CVE-2019-5736-Custom-Runtime

CVE-2019-5736-Custom-Sandbox General CVE-2019-5736 implemented using a shallow, self-written container runtime to understand the exploit. Exploit is based on and almost all copied from the runc-poc by twistlock: https://github.com/twistlock/RunC-CVE-2019-5736/tree/master/maliciousimagePOC Contain...

CVE-2024-21626-POC

CVE-2024-21626-POC Usage Instructions For educational/research purposes only. Any behavior not related to education/research is at your own risk. Usage root@kitploit: docker build . -t cve-2024-21626 docker run -it --rm cve-2024-21626 bash /poc.sh Start another terminal /bin/bash.copy Note...

pypdf: Possible long runtimes/large memory usage when retrieving outlines

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires accessing the outlines of a document with either lots of entries or nested outlines with long re-used nesting paths. Patches This has been fixed in pypdf==6.16.1...

cve-2019-5736-poc

CVE-2019-5736 إثبات المفهوم يقوم هذا التطبيق بإلحاق سلسلة نصية بالثنائي runc على المضيف. أحضر حمولتك الخاصة انظر stage2.c. للتشغيل: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...

tracehound

Deterministic runtime security buffer for high-velocity APIs External systems signal threats. Tracehound preserves evidence. Website · Documentation Index · API Reference · Configuration · RFCs · Security · Changelog Tracehound is a decision-free forensic runtime that sits between upstream...

beelzebub v3.9.1

Beelzebub Deception Runtime Framework Beelzebub is an open-source deception runtime that deploys adaptive, LLM-powered decoy services across SSH, HTTP, TCP, TELNET, and MCP protocols. It goes beyond passive honeypots by actively engaging attackers in realistic interactions, collecting high-fideli...

OpenPLC_v3

OpenPLC Runtime الإصدار 3 مقدمة OpenPLC هو متحكم منطقي قابل للبرمجة مفتوح المصدر يعتمد على برمجيات سهلة الاستخدام. ينصب تركيزنا على توفير حل صناعي منخفض التكلفة للأتمتة والبحث. تم استخدام OpenPLC في العديد من الأوراق البحثية كإطار عمل لأبحاث الأمن السيبراني الصناعي، لأنه المتحكم الوحيد الذي يوفر...

AndroidSecurityEvolution

Évolution de la sécurité Android Améliorations de sécurité notables des principales versions récentes d'Android, à commencer par Android 5.0 Lollipop API 21. Android 5.0 API 21 - Lollipop Améliorations de la sécurité - Android 5 À partir d'août 2023, les mises à jour de Google Play Services ne...

anticipator

Anticipator Runtime security for multi-agent AI systems. Anticipator detects prompt injection, credential leakage, encoding attacks, homoglyph spoofing, path traversal, and anomalous agent behavior across LangGraph pipelines — before they become incidents. No LLMs. No embeddings. No external APIs...

KubeArmor v1.7.5-rc2

KubeArmor is a cloud-native runtime security enforcement system that restricts the behavior such as process execution, file access, and networking operations of pods, containers, and nodes VMs at the system level. KubeArmor leverag...

CVE-2026-82747

Incorrect Authorization vulnerability in ash-project ash returns records that a runtime read policy denies to any actor. When a resource has an accesstype :runtime read policy a check evaluated per record rather than compiled to a filter, Ash.Policy.Authorizer decides each record in checkresult/1...

EUVD-2026-68966

Incorrect Authorization vulnerability in ash-project ash returns records that a runtime read policy denies to any actor. When a resource has an accesstype :runtime read policy a check evaluated per record rather than compiled to a filter, Ash.Policy.Authorizer decides each record in checkresult/1...

CVE-2026-82747 Ash.Policy.Authorizer returns records denied by a runtime read policy to any actor

Incorrect Authorization vulnerability in ash-project ash returns records that a runtime read policy denies to any actor. When a resource has an accesstype :runtime read policy a check evaluated per record rather than compiled to a filter, Ash.Policy.Authorizer decides each record in checkresult/1...

CVE-2026-82747

CVE-2026-82747 is an Incorrect Authorization vulnerability in ash-project ash (Elixir API framework), affecting versions 3.4.44 through 3.32.1 . The bug resides in Ash.Policy.Authorizer (lib/ash/policy/authorizer/authorizer.ex): when a resource uses an access_type: :runtime read policy, the check...

CVE-2026-82747 Ash.Policy.Authorizer returns records denied by a runtime read policy to any actor

Incorrect Authorization vulnerability in ash-project ash returns records that a runtime read policy denies to any actor. When a resource has an accesstype :runtime read policy a check evaluated per record rather than compiled to a filter, Ash.Policy.Authorizer decides each record in checkresult/1...

windows-malware-behavioral-analysis

Analyse comportementale de malwares à l'aide de REMnux & FLARE-VM Une enquête pratique de malware pour Blue Team démontrant comment des exécutables Windows suspects peuvent être analysés en toute sécurité dans un laboratoire isolé à l'aide de techniques d'analyse comportementale. Plutôt que de...

SSLPatch

SSL Patch CVE-2014-1266 Copyright c 2014 Linus Yang Introduction CVE-2014-1266 , or known as "goto fail SSL verification exploit", is a very serious SSL/TLS vulnerability of iOS and OS X. Apple issues iOS 6.1.6 and 7.0.6 to fix this problem, but ignores some users who can't or just don't want to...

CVE-2025-29927_Next.js_Auth_Bypass

CVE-2025-29927 - Next.js تجاوز المصادقة PoC هذا هو إثبات المفهوم PoC بلغة Python لاكتشاف الثغرة الحرجة CVE-2025-29927 التي تؤثر على التطبيقات المطورة باستخدام Next.js ، وتحديدًا عند استخدام البرمجيات الوسيطة للترخيص. 📌 تسمح الثغرة بتجاوز المصادقة بالكامل، والوصول إلى المسارات المحمية إذا تم تنفيذ...

CVE-2021-25646

Apache Druid RCE title="druid" && title=="Apache Druid" POST /druid/indexer/v1/sampler?for=filter HTTP/1.1 Host: x.x.x.x:8888 Content-Length: 612 Accept: application/json, text/plain, / Origin: http://x.x.x.x:8888 User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64 AppleWebKit/537.36 KHTML, like Gecko...

kern

kern: A fast, rootless sandbox and virtual resource runtime for any workload, including untrusted and AI-generated code. A real, kernel-enforced container in 3.5 ms, out of one 1.52 MB binary with no daemon. 0 RAM at rest · no daemon, no socket, nothing to start · one static binary, libc its only...