php2shell-wordpress-rce

php2shell WordPress RCE External HTTP-only RCE against the de...

sub404

Sub404: A Fast Tool To Check Subdomain Takeover Vulnerability What is Sub 404 Sub 404 is a tool written in python which is used to check possibility of subdomain takeover vulnerability and it is fast as it is asynchronous. Why During recon process you might get a lot of subdomainse.g more than 10...

reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

ransomwatch

RansomWatch RansomWatch is a ransomware leak site monitoring tool. It will scrape all of the entries on various ransomware leak sites, store the data in a SQLite database, and send notifications via Slack or Discord when a new victim shows up, or when a victim is removed. Note: RansomWatch isn't...

dmi-tcat

DMI TCAT The Digital Methods Initiative Twitter Capture and Analysis Toolset DMI-TCAT allows one to retrieve and collect tweets from Twitter and to analyze them in various ways. Installation You can find detailed installation instructions in the wiki Requirements Twitter API credentials these can...

ThreatPursuit-VM

/ || | / | \ | | \ / \ \ \ | | | Y | | \ / / | | || || || \ || |/ | \ | | \ / | | | \ \ | | | | /| | \ | | | || | | /|/ || / |/|||| || / MANDIANT THREAT INTELLIGENCE VM Version 2020.1 [email protected] Created by: Dan Kennedy Jake Barteaux @day1player Blaine Stancill @MalwareMechanic...

dns-honeypot

My First 24 Hours Running a DNS Honeypot As an engineer who spends most of my days knee-deep in observability tooling, I get the occasional idea that I just have to run with. This was one of those experiments: spin up a DNS resolver on a clean IP that nobody advertises, then let the internet talk...

CVE-2026-106765

The @rog0x/mcp-docker-tools version 1.0.1 contains a vulnerability that allows a remote attacker to perform arbitrary code execution . The flaw is specifically located within the handleImageList function. No details regarding the specific root cause, remediation, or active exploits are provided i...

EUVD-2026-109094

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...

PT-2026-122139

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...

CVE-2026-106765

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...

PT-2026-122232

The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --verbose passes a temporary registry push token on standard input to docker login --password-stdin, but the CLI subprocess helper prints command input in verbose mode. Anyone who ca...

PT-2026-122905

These are all security issues fixed in the docker-compose-5.6.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12236-1 docker-compose-5.6.1-1.1 on GA media

These are all security issues fixed in the docker-compose-5.6.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-106765

An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function...

Log4Shell-Honeypot

Log4Shell Honeypot Enhanced dockerized honeypot for CVE-2021-44228 with comprehensive security features, monitoring, and alerting capabilities. Features Enhanced Detection Comprehensive Pattern Matching : Detects 20+ Log4Shell exploit patterns including JNDI, LDAP, RMI, DNS, and environment...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-poc — Go edition A Go toolkit for CVE-2026-109618...

CVE-2026-115508

Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unbounded regular expressions in /crawl request bodies. Attackers can submit catastrophic-backtracking patterns via...

CVE-2025-65200

An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the the templateURL to the localstack/cloudformation/deploy endpoint, the hosted content can get executed in the context of the...

CVE-2026-115508 Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields

Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unbounded regular expressions in /crawl request bodies. Attackers can submit catastrophic-backtracking patterns via...