New Research: The Confidence Gap Between CISOs and Their Boards Is Real, and It’s Measurable

Las Vegas, United States, 5th August 2026, CyberNewswire...

POC-keyv-and-cacheable-npm-Package

ChainDrop npm Supply Chain Attack — PoC Scanner & Exploit...

z3 z3-5.0.0

Z3 Z3 is a theorem prover from Microsoft Research. It is licensed under the MIT license. Windows binary distributions include C++ runtime redistributables If you are not familiar with Z3, you can start here. Pre-built binaries for stable and nightly releases are available here. Z3 can be built...

router-vulnerability-research

router-vulnerability...

hermes-agent has an Injection issue

A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. This affects the function scanmemorycontent of the file tools/memorytool.py. This manipulation causes injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used f...

When Vibe Hacking Turns AI into the Junior Hacker Every Adversary Always Wanted

The cybersecurity industry has spent decades assuming that offensive capability scales with technical expertise. That assumption is starting to break. Security teams have long estimated risk by ranking attacker sophistication. Nation-state actors sat at one end. Organized criminal groups followed...

keyv and cacheable npm Package Hijacked in Supply Chain Attack

Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages...

Exploit for CVE-2026-18577

cve-id Donate Support the maintenance of this project wit...

COLDCARD Seed Generation Flaw Linked to Nearly $89 Million Bitcoin Theft

Galaxy Research linked a suspected Bitcoin theft of 1,367.05 BTC to weak COLDCARD seeds. Coinkite says updates cannot repair seeds already generated on devices...

Exploit for CVE-2026-64531

ovswrap-poc CVE-2026-...

Exploit for CVE-2026-17583

cve-id Donate Support the maintenance of this project wit...

exploitarium

Statement This repo was incomplete when published. In regar...

Vulnerability-Wiki-PoC

💠 Vulnerability-Wiki-PoC 🚀 Focused on practical applicati...

DeepZero deepzero-v0.4.0

Automated vulnerability research pipeline engine Define pipelines as YAML. DeepZero handles orchestration, parallelism, fault tolerance, and state. English | 简体中文 | Français 🔗 Pipeline-as-YAML - chain ingest, filter, transform, and LLM-assess stages declaratively ⚡ Parallel execution -...

voidaccess v2.0.1

VoidAccess Self-hostable OSINT for turning dark-web research queries into structured threat intelligence. Built for security researchers, threat-intelligence teams, and authorized investigators who need collection, enrichment, relationship mapping, and export in one workflow. Terminal Output Quic...

flagembedding (>=1.2.0, <=1.2.2), keycare (>=0.0.1, <=0.1.0) +1 more potentially affected by CVE-2026-9856 via transformers (4.33.0)

transformers PYPI version 4.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - flagembedding =1.2.0, =0.0.1, =0.1.15, =0.2.13 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

Nightingale v1.1.46

Nightingale: Docker for Pentesters This project is supported by: | ---|--- Nightingale is a ready-to-use, multi-architecture Docker toolkit for pentesting and security research. It gives you a reproducible environment with curated tools for web, network, mobile, API, OSINT, and forensics workflow...

litematica-exploit-poc

Litematica Exploit POC Proof of Concept for Litematica’s arbit...

ricerca-tesi — Updated!

thesis-research Research resources for cve-2026-7228 Tools VirtualBox installation Installation of VirtualBox: https://www.virtualbox.org/wiki/Downloads Windows 11 ISO installation https://www.microsoft.com/it-it/software-download/windows11 Linux distro installation: Lubuntu...

TLS-Scanner v7.0.0-rtc

TLS-Scanner TLS-Scanner is a tool to assist pentesters and security researchers in the evaluation of TLS server and client configurations. Please note: TLS-Scanner is a research tool intended for TLS developers, pentesters, administrators and researchers. There is no GUI. It is in the first versi...