credactor

Credactor 找到密钥。修复它。干净提交。 密钥扫描器擅长拉响警报，却不太能帮你把火扑灭。它们丢给你一份泄露凭据的清单，剩下的清理工作全归你。Credactor 补上了这个闭环：它找到硬编码的密钥并就地重写，让一次泄露从检测到修复只需一条命令。 让凭据远离源代码是一项基线安全实践，而非可选项。Credactor 让守住这条基线变得成本低廉——无论是在提交前的本机上，还是在合并前的 CI 中。你可以单独运行它，也可以与已经信任的扫描器搭配使用。 Credactor 找到这个： dbpassword = "h8Tq2vKp9mRz4Wd"...

filessh

FileSSH 一个基于TUI的SSH服务器文件浏览器，允许你浏览和管理远程服务器上的文件，原地编辑它们，并通过并行目录遍历递归下载目录。它还支持快速打开到远程服务器上路径的SSH会话。 双许可：MIT 或 UNLICENSE。 安装 Homebrew（macOS） brew install jayanaxhf/taps/filessh Cargo cargo install --locked filessh 从源码构建 1. 确保已安装 Rust 和 Cargo。你可以参考 rust-lang.org 上的安装说明。 2. 克隆仓库： git clone...

poc-cve-collection

poc-cve-collection Poc CVE Collection 🧪 Collects CVE PoCs and backs them up to the Internet Archive when they are unavailable on GitHub. Donate Support the maintenance of this project with PayPal or by scanning the QR code below. Example CVE-2026-31431 Title crypto: algifaead - Revert to operatin...

CVE-2026-95598

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Search in Place search-in-place allows Reflected XSS.This issue affects Search in Place: from n/a through 1.5.5...

EUVD-2026-95604

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Search in Place search-in-place allows Reflected XSS.This issue affects Search in Place: from n/a through 1.5.5...

CVE-2026-95598

The codepeople Search in Place WordPress plugin (versions n/a through 1.5.5 ) is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. This issue stems from the Improper Neutralization of Input During Web Page Generation (CWE-79). The vulnerability allows an attacker to execute malicious scr...

CVE-2026-95598 WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Search in Place search-in-place allows Reflected XSS.This issue affects Search in Place: from n/a through 1.5.5...

shellnoob

ShellNoob Writing shellcodes has always been super fun, but some parts are extremely boring and error prone. Focus only on the fun part, and use ShellNoob! For a quick overview, check the slides for the Black Hat Arsenal talk: link Want to contribute? Feature request? Bug report? Swears? All...

PT-2026-108842

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codepeople Search in Place search-in-place allows Reflected XSS.This issue affects Search in Place: from n/a through 1.5.5...

CVE-2026-31431_CopyFail_LinuxKernel_LPE

CVE-2026-31431 — Copy Fail Escalada de Privilegios Local en Linux Reescritura educativa de la prueba de concepto de Theori/Xint para CVE-2026-31431, una vulnerabilidad de escalada de privilegios local en la interfaz de sockets criptográficos algifaead del kernel de Linux. Afecta a todos los kerne...

CVE-2026-31431-python-copyfail-POC

CVE-2026-31431: Copy Fail - Linux Kernel Privilege Escalation Copy Fail CVE-2026-31431 is a critical logic bug in the Linux kernel's cryptographic subsystem that allows unprivileged users to achieve privilege escalation to root. The vulnerability affects Linux kernels 6.0.0 through 6.18.x across...

copyfail

CVE-2026-31431 — Script de detección segura "Copy Fail" Un script de detección de solo lectura para la vulnerabilidad de escalada de privilegios locales Copy Fail en el kernel de Linux. Sin código de exploit. No se abre ningún socket AFALG. No se escriben archivos fuera de /etc/modprobe.d solo...

cve-2026-31431-algif-aead-remediator

CVE-2026-31431 / GHSA-2274-3hgr-wxv6 — Remediador de algifaead Gravedad: Alta CVSS 7.8 — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Antecedentes CVE-2026-31431 es una vulnerabilidad de escalada de privilegios local en el módulo algifaead del kernel de Linux interfaz de sockets criptográficos...

CopyFail-for-dummies

Copy Fail / CVE-2026-31431 — Notas de investigación Resumen Este repositorio contiene un diagrama técnico depurado y notas de apoyo sobre la vulnerabilidad del kernel de Linux conocida comúnmente como Copy Fail y registrada como CVE-2026-31431. El propósito de este material es: explicar el...

DirtyFrag-go

dirtyfrag-go Dos bugs. Una shell. Sin escrituras en disco. Puerto en Go de dirtyfrag CVE-2026-43284 / CVE-2026-43500. Cómo funciona tl;dr La clase de bug está en el subsistema XFRM del kernel de Linux. Cuando una página de archivo se pasa con splice a un pipe y luego a un socket cifrado con ESP, ...

DirtyFrag-for-dummies

Dirty Frag / CVE-2026-43284 — Notas de investigación Resumen Este repositorio contiene un diagrama técnico depurado y notas complementarias para la vulnerabilidad del kernel de Linux comúnmente conocida como Dirty Frag y rastreada para la ruta xfrm-ESP como CVE-2026-43284. El problema pertenece a...

XCP_ng_CVE-2026-43284_tester

XCP-ng Dirty Frag 诊断工具 — CVE-2026-43284 一个社区诊断工具，用于判断 XCP-ng dom0 主机是否暴露于 CVE-2026-43284 （“Dirty Frag”），这是 Linux 内核 xfrm-ESP 子系统中的一个本地权限提升漏洞。 TL;DR — 所有当前 XCP-ng 版本（8.1、8.2、8.3）运行标准 4.19 dom0 内核的都在受影响代码范围内。截至 2026 年 5 月，官方尚未发布 XCP-ng 补丁。本工具能明确告知您的主机是否暴露，并提供安全的临时缓解措施。 背景 “Dirty Frag”...

CVE-2026-31431

CVE-2026-31431 Estructura . ├── container │ ├── container.md Enfoque para el escape de contenedores │ ├── expenv Entorno del contenedor │ │ ├── bin │ │ │ ├── gscontainer │ │ │ └── share │ │ ├── Dockerfile │ │ ├── run.sh │ │ └── src │ │ ├── gscontainer.c │ │ ...

WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nixxies in WordPress Plugin Search in Place versions = 1.5.5...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc (CENTOS8.4:CLSA-2026:1778260666)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1778260666 advisory. - In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSGSPLICEPAGES ca...