CVE-2026-24136-Lab

CVE-2026-24136 - Saleor GraphQL IDOR / Unauthenticated PII Exfiltration Overview Field| Details ---|--- CVE ID| CVE-2026-24136 Vulnerability Type| IDOR - Authorization Bypass Through User-Controlled Key CWE-639 Software| Saleor e-commerce platform Affected Versions| 3.2.0 - 3.20.109 · 3.21.0 -...

SauronEye

SauronEye SauronEye is a search tool built to aid red teams in finding files containing specific keywords. Features : Search multiple network drives Search contents of files Search contents of Microsoft Office files .doc, .docx, .xls, .xlsx Find VBA macros in old 2003 .xls and .doc files Search...

tun2socks

Features Universal Proxying : Transparently routes all network traffic from any application through a proxy. Multi-Protocol : Supports HTTP/SOCKS/Shadowsocks/SSH/Relay proxies with optional authentication. Cross-Platform : Runs on Linux/macOS/Windows/FreeBSD/OpenBSD with platform-specific...

CVE-2025-8110

CVE-2025-8110 — Gogs = 0.13.3 Arbitrary File Write via Symlink Traversal Overview Gogs = 0.13.3 is vulnerable to arbitrary file write through the PutContents API /api/v1/repos/:owner/:repo/contents/:path. The API validates file paths for directory-traversal sequences ../ but does not resolve...

BiBi-Windows-Wiper-Analysis

Technical Analysis of BiBi-Windows Wiper Targeting Israeli Organizations On 30th October, Security Joes Incident Response team discovered a new Linux Wiper named "BiBi-Linux" Wiper been deployed by Pro-Hamas Hacktivist group to destroy their infrastructure. And then on November 1 2023, ESET...

moonwalk

moonwalk Cover your tracks during Linux Exploitation / Penetration Testing by leaving zero traces on system logs and filesystem timestamps. 📖 Table of Contents Introduction Features Installation Usage Contribution License ℹ️ Introduction moonwalk is a 400 KB single-binary executable that can clear...

Important: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

POC-CVE-2025-31931

Writeup Read it here: https://tinyhack.com/2025/11/09/cve-2025-31931-arbitrary-shared-library-loading-in-intel-itt-api-on-android-affects-opencv-4-10/...

CVE-2021-44228

Overview This repository contains OpenIOC rules to facilitate hunting for indicators of compromise related to the Apache Log4j 2 remote code execution vulnerability CVE-2021-44228. These rules are considered hunting rules and as such detection efficacy will vary by organization. With...

PacketWhisper

PacketWhisper PacketWhisper - Stealthily Transfer Data & Defeat Attribution Using DNS Queries & Text-Based Steganography, without the need for attacker-controlled Name Servers or domains; Evade DLP/MLS Devices; Defeat Data- & DNS Name Server Whitelisting Controls. Convert any file type e.g...

MemProcFS

MemProcFS: MemProcFS is an easy and convenient way of viewing physical memory as files in a virtual file system. Easy trivial point and click memory analysis without the need for complicated commandline arguments! Access memory content and artifacts via files in a mounted virtual file system or v...

CVE-2026-9560

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Example usage: Install dependencies Run the project Replace the commands...

Guardrails

NVIDIA NeMo Guardrails Library LATEST RELEASE / DEVELOPMENT VERSION : The develop branch tracks the latest top of tree development. The latest released version is 0.24.1. ✨✨✨ 📌 The official NeMo Guardrails library documentation is available atdocs.nvidia.com/nemo/guardrails. ✨✨✨ NVIDIA NeMo...

CVE-2026-42945

CVE-2026-42945 Nginx Rift - PoC Toolkit A comprehensive proof-of-concept toolkit for CVE-2026-42945 Nginx Rift, a critical heap buffer overflow vulnerability in Nginx's ngxhttprewritemodule. Vulnerability Summary Field| Details ---|--- CVE ID| CVE-2026-42945 Name| Nginx Rift Type| Heap Buffer...

CVE-2026-56782-Gorse-Auth-Bypass

CVE-2026-56782 — Gorse Unauthenticated Database Dump / Restore Auth Bypass Gorse everyone is admin if request.Header.Get"X-API-Key" == m.Config.Master.AdminAPIKey return true return false func m Master dumpresponse http.ResponseWriter, request http.Request if !m.checkAdminrequest writeErrorre...

CVE-2022-25949

CVE-2022-25949 A years-old exploit of a local EoP vulnerability in Kingsoft Antivirus KWatch Driver version 2009.3.17.77. 2009..? I reported the issue in January 2014 and was notified of the CVE 8+ years later. I decided to upload this because it is amusing enough to find my old code and that it...

CVE-2025-24071

Security Vulnerability Report: CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Overview NSFOCUS CERT has detected that Microsoft recently released a security update to address a critical spoofing vulnerability in Windows File Explorer, identified as CVE-2025-24071. This vulnerabilit...

CVE-2022-22063

CVE-2022-22063 CVE-2022-22063 is a security issue in the hypervisor firmware of some older Qualcomm chipsets. An unprotected hardware component the "boot remapper" can be abused to gain full read/write access to the hypervisor from a modified operating system privilege escalation. Exploiting the...

firezone

Blazing-fast remote access with identity-based policies, attested device trust, and detailed audit logs Documentation | Quickstart | Download Clients | Support Overview Firezone is a secure remote access platform built on WireGuard®. Connect users to private applications, databases, servers, and...

Silverseal

Silverseal - Linux Bootkit and Rust Kernel Rootkit Framework Silverseal is an open-source Linux bootkit research framework written in Rust. It demonstrates how a UEFI bootkit can hook the early Linux kernel boot process to persistently and stealthily load a Rust-based kernel module rootkit. The...