C0deVari4nt

C0deVari4nt Description C0deVari4nt is a variant analysis and visualisation tool that inspects codebases for similar vulnerabilities. It leverages CodeQL, a semantic code analysis engine, to query code based on user-controlled CodeQL query templates and passes the results to our client interface...

codeql-buffer-overflow-variant

codeql-buffer-overflow-variant A deliberately vulnerable, 170-line C program used as a CodeQL static-analysis target. It reproduces the bug class of CVE-2020-8597 — the pppd EAP rhostname stack buffer overflow CWE-120 — in a program that shares none of pppd's function names, call depth, or dispat...

public-research

Nokia Deepfield ERT — public research Threat research from the Nokia Deepfield Emergency Response Team ERT, focused on DDoS botnets and related infrastructure. Each directory covers a botnet family with a brief summary and machine-readable indicators of compromise IoCs. This repo consolidates pri...

BPFDoor-controller-source

BPFDoor-controller-source Source code to recent BPFDoor's controller variant Original: 2eacc8d91b9829b9606a7945fc5311fb5876cfb42ffccc1b91f61841237b04c1 Fixed: bpfdoorcontroller.c Original to fixed helper: formatfix.py Compile: $ apt install libssl-dev $ gcc -Wno-implicit-function-declaration...

CVE-2021-40444--CABless

CVE-2021-40444--CABless version Update: Modified code so that we don´t need to rely on CAB archives the file "index.html" that triggers payload execution will contain 1 line of code only, inside 'script' tag: An article in PDF format is provided. Update: link to video demo -...

AgentTesla-Config-Extractor

AgentTesla-Config-Extractor Config extractor for AgentTesla - Discord/Telegram Variant Usage agenttesla-config-extractor.py -f Example Output Example Hashes 0de25252f312735c0a26f7ac7a27cc8a51bfcdd900fc2e8d0a8b65013988e7e9 118a34bf096f5b9ea16c31de288793192ed4bc413ee8f50198eb7df7f5cf8f0e...

rails-activestorage-vips-audit

rails-activestorage-vips-audit An Agent Skill that audits Ruby on Rails repositories for exposure to CVE-2026-66066 KindaRails2Shell — the Active Storage libvips variant-processing vulnerability that allows arbitrary file read and, in a Rails application, remote code execution. The skill is a...

miasma-toolkit

Miasma / Shai-Hulud toolkit Incident analysis + detection/remediation tooling for the Miasma worm a Mini Shai-Hulud variant that injects auto-run payloads into AI-agent / IDE configs and npm/GitHub repos. ⚠️ Disclaimer — no warranty. This is a community defensive toolkit provided "as is" , without...

CVE-2026-21012-Rust-serde-Deserialization-of-Untrusted-Enum-Variant-Injection-

CVE-2026-21012 – Rust serde Deserialization of Untrusted Enum Variant Injection Program Code Rust // serdevuln.rs - Deserializes an enum from user JSON without validation use serde::Deserialize, Serialize; use serdejson; deriveDeserialize, Debug enum AdminAction ReadLogs, DeleteUserString,...

Veridiff

════════════════════════════════════════════════════════════════ VERIDIFF the exact instruction where two runs of the same code split ════════════════════════════════════════════════════════════════ Two traces go in. One address comes out: the exact basic block where your two runs stopped agreein...

CVE-2026-31431

PoC بايثون لـ Copy Fail CVE-2026-31431 Python استخدم متغير nosplice...

CVE-2026-105570

Docker Sandboxes are vulnerable to a security bypass where OAuth response masking can be circumvented using a case-variant token host . The root cause is a discrepancy in case sensitivity handling: the system compares OAuth token-endpoint hostnames case-sensitvely for masking decisions, but reque...

CVE-2026-105570 Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host

Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider...

Chrome-CVE-2024-2887-RCE-POC

Chrome-CVE-2024-2887-RCE-Poc Overview Vulnerability Name：Google Chrome Type Confusion Threat Type：Code Execution Exploitation Likelihood：High POC Status：Publicly Disclosed In-the-Wild Exploitation Status：Not Disclosed EXP Status：Publicly Disclosed Technical Details Status：Publicly Disclosed This...

ssbd-tools

Tools for exercising Speculative Store Bypass Disable The ssbd-tools project is a collection of programs that makes use of the Speculative Store Bypass Disable SSBD functionality provided in x86 processors. SSBD is a processor based mitigation for the Speculative Store Bypass attack that is...

CVE-2025-12758

CVE-2025-12758: Validator.js isLength Unicode Variation Selector Bypass CVE ID: CVE-2025-12758 CVSS Score: 8.7 HIGH Severity: HIGH CWE: CWE-792 Incomplete Filtering of One or More Instances of Special Elements Published: November 26, 2025 Disclosed: October 19, 2025 Vulnerability Overview This...

Hardware-Vulnerability-with-Proof-of-Concept-

🛡️ Spectre Variant 2 CVE-2017-5715 — Hardware Vulnerability Research An in-depth research paper and hands-on Proof-of-Concept PoC exploring speculative execution attacks on modern CPUs. 📖 Overview This project is a research and lab-based exploration of Spectre Variant 2 CVE-2017-5715 , also known...

CVE-2026-40453

Case-Variant Camel Header Injection Reproducer CVE-2026-40453 This project demonstrates CVE-2026-40453 — an incomplete fix for CVE-2025-27636. The 2025 fix added setLowerCasetrue to HttpHeaderFilterStrategy so that case-variant header names e.g. CAmelExecCommandExecutable are filtered alongside t...

CVE-2025-53770-SharePoint-Zero-Day-Variant-Exploited-for-Full-RCE

🚨 CVE‑2025‑53770 – SharePoint Zero-Day Variant Exploited for Full RCE A Critical Escalation from CVE‑2025‑49706 By Aditya Bhatt – Red Team | VAPT 📌 TL;DR CVE‑2025‑53770 is a critical CVSS 9.8 zero-auth RCE vulnerability in Microsoft SharePoint now actively exploited in the wild. This isn’t a...

CLEANSTART-2026-GT85159 Security fix for CVE-2025-22872 applied in: cert-manager-webhook-pdns-fips 2.2.0-r0, cert-manager-webhook-pdns-fips 2.4.0-r0, cfssl 1.5.0-r1, cosign 2.4.3-r0, cosign 2.5.3-r0, ingress-nginx-controller 1.24.2-r0, kserve-rest-proxy 0.12.0-r3, kube-fluentd-operator 1.18.2-r0, kube-state-metrics 2.10.1-r0, kuberay-operator 1.3.2-r3, kubernetes-csi-node-driver-registrar 2.13.0-r0, prometheus 2.55.1-r3, prometheus-pushgateway 1.10.0-r3, prometheus-pushgateway-fips 1.10.0-r3, rclone 1.69.0-r0, runc 1.1.14-r0, tempo-fips 2.7.2-r0, wavefront-collector-for-kubernetes 1.13.0-r0

CVE-2025-22872 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...