fcn-

fcn free connect your private network from anywhere 1. What is fcn fcnfree connect is a foolproof one-click tool for accessing private networks, consisting of the server side and the client side fcn uses fcn public data servers and data encryption technology to virtually connect user clients to...

SwiftyInsta

SwiftyInsta legacy Tenga en cuenta que SwiftyInsta ya no se mantiene activamente. Consulte 244 para más información. Eche un vistazo a Swiftagram si busca alternativas actualizadas. Instagram ofrece dos tipos de API para desarrolladores. La Plataforma de la API de Instagram extremadamente limitad...

CVE-2026-75101

An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user of the instance to read the raw diff or patch of pull requests in private repositories without authorization. Access tokens for raw pull request diffs and patches were scoped to th...

CVE-2020-13277

CVE-2020-13277 CVE-2020-13277 Lab: GitLab Logic Vulnerability - Unauthorized User Access to Private Repositories 0x10 Lab Environment 0x20 Directory Structure root@kitploit: CVE-2020-13277 ├── README.md ............... This README file ├── imgs .................... Images for README ├── gitlab...

CVE-2026-75101

An authorization bypass vulnerability exists in GitHub Enterprise Server (versions prior to 3.22) due to a repository name collision flaw. Access tokens for raw pull request diffs and patches were incorrectly scoped to the repository name and pull request number rather than a globally unique iden...

CVE-2026-75101 Authorization bypass vulnerability in GitHub Enterprise Server allowed reading of private pull request diffs and patches via repository name collision

An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user of the instance to read the raw diff or patch of pull requests in private repositories without authorization. Access tokens for raw pull request diffs and patches were scoped to th...

EUVD-2026-84874

An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user of the instance to read the raw diff or patch of pull requests in private repositories without authorization. Access tokens for raw pull request diffs and patches were scoped to th...

CVE-2022-1598

CVE-2022-1598 WPQA where ID is numeric and can be bruteforced! Nuclei Template: CVE-2022-1598.yaml VIDEO POC:...

sdks

theos/sdks This repository contains patched iOS SDKs containing private symbols. These were removed from official SDKs starting in Xcode 7.3 and the iOS 9.3 SDK. To use with Theos, download this repo, extract, and copy whichever SDKs you desire into $THEOS/sdks/. Generated using createpatchedsdk....

CVE-2026-86059

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy organization members without Git provider access can retrieve plaintext provider credentials through github.one, gitlab.one, gitea.one, and bitbucket.one because those protected procedures return full provider...

debianopenssl

debianopenssl Private keys vulnerable to Debian OpenSSL bug CVE-2008-0166 In 2008 a bug in Debian's and Ubuntu's OpenSSL package led to predictable private keys. While the number of keys is limited, it takes a few considerations to create a proper list of all plausibly affected keys. This...

CVE-2026-86698 Refresh tokens accepted as private repository credentials at the CDN

Insufficient Session Expiration vulnerability in OAuth token issuance in hexpm hexpm allows a user whose organization membership or session has ended to keep reading the organization's private packages and their documentation tarballs via a retained refresh token. generaterefreshtoken/4 in...

CVE-2026-79551-Tenda

CVE-2026-79551 Tenda Hardcoded TLS Private Key CNVD ID: CNVD-2026-25884 Vendor: Tenda Technology Co., Ltd. Product: NVR4H network video recorder hardware version CH3V2.1 Firmware: V27.5.58.6 Class: CWE-321 — Use of Hard-coded Cryptographic Key Overview The NVR4H firmware stores an ECDSA key pair ...

CVE-2026-46395-haxcms-hmac-key-leak

CVE-2026-46395 - HAXcms Node.js Private Key Disclosure via Broken HMAC CWE-321 / CWE-200 Proof-of-concept for authorized security testing and research only. The vulnerability described here is fixed in the latest release of HAXcms. This PoC is published so that defenders and researchers can verif...

PoC_CurveBall

CVE-2020-0601 - CurveBall Highlights PoC for CVE-2020-0601 Trivial solution for private-key of 1 Non-trivial solution for 1 private-key curve-order Written in C, uses OpenSSL's libcrypto Requirements Linux of some variety apt install libssl libssl-dev Or whatever package mananger you use Compilin...

CVE-2026-0101-BLE-Address-Spoofing-via-Weak-Resolvable-Private-Address

CVE-2026-0101 – BLE Address Spoofing via Weak Resolvable Private Address Program Code Python using bleak simulation root@kitploit: bleperipheralsim.py - Simulated BLE peripheral with weak RPA verification import asyncio, random, hashlib from bleak import BleakServer, BleakScanner Simplified - we'...

gpg_reaper

GPG Reaper TL;DR: 从 gpg-agent 缓存/内存中获取/窃取/恢复 GPG 私钥 该 POC 演示了在 Windows 下从 gpg-agent 内存中获取 GPG 私钥的方法。 通常情况下，这只能在 10 分钟 时间窗口内完成（即 --default-cache-ttl 的值）。 不幸的是，housekeeping 函数（负责缓存清理）仅在您使用 GPG 时执行（没有定时器）。 这意味着在正常的 GPG 使用场景下（例如：您签署某个文件，然后关闭图形界面去处理其他任务），您的密码仍然会保留在 gpg-agent 内存中（即使 TTL 已过期）。...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tang (UTSA-2023-002173)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002173 advisory. A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nss (UTSA-2026-090161)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090161 advisory. When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during...

CVE-2022-0778

CVE-2022-0778 Description We refer to the concept of drago-96 and then rewrite a PoC based on the P12 and PEM format. You can use it to verify the CVE-2022-0778 vulns, i.e., a dangerous SSL certificate without any private password, leave it empty. If the device is affected, it may cause the CPU o...