BlueBunny

C2 solution that communicates directly over Bluetooth-Low-Energy with your Bash Bunny Mark II. Send your Bash Bunny all the instructions it needs just over the air. Table of contents Overview Installation & Start Manual communication with the Bash Bunny through Python Troubleshooting Working on...

ROP_ROCKET

Introducing the ROP ROCKET This new, advanced ROP framework made it debute at at DEF CON 31 with some unprecedented capabilities. ROCKET generates several types of chains, and it provides new patterns or techniques. Please note that this is still a work in progress, with some updated and enhanced...

CVE-2026-105035

creationtimestamp| type| source ---|---|--- 2026-10-15 20:50:59+00:00| seen| https://infosec.exchange/users/cve/statuses/117446899091070276...

GCVE-1337-2026-00000000000000000001111111111100000000000000000000000011111111100111111111000000000000000000011111111111111100000000000000000001111

creationtimestamp| type| source ---|---|--- 2026-10-15 20:50:59+00:00| seen| https://infosec.exchange/users/cve/statuses/117446899091070276...

CVE-2026-111157

A flaw was found in SoX. An attacker can exploit this vulnerability by tricking a user or automated system into opening a specially crafted WAV audio file. During audio decoding, an invalid block sample value causes a heap-based out-of-bounds write, leading to an application crash, resulting in a...

appspec-yaml-leaks

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install appspec-yaml-leaks Run bellow command to check appspec-yaml-leaks -h Configurations 2. We integrated with the Telegram API to...

zipdefrag

This Dump Is A Puzzle or Advanced Shotgun Parsing for Fools and Rebels il était une fois Once upon a time, dear reader, on a dark and stormy night, your faithful author stumbled upon a perplexing and mysterious situation - a system where the only thing preventing chip off memory analysis and...

CVE-2026-111125

A flaw was found in cfitsio. A heap-based out-of-bounds read vulnerability in the HCOMPRESS tile decompression logic allows an attacker who tricks a user or system into processing a crafted Flexible Image Transport System FITS file with oversized tile dimensions to read beyond allocated memory...

ASSAMEE

ASSAMEE ASSAMEE is a free advanced encryption tool that can be used to encrypt files and directories and store them on Anonfiles.com. It uses AES-256 encryption, which is a strong and secure encryption method. To access the encrypted files, a download ID is required to decrypt and download the da...

CVE-2026-111124

A flaw was found in cfitsio. An attacker could exploit this vulnerability by supplying a specially crafted Flexible Image Transport System FITS file containing compressed image data with invalid dither parameters. When processed by an application using the library, this flaw triggers an...

HackBot

HackBot - AI Cybersecurity Chatbot | | | | | | | | | | || |/ |/ | |/ / \ / | | By: Morpheuslord | | | | | | | | | | AI used: Meta-LLama2 || ||,|||\/ / | Introduction Welcome to HackBot, an AI-powered cybersecurity chatbot designed to provide helpful and accurate answers to your...

CVE-2026-109932

A flaw was found in undici. A malicious or compromised WebSocket server can trigger a Denial of Service DoS by repeatedly sending small PING messages while refusing to read the client's automated replies. Because the client ignores flow-control signals when writing responses to the network socket...

GCVE-1337-2026-00000000000000000001111111111100000000000000000000000011111111001111111111000000000000000000010110111111111100000000000000000001110

creationtimestamp| type| source ---|---|--- 2026-10-15 20:50:19+00:00| seen| https://infosec.exchange/users/cve/statuses/117446896450735236...

CVE-2026-105034

creationtimestamp| type| source ---|---|--- 2026-10-15 20:50:19+00:00| seen| https://infosec.exchange/users/cve/statuses/117446896450735236...

aem-xss

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install aem-xss Run bellow command to check aem-xss -h Configurations 2. We integrated with the Telegram API to receive instant...

CVE-2024-0012_CVE-2024-9474_PoC

🚀 CVE-2024-0012 & CVE-2024-9474 Palo Alto PAN-OS Exploit 🔐 🛡️ Description This Proof-of-Concept PoC script targeting vulnerabilities in Palo Alto PAN-OS, specifically CVE-2024-0012 and CVE-2024-9474 by automating the exploitation process, including autentication bypass, payload creation, chunked...

XSS-Catcher

XSS Catcher A blind XSS detection and XSS data capture framework that runs on Flask, VueJS and PostgreSQL. XSS Catcher is an intuitive tool that automates blind Cross-Site Scripting XSS attacks and data gathering, including screenshots. It features a user-friendly payload generator for creating...

GCVE-1337-2026-00000000000000000000000000000000000000000000000001110111111110111111111111000000000000000000000000000000000000000000000000000001101

creationtimestamp| type| source ---|---|--- 2026-10-15 20:49:39+00:00| seen| https://infosec.exchange/users/cve/statuses/117446893807963157...

CVE-2026-105033

creationtimestamp| type| source ---|---|--- 2026-10-15 20:49:39+00:00| seen| https://infosec.exchange/users/cve/statuses/117446893807963157...

QuestStack

QuestStack QuestStack is a Meta Quest root and bootloader unlocking project. Using the GhostLock privilege escalation chain and the CVE-2021-1931 ABL/fastboot vulnerability, QuestStack provides a way to gain root access on the latest Quest 1 firmware, temporarily boot using a vulnerable ABL, and...