themis

Themis provides strong, usable cryptography for busy people General purpose cryptographic library for storage and messaging for iOS Swift, Obj-C, Android Java, Kotlin, React Native iOS, Android, desktop Java, С/С++, Node.js, Python, Ruby, PHP, Go, Rust, WASM. Perfect fit for multi-platform apps...

bitchat

bitchat 分散型ピアツーピアメッセージングアプリ。デュアルトランスポートアーキテクチャを採用：ローカルのBluetoothメッシュネットワークによるオフライン通信と、インターネットベースのNostrプロトコルによるグローバル通信。アカウントも電話番号も中央サーバーも不要。サイドグループチャットのようなものです。 bitchat.free 📲 App Store ライセンス このプロジェクトはパブリックドメインに公開されています。詳細はLICENSEファイルをご覧ください。 特徴 デュアルトランスポートアーキテクチャ : Bluetoothメッシュ（オフライン）+...

kubebot

Kubebot 一款基于谷歌云平台Kubernetes后端构建的安全测试Slackbot 注意：我不再积极维护此项目。我正在与其他人一起开发Kubebot v2，可能会在即将举行的安全会议上展示。 架构 演示 请观看此视频 - https://youtu.be/RKvtyU3CcZk 数据流 1 - 从Slackbot发起的API请求（工具、目标、选项），发送到API服务器，该服务器作为Docker容器运行在Kubernetes（K8s）集群上，并且可以扩展。 2 - API服务器将收到的请求作为消息投递到PubSub工具主题。 3 - 消息发布到工具订阅。 4 -...

openclaw

OpenClaw 🦞 — Your assistant, on your devices, in your chats OpenClaw is an open-source AI assistant that runs on your own computer and meets you in the channels you already use: Discord, iMessage, Slack, Teams, Telegram, WhatsApp, and 20+ more, plus native apps for macOS, iOS, Android, Windows, a...

CVE-2026-10523-Ivanti-sentry

CVE-2026-10523 - Ivanti Sentry RCE Detection Tool A comprehensive proof-of-concept detection tool for testing Ivanti Sentry vulnerabilities related to authentication bypass and remote code execution. This tool identifies systems vulnerable to CVE-2026-10520 and CVE-2026-10523. Overview This proje...

posta

Posta Posta 는 크로스 문서 메시징 통신을 조사하기 위한 도구입니다. postMessage 취약점을 추적, 탐색 및 악용할 수 있으며, 연결된 브라우저 내에서 창 간에 전송된 메시지를 재생하는 기능을 포함합니다. 사전 요구사항 Google Chrome / Chromium Node.js 선택 사항 설치 개발 환경 개발 환경에서 Posta 실행: 1. Posta 설치 git clone https://github.com/benso-io/posta cd posta npm install 2. 개발 환경 시작 npm start ...

CVE-2024-36991-Tool

CVE-2024-36991-Tool This binary POC automates the exploitation of CVE-2024-36991 by sending crafted curl requests to a vulnerable Splunk instance. It retrieves sensitive files and saves them locally for further analysis. The script is modular, allowing users to target specific file categories e.g...

CVE-2024-41713POC

CVE-2024-41713POC Mitel MiCollab Enterprise Collaboration Platform Arbitrary File Read Vulnerability CVE-2024-41713 Due to an authentication bypass vulnerability in the NuPoint Unified Messaging NPM component of Mitel MiCollab software, and insufficient input validation, an unauthenticated remote...

CVE-2026-71885

In Bouncy Castle for Java before 1.86, the Messaging Layer Security MLS, RFC 9420 implementation did not bind an X.509 credential to a LeafNode's signaturekey. LeafNode.verify checked a leaf's signature against the signaturekey carried in the leaf itself, while the credential's X.509 certificate...

EUVD-2026-92003

In Bouncy Castle for Java before 1.86, the Messaging Layer Security MLS, RFC 9420 implementation did not bind an X.509 credential to a LeafNode's signaturekey. LeafNode.verify checked a leaf's signature against the signaturekey carried in the leaf itself, while the credential's X.509 certificate...

CVE-2026-71885

In Bouncy Castle for Java versions before 1.86 , the Messaging Layer Security (MLS, RFC 9420) implementation failed to bind an X.509 credential to a LeafNode's signature_key . Because the X.509 certificate chain was stored but never parsed or validated, the end-entity certificate's public key was...

CVE-2026-71885 MLS X.509 credential not bound to the LeafNode signature key

In Bouncy Castle for Java before 1.86, the Messaging Layer Security MLS, RFC 9420 implementation did not bind an X.509 credential to a LeafNode's signaturekey. LeafNode.verify checked a leaf's signature against the signaturekey carried in the leaf itself, while the credential's X.509 certificate...

CVE-2026-71885

In Bouncy Castle for Java before 1.86, the Messaging Layer Security MLS, RFC 9420 implementation did not bind an X.509 credential to a LeafNode's signaturekey. LeafNode.verify checked a leaf's signature against the signaturekey carried in the leaf itself, while the credential's X.509 certificate...

CVE-2026-17507

A flaw was found in Bouncy Castle's Messaging Layer Security MLS implementation. Due to an improper signed integer comparison, an out-of-range leaf identifier incorrectly bypasses group membership checks. A group member can exploit this flaw by sending a specially crafted message, causing unbound...

EUVD-2026-91132

This vulnerability enables unauthenticated remote code execution RCE on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component. The attack leverages an unrestricted messaging interface between an...

CVE-2018-1270

CVE-2018-1270 - Spring Messaging SpEL Code Execution Vulnerability Yesterday, Spring disclosed an RCE vulnerability. Take a look: CVE-2018-1270: Remote Code Execution with spring-messaging Affected Versions Spring Framework 5.0 to 5.0.4 Spring Framework 4.3 to 4.3.14 This vulnerability does not...

CVE-2026-18397

This vulnerability enables unauthenticated remote code execution RCE on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component. The attack leverages an unrestricted messaging interface between an...

CVE-2026-18397

The SConnect native host component is vulnerable to unauthenticated remote code execution (RCE) . The flaw stems from a combination of cryptographic weaknesses and memory management issues , where an unrestricted messaging interface between an attacker-controlled web page and the native host allo...

CVE-2026-18397 SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability

This vulnerability enables unauthenticated remote code execution RCE on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component. The attack leverages an unrestricted messaging interface between an...

CVE-2024-36991

CVE-2024-36991 Path Traversal On The “/Modules/Messaging/“ Endpoint In Splunk Enterprise On Windows In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Windows. The vulnerability exist...