RegoMender: A Multi-Agent Framework for Automated Rego Policy Repair

Policy-as-Code PaC has emerged as a foundational paradigm in cloud-native systems. However, repairing Rego policies remains challenging due to their strict syntax, declarative semantics, and specific verification requirements. Existing automated program repair APR methods are mainly designed for...

CVE-2026-20841

The accuracy of this PoC trigger method has not been verified, and it should be considered informational/reference only. CVE-2026-20841 - Windows notepad.exe RCE Exploitation condition: Test on : Notepad Version 11.2510.14.0 step 1 : Save File step 2 : Open file Note: It does prompt to open progr...

CVE-2025-1094-Lab-Setup

🛠️ CVE-2025-1094 Lab Setup ⚠️ Disclaimer This lab is for educational and research purposes only. Do NOT use any of the information or techniques demonstrated here on systems you do not own or have explicit permission to test. Unauthorized use of these methods may violate laws and result in severe...

CVEs

CVEs These are vulnerabilities I have identified and disclosed through the CVE program...

CVE-2026-77936

Letta through 0.16.8 ships a compose.yaml that does not enable LETTASERVERSECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes a superuser PostgreSQL port with default credentials. Remote attackers can execute arbitrary Python via POST...

CVE-2026-77936

Letta through 0.16.8 ships a compose.yaml that does not enable LETTASERVERSECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes a superuser PostgreSQL port with default credentials. Remote attackers can execute arbitrary Python via POST...

Linux Distros Unpatched Vulnerability : CVE-2026-98647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a...

CVE-2022-30525_Exploit

CVE-2022-30525 Zyxel Firewall Remote Command Injection A python based exploit for CVE-2022-30525 Vulnerability Summary NIST An OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100W firmware versions 5.00 up to and including 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 ...

cve-2022-44268-detector

cve-2022-44268-detector - detect malicious PNGs cve-2022-44268-detector is a Go program that consumes PNGs and reports whether they appear to be malicious images generated by an exploit for CVE-2022-44268, an ImageMagick vulnerability that allows attackers to read arbitrary file contents using...

CVE-2023-33592

CVE-2023-33592 CVE-2023-33592 batch vulnerability exploit program...

UBUNTU-CVE-2026-98647

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...

DEBIAN-CVE-2026-98647

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...

CVE-2026-98647

The Linux kernel contains a divide-by-zero vulnerability in the btf_struct_walk() function. The issue occurs when a BPF program access goes past a structure where the last member is a flexible array ; the function fails to verify that the element type has a non-zero size before performing a modul...

CVE-2026-98647 bpf: Fix divide-by-zero in btf_struct_walk()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...

CVE-2026-98647 bpf: Fix divide-by-zero in btf_struct_walk()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...

CVE-2026-98647: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...

PT-2026-116866

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btf struct walk When an access goes past the struct and the last member is a flexible array, btf struct walk folds the offset back into a single element with off - moff % t-size, but never checks that t...

pwnkit

CVE-2021-4034 Introduction This is an exploit for the CVE-2021-4034 vulnerability, aka pwnkit, which was discovered by Qualys. Usage Compilation $ make or $ gcc -o pwnkit.so -fPIC -shared pwnkit.c -Wl,-e,main Testing $ make test or $ ./pwnkit.so...

CVE-2021-31630

CVE-2021-31630 Modified the PoC CVE-2021-31630 script by Fellipe Oliveira for HTB Usage 'Example usage: exploit.py -u http://target-uri:8080 -l admin -p admin -i 192.168.1.54 -r 4444 -P program.st"'...

SUSE CVE-2026-104025

Path Traversal CWE-22 in the executeobj function of the archive object viewer peach.pas in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to preview an entry of a crafted archive via the "Preview with... - Associated application" action Shift+Ctrl+O to execute an...