eternal

Introduction This is the root repository for the Eternal Software Initiative. The ESI defines a minimal machine architecture based on a modification of the Subleq OISC that is so simple that its complete specification can be written down on a napkin. We then provide an LLVM compiler backend for...

automato

automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...

koppeling-p

koppeling-p Adaptive DLL hijacking / dynamic export forwarding - EAT preserve Overview This project is a limited, Python-only extension to the amazing project by Nick Landers @monoxgas, available here. Differences The only difference to the original project is that koppeling-p p stands for...

private-membership

Private Set Membership PSM Problem Statement Private Set Membership PSM is a cryptographic protocol that allows clients to privately query whether the client's identifier is a member of a set of identifiers held by a server in a privacy-preserving manner. At a high level, PSM provides the followi...

bloom

Bloom: Automated Behavioral Evaluations for LLMs !IMPORTANT Bloom has a new home. It is now developed and maintained by Meridian Labs and lives at meridianlabs-ai.github.io/petribloom — all new features and fixes will land there. This repository is frozen at its last standalone release and will n...

tracehound

Deterministic runtime security buffer for high-velocity APIs External systems signal threats. Tracehound preserves evidence. Website · Documentation Index · API Reference · Configuration · RFCs · Security · Changelog Tracehound is a decision-free forensic runtime that sits between upstream...

Improper Preservation of Permissions

Overview org.zeroturnaround:zt-zip is a library to process ZIP archives. Either create, modify or explode them. On disk or in memory. Affected versions of this package are vulnerable to Improper Preservation of Permissions in the ZipUtil.unpack overloads, where an entry name that resolves to the...

CVE-2026-54859

Unauthenticated PHP Object Injection in Preservation = 1.15 versions...

CVE-2026-54859

The WordPress Preservation theme (versions

CVE-2026-54859 WordPress Preservation theme <= 1.15 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Preservation = 1.15 versions...

EUVD-2026-112951

Unauthenticated PHP Object Injection in Preservation = 1.15 versions...

PT-2026-132269

Unauthenticated PHP Object Injection in Preservation = 1.15 versions...

ThemeREX Preservation deserialization injection vulnerability

ThemeREX Preservation versions 1.15 and earlier contain a deserialization injection vulnerability. This vulnerability arises from unvalidated PHP object injection, which may lead to execution of malicious code or unauthorized access to sensitive data...

CVE-2026-54859: ThemeREX Preservation: Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.

Unauthenticated PHP Object Injection in Preservation = 1.15 versions...

WordPress Preservation theme <= 1.15 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by johska in WordPress Theme Preservation versions = 1.15...

duplicut

Duplicut :scissors: Elimina rápidamente duplicados de listas de palabras masivas, sin cambiar el orden Creado por nil0x42 y colaboradores 📖 Resumen Hoy en día, la creación de listas de palabras para contraseñas generalmente implica concatenar múltiples fuentes de datos. Idealmente, las contraseña...

On-Chain Archaeology of Bitcoin Oracles: Evidence of Use under Limited Observability

Before Ethereum made the "oracle problem" a household term, Bitcoin already had oracles serving as feeds, key-release services, federated signers, and arbiters that carried real value on the main chain. This study traces their use and the changing evidence of oracle activity from early days throu...

CVE-2026-106492 Backstage: Improper preservation of access restrictions during service credential delegation

Backstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, the @backstage/backend-defaults package is affected by improper preservation of access restrictions during service credential delegation. An external service credential configured with access restrictions...

Possible Vulnerability in Apple’s Automatic Reboot

404Media is reporting alternate link that a cyber-weapons arms manufacturer is exploiting a vulnerability in iOS to bypass its automatic reboot security feature. This is the feature that automatically puts an iPhone into a more secure state if it hasn't been used for 72 hours. The new technology ...

Certified Mechanistic Edits: Behavioral Guarantees for Skill Removal and Preservation

Mechanistic edits ablations, weight edits, activation steering are the standard tools for unlearning a harmful capability from a neural network while preserving useful ones. Current approaches validate their effects only by testing, which can never cover an entire continuous region of inputs. Pri...