lst2x64dbg

lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example $...

demo-cve-2022-21449

Demo Project: CVE-2022-21449 Vulnerability This project demonstrates the CVE-2022-21449 vulnerability, which affects Java's ECDSA signature verification. The vulnerability allows a malicious actor to bypass signature verification by using a signature with zero values r=0 and s=0. The project uses...

CVE-2026-24061

CVE-2026-24061 CVE-2026-24061 Batch Scanning Tool How to use options: -h, --help show this help message and exit -t, --target TARGET Target IP/CIDR or comma-separated list repeatable -f, --file FILE File with targets IP/CIDR, one per line or comma-separated -p, --port PORT Target ports, default 2...

PrivateGPT - Server-Side Request Forgery via UriArtifact

Zylon PrivateGPT 1.0.0/1.0.1 contains a server-side request forgery caused by manipulation of the Value argument in loadfilefromuri function of URI Artifact Loader, letting remote attackers initiate SSRF, exploit requires crafted request. id: CVE-2026-116000 info: name: PrivateGPT - Server-Side...

WordPress Redux Framework <=4.2.11 - Information Disclosure

WordPress Redux Framework plugin through 4.2.11 is susceptible to information disclosure. The plugin registers several unique AJAX actions available to unauthenticated users in the includes function in redux-core/class-redux-core.php. These are predictable, given that they are based on an md5 has...

CVE-2024-48762

CVE-2024-48762 Description Command injection vulnerability in /usr/www/application/models/settingscamera.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter. POC GET /settings/applyfirmware/;idtest123.txt;/false HTTP/1.1 Host: XXXX Response HTTP/1.1 20...

CVE-2020-0796

CVE-2020-0796 Integer Overflow Vulnerability By inserting a value larger than what can be stored in the OriginalCompressedSegmentSize field, the variable cannot handle this value and unintentionally interprets it as a very small number or a negative value. This can cause unexpected behavior in th...

bincat

Introduction What is BinCAT? BinCAT is a static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA or using Python for automation. It features: value analysis registers and memory taint analysis type reconstruction and propagation backward and forward analysis...

redteam-plan

🔥 🚒 Planning a Red Team exercise This document helps inform red team planning by contrasting against the very specific red team style described in Red Teams. This method expresses several biases to optimize for blue team value and enthusiasm. It specifically avoids attempts to motivate by red tea...

CVE-2022-22980

CVE-2022-22980 Spring Data MongoDB SpEL Expression Injection MongoDB is a document-oriented NoSQL database with the scalable and flexible that used for high volume data storage. Instead of using tables and rows as in the traditional relational databases, MongoDB makes use of collections and...

gstreamer1 security update

An update is available for gstreamer1. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gstreamer1 packages contain a streaming media framework, based on...

RLSA-2026:99129 Important: gstreamer1 security update

The gstreamer1 packages contain a streaming media framework, based on graphs of filters which operate on media data. Security Fixes: gstreamer: gstreamer: Use-after-free in GStreamer core buffer value deserialization CVE-2026-125704 For more details about the security issues, including the impact...

RLSA-2026:99228 Important: gstreamer1 security update

The gstreamer1 packages contain a streaming media framework, based on graphs of filters which operate on media data. Security Fixes: gstreamer: gstreamer: Use-after-free in GStreamer core buffer value deserialization CVE-2026-125704 For more details about the security issues, including the impact...

gstreamer1 security update

An update is available for gstreamer1. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gstreamer1 packages contain a streaming media framework, based on grap...

RLSA-2026:97521 Important: microcode_ctl security, bug fix, and enhancement update

The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 Bug Fixes and Enhancements: Rocky Linux 9 Update Intel CPU microcode to the latest...

RLSA-2026:99090 Important: gstreamer1 security update

The gstreamer1 packages contain a streaming media framework, based on graphs of filters which operate on media data. Security Fixes: gstreamer: gstreamer: Use-after-free in GStreamer core buffer value deserialization CVE-2026-125704 For more details about the security issues, including the impact...

gstreamer1 security update

An update is available for gstreamer1. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gstreamer1 packages contain a streaming media framework, based on grap...

CVE-2020-23342

CVE-2020-23342 Note: When pulling this repository and running it with Docker in a local VM, remember to change the host value on line 24 of config.py to the VM's IP address...

CVE-2023-4863

all credit goes to DARKNAVY's script. This is just a modified version with the OFFSET and VALUE constants added to the top of the file to make it easier to adjust...

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...