tomcat-cve-2025-24813-lab

Apache Tomcat CVE-2025-24813 Local Reproduction Record For local authorized experiments, patch understanding, and defensive validation only. Do not send requests to unauthorized targets. This project records the reproduction process of CVE-2025-24813 on a local Apache Tomcat 9.0.98 instance: usin...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...

IOHIDFamily-PoC-Research

CVE-2026-28992 — IOHIDFamily FastPathUserClient PoC Security research repository. Two PoC apps demonstrating the race conditions in IOHIDFamily's FastPathUserClient on iOS 18.7.1 and earlier. ⚠️ Both PoCs will kernel-panic and reboot your device. Save your work first. Vulnerability Summary Field|...

MAccConc

Overview This is tooling for exploring Linux kernel race conditions and for general kernel debugging. See also the announcement blog post https://projectzero.google/2026/09/maccconc-race-condition.html. There are currently three tools: 1. A GUI for viewing KCOV traces of Linux kernel execution an...

BasicHook

BasicHook Hooks functions using 32-bit relative jump, writing is done atomically to avoid race conditions. Uses hde32 from instruction length disassembly...

Check-CVE-2021-23383

Check-CVE-2021-23383 Check the conditions for exploiting CVE-2021-23383 through the handlebars library version assessment...

RatRace

RatRace A lightweight CLI tool for systematically detecting and exploiting race conditions in web applications, APIs, and modern services. What Problem It Solves Race conditions represent one of the highest-impact security vulnerabilities in modern applications, yet they remain poorly covered by...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...

CVE-2026-109714

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Layout component...

CVE-2026-76527

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by...

SUSE CVE-2026-113399

Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1...

CVE-2026-113399

Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1...

EUVD-2026-104980

Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1...

CVE-2026-113399

The Firefox browser is affected by a vulnerability caused by incorrect boundary conditions within the SVG component . This issue has been resolved in Firefox version 158.0.1 . No specific practical consequences, exploit details, or technical root causes beyond the component identification are pro...

CVE-2026-113399 Incorrect boundary conditions in the SVG component

Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1...

CVE-2026-113399

Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1...

MGASA-2026-0522 Updated firefox, nss, firefox-l10n packages fix security vulnerabilities

Privilege escalation in the Application Update component. CVE-2026-109704 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. CVE-2026-109705 Use-after-free in the Storage: IndexedDB component. CVE-2026-109706 Sandbox escape due t...

MGASA-2026-0523 Updated thunderbird packages fix security vulnerabilities

Denial-of-service in the Exchange email component. CVE-2026-110249 Privilege escalation in the Application Update component. CVE-2026-109704 Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. CVE-2026-109705 Use-after-free in the...

firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: Playback component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: Playback component...

firefox: thunderbird: Privilege escalation due to incorrect boundary conditions in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to incorrect boundary conditions in the Graphics component...