openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

py

如果你发现任何 bug，请在 Github 用户 issues 中报告 仍在开发中 支持 win7 到 win11（最后） MCP 配置 / MCP 使用方法 PYArkClient 内置一个 MCP Streamable HTTP 服务端 ，任意 MCP 客户端（Claude Code / Claude Desktop / CodePilot 等）都能调用它提供的内核级 ARK 工具（进程 / 线程 / 模块 / 内存 / SSDT / 回调 / 注入 / dump 等）。 1. 前置条件 以 管理员 身份运行 PYArkClient.exe（工具需要驱动连接；未连接时调用工具会返回...

binlex

| Binlex - 二进制基因性状词法分析框架 如果恶意软件开发者认为他们的二进制文件是 FUD（完全免杀），他们即将面临一场存在主义危机。 ---|--- Binlex 从二进制文件中提取指令、基本块和函数，并输出可搜索的 JSON 性状，用于逆向工程、威胁狩猎和相似性分析工作流。它采用受基因组学启发的层级结构对二进制结构进行建模：基因组（指令、基本块、函数）、染色体（通配符模式）、等位基因对（字节）和基因（半字节）。这种表示方式通过支持跨大规模样本集的模式级比较、聚类和签名生成，使恶意软件分析和二进制相似性分析更加系统化。 功能特性 🧬 快速提取指令、基本块和函数的性状 🔐...

CVE-2026-15929

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in LG Electronics SmartShare allows SQL Injection. This issue affects SmartShare: through 2.3.1712.1202, which is supported on Microsoft Windows 10 and earlier versions...

mariadb: Arbitrary shell command execution via improper sanitization in CONNECT engine

A flaw was found in MariaDB server. When the CONNECT engine is installed and REST support is enabled on Windows, a user can exploit improper sanitization of the table HTTP attribute. This attribute is interpolated into the curl command line, allowing for arbitrary shell command execution on the...

[SECURITY] Fedora 42 Update: mingw-python3-3.11.15-4.fc42

MinGW Windows python3...

EUVD-2026-17531

PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely. PAGI::Middleware::Session::Store::Cookie attempts to read bytes from the /dev/urandom device directly. If that fails for example, on systems without the device, such as Windows, then it...

Exploit for Type Confusion in Apple Ipados

🛡️ corunaanalysis - Understand Malware Exploit Behavior Simpl...

Exploit for CVE-2026-2472

🚨 CVE-2026-2472-Vertex-AI-SDK-Google-Cloud - Simple Proof of C...

Wireshark Analyzer 4.6.4

Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers. Thi...

[SECURITY] Fedora 42 Update: freerdp-3.21.0-1.fc42

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

CVE-2025-11235

Progress MOVEit Transfer on Windows REST API modules is affected by an unverified password change vulnerability. Affected versions include MOVEit Transfer 2022.0.0–2022.0.10, 2022.1.0–2022.1.11, 2023.0.0–2023.0.8, and 2023.1.0–2023.1.3. The issue is documented across multiple sources (including R...

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell – Advanced Discovery & Exploitation Framework An...

CVE-2025-2534

IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows includes Db2 Connect Server is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

CVE-2025-11953 Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests

The Metro Development Server, which is opened by the React Native Community CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary...

[SECURITY] Fedora 41 Update: mingw-python3-3.11.14-1.fc41

MinGW Windows python3...

July 8, 2025—KB5062597 (Monthly Rollup)

None None...

shelling

This repository is an offensive tool for OS command injection. It is a comprehensive OS command injection payload generator, suitable for detecting OS command injection vulnerabilities. The tool, named SHELLING, provides a customizable payload generator with various features, including support fo...

thunderbird: Information Disclosure of /tmp directory listing

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory listing of /tmp when the message is forwarded or edit...

OPENSUSE-SU-2025:0110-1 Security update for restic

This update for restic fixes the following issues: Update to 0.18.0 - Sec 5291: Mitigate attack on content-defined chunking algorithm - Fix 1843: Correctly restore long filepaths' timestamp on old Windows - Fix 2165: Ignore disappeared backup source files - Fix 5153: Include root tree when...