the asset transform generation...

haptyc

Haptyc Test Generation Framework What's Haptyc? Haptyc is a python library which was built to add payload position support and Sniper/Clusterbomb/Batteringram/Pitchfork attack types into Turbo Intruder. While Haptyc accomplishes these goals fairly well it also introduces a simpler way to express...

backdoorppt

backdoorppt - 'Office spoof extensions tool' Version release: v1.7-Stable Author: pedro ubuntu r00t-3xp10it Distros Supported: Linux Kali, Ubuntu, Mint Suspicious-Shell-Activity© SSA RedTeam develop @2017 Transform your payload.exe into one fake word doc .ppt Simple script that allow users to add...

ogi-transforms

OGI Transform Registry Community transforms for OGI, an open source OSINT and link analysis tool. How it works Each directory under transforms/ is an independently installable transform. The OGI CLI and Transform Hub UI read index.json auto-generated on each merge to discover what's available...

serverless-application-model

AWS SAM 转换 AWS Serverless Application Model（AWS SAM）转换是一个 AWS CloudFormation 宏，可将 SAM 模板 转换为 CloudFormation 模板。 要使用 SAM 转换，请将 AWS::Serverless-2016-10-31 添加到 CloudFormation 模板的 Transform 部分 中。 使用 SAM 转换的好处包括： 内置最佳实践和合理的默认配置。 通过 AWS SAM CLI 进行本地测试和调试。 扩展 CloudFormation 模板语法。 入门 将以下内容保存为...

holehe

Holehe OSINT - Email to Registered Accounts 👋 Hi there! For any professional inquiries or collaborations, please reach out to me at: [email protected] 📧 Preferably, use your professional email for correspondence. Let's keep it short and sweet, and all in English! Holehe Online Version Summar...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

sploitego

Sploitego - Maltego의 로컬 공범 1.0 - 소개 Sploitego는 Canari Framework를 사용하여 Maltego에서 로컬 변환transform을 실행하는 로컬 침투 테스트 변환 패키지입니다. 이 프레임워크는 DEFCON 20에서 처음 소개되었으며 그 이후로 점점 인기를 얻고 있습니다. 2.0 - Sploitego 설치하기 2.1 - 지원 플랫폼 Sploitego는 현재 Mac OS X와 Linux에서 테스트되었습니다. 2.2 - 요구 사항 Sploitego는 Python 2.6 버전에서만 지원됩니다...

CVE-2025-32432-POC

Craft CMS CVE-2025-32432 단일 대상 PoC 승인된 테스트만 허용됩니다. 이 저장소는 통제된 실습 환경, Hack The Box와 같은 CTF 플랫폼, 내부 검증 및 방어적 검증을 위한 것입니다. 귀하가 소유하지 않거나 명시적 테스트 허가를 받지 않은 시스템에 대해 실행하지 마십시오. 개요 이 프로젝트는 CVE-2025-32432 에 대한 단일 대상 개념 증명PoC을 포함하며, 이는 Craft CMS의 사전 인증 원격 코드 실행 문제입니다. PoC는 두 단계로 수행됩니다: 1. 취약점 확인 : Craft CM...

Linux Distros Unpatched Vulnerability : CVE-2026-91135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB transform for the frames it sends,...

CVE-2026-63772 Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-91135

Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB transform for the frames it sends, THeaderTransport::transform copies the compressed frame into the write buffer without making sure it fits. Data that does not compress, such as...

AZL-105425 CVE-2026-91135 affecting package thrift 0.24.0-1

Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB transform for the frames it sends, THeaderTransport::transform copies the compressed frame into the write buffer without making sure it fits. Data that does not compress, such as...

CVE-2026-91135 Apache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction)

Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB transform for the frames it sends, THeaderTransport::transform copies the compressed frame into the write buffer without making sure it fits. Data that does not compress, such as...

EUVD-2026-91374

Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB transform for the frames it sends, THeaderTransport::transform copies the compressed frame into the write buffer without making sure it fits. Data that does not compress, such as...

CVE-2026-91135

Apache Thrift versions before 0.25.0 are vulnerable to a heap-based buffer overflow in the C++ THeaderTransport component. The flaw exists in the THeaderTransport::transform() function when the ZLIB transform is enabled; the system copies compressed frames into the write buffer without verifying ...

CVE-2026-91135 Apache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction)

Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB transform for the frames it sends, THeaderTransport::transform copies the compressed frame into the write buffer without making sure it fits. Data that does not compress, such as...

CVE-2026-18953

CVE-2026-18953 — PoC 任意のファイル書き込みを awslabs.aws-transform-mcp-server AWS Transform MCP サーバー において、getresource ツールの savePath パラメータ経由で行うものです。 | ---|--- CVE| CVE-2026-18953 CWE| CWE-22 — 制限付きディレクトリへのパス名の不適切な制限 影響を受けるバージョン| awslabs.aws-transform-mcp-server 0.1.0 – 0.1.4 修正バージョン| 0.1.5 CVSS v3.1| 8.6 HIG...

CVE-2026-47506

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel-mode color transform path where excessive kernel stack use occurs when evaluating YCbCr420 display emulation. A successful exploit of this vulnerability might lead to denial of service...