tusk-cli

!IMPORTANT Previously used tusk-drift-cli? This repo has moved to tusk-cli, and older installed CLI versions may not auto-update across the rename. Please reinstall using the current install instructions below. The Tusk CLI provides tools for automated testing workflows. It supports three product...

Unit42-timely-threat-intel

Unit42-Timely-Threat-Intel This repository contains files with indicators supporting social media posts designed to disseminate timely threat intelligence data from Palo Alto Network's Unit 42 team. This information is provided "as is" to the public...

Swift-Attack

Swift-Attack Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods. I have included some post exploitation examples using both command line history and API calls. The post exploitation examples included here are not all encompassing. Instead the...

bitcracker

BitCracker BitCracker is the first open source password cracking tool for storage devices Hard Disk, USB Pendrive, SD card, etc... encrypted with BitLocker, an encryption feature available on Windows Vista, 7, 8.1 and 10 Ultimate, Pro and Enterprise editions. BitLocker offers a number of differen...

CVE-2026-116568

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, rtmprtmp2rtpH264 trusted the length prefix of each inbound H.264 NAL unit without checking it...

reposaur

Reposaur Reposaur is the open source compliance tool for development platforms. Audit, verify and report on your data and configurations easily with pre-defined and/or custom policies. Supports GitHub. GitLab, BitBucket and Gitea support soon. ⚠️ before 1.0.0 expect some bugs and API changes ⚠️...

CVE-2024-31317

CVE-2024-31317 Preface A couple of days ago, I saw an analysis of the CVE-2024-31317 vulnerability posted on JD's official account. After reading it through, I found it quite interesting. Moreover, the current mainstream solutions for automotive IVI In-Vehicle Infotainment are all based on Androi...

PHPunit-Exploit

PHPunit Exploiter + Checker CVE-2017-9841 Overview : PHPUnit is a unit test framework for the PHP programming language. This is a sample xUnit architecture for a unit testing framework that originated with SUnit and became popular with JUnit. PHPUnit was created by Sebastian Bergmann Installation...

Unit42-Threat-Intelligence-Article-Information

Unit42-Threat-Intelligence-Article-Information This is the repository for indicators of compromise IOCs and other data supporting threat intelligence articles posted on the Palo Alto Networks Unit 42 website...

CVE-2026-22012-Diameter-Protocol-Credit-Control-Bypass-in-5G

CVE-2026-22012 – Diameter Protocol Credit‑Control Bypass in 5G Program Code Python Diameter sim diametercreditcontrolsim.py - Simulated OCS with missing final-unit indication class OCS: def processCCRself, request: Vulnerability: always returns SUCCESS with same quota, never sends final-unit retu...

UTopia

Introduction UTopia is a tool for automatically generating fuzz drivers from unit tests. UTopia will let developers perform fuzz testing without special knowledge about writing fuzzers. Even developers familiar with fuzzing can save significant time by generating fuzz drivers automatically. UTopi...

CustomProcessingUnit

Custom Processing Unit Custom Processing Unit is the first dynamic analysis framework able to hook, patch and trace CPU microcode at the software level. It works by leveraging undocumented instructions in Intel CPUs that allow access to the CRBUS. Using our microcode decompiler we reverse...

CVE-2026-25596

CVE-2026-25596 — Stored XSS via Product Unit Name in InvoicePlane 1.7.0 Vulnerability: Stored Cross-Site Scripting XSS via Product Unit Name field Product: InvoicePlane Affected Version: 1.7.0 and likely prior versions Severity: Medium CVSS 3.1 Score: 4.8...

gatekeeper-cve-2020-8554

Gatekeeper constraint for CVE-2020-8554 Install OPA client Follow the instructions. Run unit tests $ opa test --ignore=.yaml ./policies verbose output $ opa test -v --explain=full --format=pretty --ignore=.yaml ./policies...

Bloatware in Aftermarket Auto Parts

This story is interesting: One Civic owner purchased a cheap aftermarket head unit off Amazon, and decided to have Claude work its magic on it, like it would a smart TV. What was reportedly discovered isn’t surprising, but is worth knowing about. Among the pre-installed bloatware--­or spyware, if...

CVE-2026-79752

CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, and FunctionsBuilder::dateAdd in src/Database/FunctionsBuilder.php accept user-controlled dataType, part, or unit valu...

com.vaadin:vaadin-jandex (>=23.6.0, <=23.6.16), com.vaadin:vaadin-platform-javadoc (>=23.6.0, <=23.6.16) +1 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=23.6.0, <=23.6.16)

com.vaadin:vaadin MAVEN version =23.6.0, =23.6.0, =23.6.0, =8.3.1, =8.3.4 Source cves: CVE-2026-110737 Source advisory: SNYK:JAVA-COMVAADIN-21755465...

com.vaadin:vaadin-jandex (>=24.10.0, <=24.10.11), com.vaadin:vaadin-platform-javadoc (>=24.10.0, <=24.10.11) +5 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=24.10.0, <=24.10.11)

com.vaadin:vaadin MAVEN version =24.10.0, =24.10.0, =24.10.0, =9.6.1, =9.6.1, =9.6.1, =9.6.1, =9.6.4 - io.github.adumeige.vaadin-reactflow:vaadin-reactflow-component 1.0.0 Source cves: CVE-2026-110737 Source advisory: SNYK:JAVA-COMVAADIN-21755465...

com.vaadin:vaadin-jandex (>=24.8.0, <=24.9.23), com.vaadin:vaadin-platform-javadoc (>=24.8.0, <=24.9.23) +4 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=24.8.0, <=24.9.23)

com.vaadin:vaadin MAVEN version =24.8.0, =24.8.0, =24.8.0, =9.4.4, =9.4.4, =9.4.4, =9.4.4, =9.5.9 Source cves: CVE-2026-110737 Source advisory: SNYK:JAVA-COMVAADIN-21755465...

com.vaadin:vaadin (>=23.6.0, <=23.6.16), com.vaadin:vaadin-core-jandex (>=23.6.0, <=23.6.16) +5 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin-core (>=23.6.0, <=23.6.16)

com.vaadin:vaadin-core MAVEN version =23.6.0, =23.6.0, =23.6.0, =23.6.0, =23.6.0, =23.6.0, =23.6.0, =8.3.1, =8.3.4 Source cves: CVE-2026-110737 Source advisory: SNYK:JAVA-COMVAADIN-21755466...