test_avb_key

On Almost Signing Android Builds Introduction An error sometimes encountered by NCC Group consultants is signing Android builds with known private keys. This leaves the device manufacturers and in turn their users vulnerable, even on devices where secure boot is enabled. This blog post has two...

PwnCity

PwnCity An insecurely configured TeamCity continuous integration environment. Work in progress: Deployment code coming soon eventually . Demo There may be more than one path through PwnCity, but this is the one I'll be presenting on Feb 24th at the OWASP Sacramento Chapter meeting. Note:...

system_bt_AOSP10_r33_CVE-2021-0476

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source mkdir /fluoride cd /fluoride git clone...

Packages_wpa_supplicant8_CVE-2021-0326

wpasupplicant and hostapd Copyright c 2002-2019, Jouni Malinen [email protected] and contributors All Rights Reserved. These programs are licensed under the BSD license the one with advertisement clause removed. If you are submitting changes to the project, please see CONTRIBUTIONS file for...

vivo-root-build

PD2415 6.6.89 Candidat Full-Flow Cette source est basée sur le moteur IonStack PD2415 6.6.57 du même appareil/même SoC : perf KASLR, pselect GhostLock, CFI fops, pipe physrw. La fermeture du porteur dumpstate est conservée à partir de la méthode PD2241 validée. La cible archivée 6.6.89 conserve...

Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.20.41 security update

Red Hat build of MicroShift release 4.20.41 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CVE-2026-2636

CVE-2026-2636 CVE-2026-2636 poc win1123h2226315039x64 Informations de compilation de base Version du SDK Windows : 10.0 dernière version installée Ensemble d'outils de plateforme : Visual Studio 2022 v143 Norme du langage C++ : par défaut norme ISO C++14...

CVE-2026-33017-Lab

CVE-2026-33017 — Langflow Unauthenticated RCE Lab Executive Summary CVE-2026-33017 is an Unauthenticated Remote Code Execution RCE vulnerability in Langflow where a public build endpoint accepts attacker-controlled flow data, allowing custom component code to be executed on the server. In this la...

CVE-2026-33017-Exploit

CVE-2026-33017 - Langflow Unauthenticated RCE / \ | | \ ^ / ||||| exec with no auth, no sandbox, no hope. Langflow chat.py - startflowbuild - buildgraphfromdata - Graph.frompayload - loading.py - eval.py createclass - validate.py prepareglobalscope - execcompiledcode - arbitrary code runs as the...

pwnkit

pwnkit Usage Tested on Arch Linux and Ubuntu 18.04 git clone https://github.com/c3l3si4n/pwnkit; make ./pwnkit...

MAL-2026-17690 Malicious code in @galicia-toolkit/spa-build-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7fc29f59609ed2b5c7b54243b740e1daa001f3c76c4d1391edd85a528a4688 The package's postinstall script runs automatically on npm install and collects installer-side host and credential data: hostname, username, network...

Malicious code in @galicia-toolkit/spa-build-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7fc29f59609ed2b5c7b54243b740e1daa001f3c76c4d1391edd85a528a4688 The package's postinstall script runs automatically on npm install and collects installer-side host and credential data: hostname, username, network...

code-shield

protocol-remediator An MVP that normalizes vulnerability findings in C/C++ protocol/platform code into reproducible evidence and validates candidate patches in isolated copies. code-shield was a working name with a confirmed name-collision risk, so a neutral internal name is used for the public...

CVE-2017-9805_example_build

This repository does not have a README...

cve-2026-33067

CVE-2026-33017 — Langflow Unauthenticated RCE Nuclei Template Nuclei template that detects CVE-2026-33017 — an unauthenticated remote-code-execution vulnerability in Langflow ≤ 1.8.2 reachable through the public flow-build endpoint: POST /api/v1/buildpublictmp/flowid/flow The vulnerable handler...

hostapd_mirror

wpasupplicant and hostapd Copyright c 2002-2022, Jouni Malinen [email protected] and contributors All Rights Reserved. These programs are licensed under the BSD license the one with advertisement clause removed. If you are submitting changes to the project, please see CONTRIBUTIONS file for...

docker-cve-2022-39253-poc

docker host file read using cve-2022-39253 poc PoC reproduce environment $ docker run --name=cve-2022-39253 -ti -d ssst0n3/dockerarchive:gitcve-2022-39253 $ docker attach --detach-keys ctrl-x cve-2022-39253 use ctrl-x to exit container's terminal wait minutes for environment starting ... ... Ubun...

CVE-2021-33690

CVE-2021-33690 CVE-2021-33690 Server Side Request Forgery vulnerability in SAP NetWeaver Development Infrastructure Application: SAP NetWeaver AS Java Versions Affected: SAP NetWeaver Development Infrastructure Component Build Service versions – 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 Vendor URL:...

smartermail-cve-scanner

SmarterMail CVE-2025-52691 Scanner CVSS 10.0 RCE vulnerability in SmarterMail. Is your mail server vulnerable? Fast, accurate scanner for CVE-2025-52691 - a critical unauthenticated arbitrary file upload vulnerability that enables remote code execution on SmarterMail servers. About CVE-2025-52691...

CVE-2026-107466

A flaw was found in flatpak-builder. This vulnerability allows an attacker to cause information disclosure by convincing a user or continuous integration CI system to process a crafted build manifest. By specifying local file Uniform Resource Identifiers URIs within source download definitions, t...