8159 matches found
exploitarium
Exploitarium A consolidated archive of my public proof-of-con...
Poster: Exploring the Limits of Audio-Based Detection of Turkish Phone Call Scams
Scam phone calls exploit vulnerable communities worldwide, yet research on detection has focused almost exclusively on English and other high-resource languages. In low-resource settings such as Turkish, detection is especially difficult, as annotated data is scarce and technological defenses...
Threat Hunting Beyond Alerts: Finding the Activity Detection Misses
Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings...
Exploit for CVE-2026-4020
cve-id ⚡ Simple Usage Use this project only in safe and...
Deep-Research Agents Can Be Poisoned Via User-Generated Content
Deep-research agents, i.e., systems that rely on multi-agent pipelines to iteratively retrieve, synthesize, and cite Web content in order to produce structured reports, are rapidly replacing traditional search for both routine and complex information needs. These agents issue many related queries...
CVE-2026-12888: Improper Neutralization of Special Elements in Output Used by a Downstream Component
An HTML injection vulnerability exists in the Google Chat webhook notification sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation in Google Chat. An attacker can insert limited HTML content including links. This issue affects Canarytokens: from Docker tag sha-4aef1db90...
vulntraceai-plugin
VulntraceAI — plugin & CLI Evidence-gated vulnerability res...
explotability_analysis_ebpf
eBPF Verifier Exploit Research — s344024 Romano Simone Resear...
Exploit for CVE-2026-42055
cve-id ⚡ Simple Usage Use this project only in safe and...
Exploit for CVE-2026-42530
cve-id ⚡ Simple Usage Use this project only in safe and...
ARENA: An Architecture for Measuring the Transferability of Autonomous Cyber Defense
Operational evidence is not automatically scientific evidence. The most realistic Security Operations Center SOC data is production telemetry, yet it remains scientifically inaccessible because raw logs cannot be released; as a result, research relies on synthetic or dated datasets. We treat the...
Exploit for Incorrect Authorization in Qualcomm Aqt1000_Firmware
omae-wa-cheese-da GPU arbitrary physical R...
Log4j2Scan-1.4.0
Log4j2Scan This tool is only for learning, research and sel...
Malicious Package
Overview npm-sandbox-research-9c4e is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in npm-sandbox-research-a1b2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd030068356281ae499fe6af7fd86ae10cac9f77f2f3fcc4d2d9abb67750be19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview npm-sandbox-research-e9f0 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in lab-services (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4acaa72e3c14b79785540c878cb48f7a0cdc238d20ac9cebd6ffdd42061f6e7b On npm install, the package's preinstall lifecycle script node.js collects host identifiers from the installing machine — hostname, public IP resolve...
Exploit-Development
Exploit Development What does this repository Contain? This...