CVE-2021-26856

I have translated the chinese exploit at https://github.com/jsdryan/CVE-2021-26855 for english reader and people unfamiliar with golang just look at the png pictures...

xed

Intel® X86 Encoder Decoder Intel® XED Doxygen API manual and source build manual: https://intelxed.github.io Bugs: https://github.com/intelxed/xed/issues/new Abbreviated GITHUB building instructions: git clone https://github.com/intelxed/xed.git xed git clone https://github.com/intelxed/mbuild.gi...

chimera

Chimera Sandbox untrusted code with safe access to the host. Chimera is a userspace sandbox for code you don't fully trust — a natural fit for coding agents that run arbitrary, generated commands on a machine they share with you. It confines what a process can do to the host while still letting i...

attesor

Rosetta 2 Reverse Engineering Project A comprehensive reverse-engineering effort to understand and document Apple's Rosetta 2 binary translation technology. Table of Contents 1. Background 2. What is Rosetta? 3. What is Rosetta 2? 4. How Apple Delivers Rosetta 2 in macOS 5. Technical Architecture...

VMPacker

🛡️ VMPacker ARM64 ELF Virtual Machine Protection System Translate ARM64 native instructions into custom VM bytecode for function-level code protection 🇨🇳 中文文档 • Features • Architecture • Quick Start • Usage • License Overview VMPacker is a Virtual Machine Protection VMP system for ARM64 AArch64...

xioc

xioc Extract indicators of compromise from text, including "escaped" ones like hxxp://banana.com, 1.1.1.1 and phish at malicious dot com. Installation Download a precompiled binary from https://github.com/assafmo/xioc/releases Or... Use go get: go get -u github.com/assafmo/xioc Or... Use snap...

Hypervisor-From-Scratch

Hypervisor From Scratch A tutorial on creating a hypervisor from scratch All the parts » Part 1 · Part 2 · Part 3 · Part 4 · Part 5 · Part 6 · Part 7 · Part 8 If you're looking to use a hypervisor for analysis and reverse engineering tasks, check outHyperDbg Debugger. It's a hypervisor-based...

promptmap

O O o.-. Humans, Do Not Resist! |/ ,-'-. / /, / /|.-.| / --O-- .--""" /\ /\ | o.o / Utku Sen's /|\ -'--' / /| | - | / | | | \ /| | | ' \ '/ \ ' | ' \ | ' / | ' \ | / | | | ./| /||| ./|||,| .// / / |-----| || || || || promptmap2 is a an automated prompt injection scanner for custom LLM...

world_conqueror_4_ru

World Conqueror 4 — русский перевод и мод CMake-пайплайн: распаковывает оригинальный APK, применяет патчи и собирает подписанную русскую сборку игры. Что это Из оригинального APK World Conqueror 4 собирается русская сборка: игра декомпилируется, ресурсы расшифровываются, применяются выбранные...

page_table_walk

Capture the Flag in Physical Memory You've read about paging. The diagrams make sense. Four levels, 9 bits each, page frame, offset. Sure. But then you hit a challenge that requires actually walking page tables, and you realize you don't know it. You know about it. Big difference. What worked for...

skitter-creek-bath-salts

skitter-creek-bath-salts Unlockingeverything on the CPU with DRAM scrambling — PSP, C6, microcode, SMM, and anything else the specs left out. &x == &x. Usually. Poke the DRAM controller and an address can be made to land wherever you want in memory. skitter-creek-bath-salts modifies the bottom...

CVE-2026-104417

Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory. Attackers can manipulate the locale setting to load JSON files elsewhere on the server, exposin...

CVE-2026-104418

Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translation file loading. Attackers with administrator access can upload a crafted theme containing malicious translation files to execute arbitrary...

EUVD-2026-91429

Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translation file loading. Attackers with administrator access can upload a crafted theme containing malicious translation files to execute arbitrary...

CVE-2026-104418

Ghost versions 6.10.3 before 6.64.0 are vulnerable to remote code execution (RCE) due to an abuse of the theme translation file loading mechanism. Authenticated administrators can exploit this by uploading a crafted theme containing malicious translation files to execute arbitrary code on the Gho...

CVE-2026-104418 Ghost from 6.10.3 before 6.64.0 RCE via Theme Translation Files

Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translation file loading. Attackers with administrator access can upload a crafted theme containing malicious translation files to execute arbitrary...

CVE-2026-104417 Ghost 1.20.0 before 6.64.0 Path Traversal via Locale Setting

Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory. Attackers can manipulate the locale setting to load JSON files elsewhere on the server, exposin...

CVE-2026-104417

The Ghost platform (versions 1.20.0 before 6.64.0 ) is vulnerable to a path traversal flaw in the theme translation file loading mechanism. This issue allows authenticated administrators to manipulate the locale setting to load JSON files from locations outside the active theme directory. Success...

EUVD-2026-91428

Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory. Attackers can manipulate the locale setting to load JSON files elsewhere on the server, exposin...

Linpmem

Linpmem -- a physical memory acquisition tool for Linux Linpmem is a Linux x64-only tool for reading physical memory. Like its Windows counterpart, Winpmem, this is not a traditional memory dumper. Linpmem offers an API for reading from any physical address, including reserved memory and memory...