RAT-via-Telegram

RAT-via-Telegram Dviros's notes: Windows Remote Post Breach Tool via Telegram Python 2.7, Originally created by Ritiek, Forked and modified by mvrozanti and then myself. The whole purpose of this tool is to demonstrate as a "PoC" the control of an already breached machine, via Telegram. As the sa...

peda

peda PEDA - Python Exploit Development Assistance for GDB Key Features: Enhance the display of gdb: colorize and display disassembly codes, registers, memory information during debugging. Add commands to support debugging and exploit development for a full list of commands use peda help: aslr --...

RAT-via-Telegram

RAT über Telegram Windows-Fernverwaltungstool über Telegram jetzt in Python 3.7! | Ursprünglich erstellt von Ritiek Warum noch eines? Die derzeitigen Remote-Verwaltungstools auf dem Markt haben zwei Hauptprobleme: Mangel an Verschlüsselung. Erfordern Portweiterleitung, um aus Hunderten von...

CVE-2026-23745-via-graphql-DEMO

Questo repository non contiene un README...

RAT-via-Telegram

Questo progetto non è più mantenuto da me. Per la versione più recente e mantenuta, dai un'occhiata a https://github.com/mvrozanti/RAT-via-Telegram. Dichiarazione di non responsabilità: Questo strumento e tutte le sue versioni derivate fork sono destinati esclusivamente a scopi educativi/di...

MCExtractor

MCExtractor Intel, AMD, VIA & Freescale - Ferramenta de Extração de Microcódigo MC Extractor News Feed MC Extractor Discussion Topic Intel, AMD, VIA & Freescale CPU Microcode Repositories A. Sobre o MC Extractor O MC Extractor é uma ferramenta que analisa binários de microcódigo de processadores...

sish

sish Open source SSH tunneling for HTTPS, WSS, TCP, aliases, and SNI. If you like the simplicity of serveo/ngrok-style sharing but want to use plain SSH and run your own infrastructure, sish is built for that. No custom client required for end users Public and private tunnel workflows Docker and...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Check instead of asserting on nested TSC scaling support Check for nested TSC scaling support on nested SVM VMRUN instead of asserting that TSC scaling is exposed to L1 if L1’s MSRAMD64TSCRATIO has diverged from KVM’s...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Viawdt: fixed a critical boot hang caused by unnamed resource allocation. The VIA watchdog driver uses allocateresource to reserve a MMIO region for the watchdog control register. However, the allocated resource was not given a...

PT-2026-79662

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fib nlmsg size function where nexthop space is incorrectly estimated by assuming every gateway is encoded as an IPv4 RTA GATEWAY attribute. Because IPv4 routes can...

CVE-2026-68921

In DiceBear versions prior to 9.4.3, @dicebear/core interpolates the rotate option without XML escaping in addRotate (svg.ts), and @dicebear/initials emits fontSize/fontWeight unescaped (index.ts). Runtime callers can pass strings despite numeric types, break out of attributes, and inject arbitra...

CVE-2026-70667

creationtimestamp| type| source ---|---|--- 2026-08-18 22:35:16+00:00| published-proof-of-concept| https://github.com/Netflix/lemur/security/advisories/GHSA-f3qq-49m6-rw8f 2026-08-19 08:31:37+00:00| seen| https://gist.github.com/alon710/db3f4019c2372dbb6dfede560d6093f7...

TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT. "TWINLOOT is a modular, PyArmor-hardened Python implant designed to operate its entire command-and-control infrastructure inside trusted Microsoft services," Ontinue said in a...

CVE-2026-75827 Grav before 2.0.15 Arbitrary File Write via error_log

Grav before 2.0.15 contains an arbitrary file write vulnerability in the Blueprint dynamic-data bare-function validation that uses an incomplete denylist instead of a positive allowlist. Attackers with page-edit or blueprint-config access can invoke the errorlog function through a data directive ...

Important: python-urwid

Issue Overview: The urwid web display backend urwid/display/web.py generates web session identifiers urwidid in Screen.start by concatenating two random.randrange109 calls that use Python's Mersenne Twister PRNG, which is not cryptographically secure. Each call consumes approximately 30 bits of...

gitea -- Multiple vulnerabilities

Gitea reports This release addresses the following security vulnerabilities. Please upgrade as soon as possible. Unauthenticated arbitrary file read via the Org-mode INCLUDE directive. Remote code execution via the diffpatch API through Git hook installation...

Exploit for CVE-2026-64638

XSS2Shell — CVE-2026-64638 PoC WordPress Pre-Auth XSS → RCE e...

CVE-2026-20337

creationtimestamp| type| source ---|---|--- 2026-08-07 17:50:55+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117055491493877536 2026-08-08 14:02:58+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mslae2k27x2n 2026-08-08 14:03:05+00:00| seen|...

Malicious code in chai-assertions-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a83cd9353779d12538e8c6b06276178f6f0c246abd7d5148ce805536cbf57f The package is published as a Chai assertions extension, but the shipped code in index.js and lib/ is unrelated Pino logger source used as filler...

Malicious code in sme-crm-services-sme-crm-services-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ec89cd09f6d62ee7e1a0e509712ee53f41f3ebba4139453cf1e3a1080fe3c9 On require of the package, index.js loads vendor.js which selects an OS/architecture-specific URL path, downloads an opaque binary over HTTPS from...