CVE-2022-4262

CVE-2022-4262 Full Analysis including root cause, PoC, exploit and slides of CVE-2022-4262. Disclaimer This repository is intended solely for educational purposes and must not be used for any malicious activities...

threat-team

Google Threat Intelligence Group Notice: This repository is no longer maintained. For the latest Indicators of Compromise IOCs and threat research, please refer to the Google Cloud Threat Intelligence blog and free Google Threat Intelligence / VirusTotal collections. This repository contains...

1day-archive

1dayexploit - archive Technical deep-dives and root cause analyses of recently disclosed CVEs. About This repository collects technical write-ups of recently disclosed CVEs — the 1-day window between patch release and widespread exploitation. Each analysis contains: Affected product, vendor, and...

0days-in-the-wild

0-days explotados en la naturaleza Este repositorio es una referencia de documentos sobre vulnerabilidades de día cero detectadas como explotadas en la naturaleza. Incluye tanto análisis de causa raíz RCA para cada exploit de día cero como una tabla que rastrea cada día cero. Estos documentos est...

CVE-2022-4262

CVE-2022-4262 Full Analysis including root cause, PoC and exploit of CVE-2022-4262...

DeFiHackLabs

DeFi Hacks Reproduce - Foundry Reproduce DeFi hack incidents using Foundry. 871 incidents included. Let's make Web3 secure! Join Discord Notion: 101 root cause analysis of past DeFi hacked incidents Transaction debugging tools Disclaimer: This content serves solely as a proof of concept showcasin...

Dirty-Frag-Research-CVE-2026-43284-

CVE-2026-43284 Dirty Frag – Linux Kernel Vulnerability Research Overview This repository documents a complete defensive security research project focused on CVE-2026-43284 Dirty Frag , a Linux kernel vulnerability affecting the XFRM/IPsec networking subsystem. The goal of this project is not to...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2023-32233 — nftables Use-After-Free: Reproduction & Root...

CVE-2026-19243 HKUDS nanobot Shell Allowlist shell.py ExecTool._spawn os command injection

A security vulnerability has been detected in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool.guardcommand/ExecTool.spawn of the file nanobot/agent/tools/shell.py of the component Shell Allowlist Handler. Such manipulation leads to os command injection. The attack can be executed...

CVE-2026-10772

DUPLICATE This CVE Record has been rejected by the Zephyr Project CNA. CVE-2026-10772 was assigned to a vulnerability already covered by CVE-2026-2411, which was assigned earlier for the same defect: the Bluetooth GATT notify/indicate paths check the permissions of the Characteristic Declaration...

CVE-2026-62959

Coturn is a free open source implementation of TURN and STUN Server. From 4.5.2 through 4.14.0, when Coturn is started with --acme-redirect and exposes a plaintext-TCP listener, an unauthenticated remote client can send a single ordinary HTTP GET request and receive a 301 response whose Location...

kernel-nday-exploits

Linux Kernel N-Day Exploits Local privilege escalation rese...

CVE-2026-47394

PraisonAI is a multi-agent teams system. Prior to version 4.6.40, the fix for GHSA-9mqq-jqxf-grvw / CVE-2026-44336 is incomplete. The original advisory description named four vulnerable handlers in mcpserver/adapters/clitools.py. Commit 68cc9427 "fixsecurity: harden MCP rules path handling…" adde...

EUVD-2026-38129

vLLM versions = 0.10.2 and 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. Because PyTorch disables sparse tensor invariant checks by default, an attacker can submit crafted embedding requests with malformed negative or out-of-bounds tensor indices, when the...

PT-2026-45053

Name of the Vulnerable Software and Affected Versions PraisonAI affected versions not specified Description An incomplete security fix allows unauthenticated users to read arbitrary files from the host system. The issue stems from a dispatcher in server.py that accepts unvalidated kwargs from the...

Exploit for CVE-2026-0532

CVE-2026-0...

GHSA-4G37-7P2C-38R9 Open WebUI Vulnerable to IDOR: Retrieval API Bypasses Knowledge Base Access Controls

IDOR: Retrieval API Bypasses Knowledge Base Access Controls Author: Andrew Orr Summary validatecollectionaccess PR 22109 checks the user-memory- and file- collection name prefixes but does not check knowledge base collections, which use raw UUIDs as collection names. Any authenticated user who...

PT-2026-40842

Four CVEs CVE-2026-29103, CVE-2026-29104, CVE-2026-29892, CVE-2026-30441 shared the same root cause. An MCP server's response to the client includes free-form text fields — tool descriptions, resource summaries, prompt argument hints. These fields are surfaced into the…...

Agentic Fuzzing: Opportunities and Challenges

Fuzzers and static analyzers find many bugs but struggle with logic bugs in mature codebases. Triggering such a bug often requires multi-step reasoning that produces no distinctive execution feedback, and variants can appear across implementations too different for a single pattern to match. Rece...

Root-Cause-Driven Automated Vulnerability Repair

Recent LLM-based systems have made automated vulnerability repair increasingly practical, but two challenges remain. First, without strong signals about where a bug originates, repair agents drift toward shallow edits that silence the observed failure while leaving the underlying defect unresolve...