BPFDoor-controller-source

BPFDoor-controller-source Source code to recent BPFDoor's controller variant Original: 2eacc8d91b9829b9606a7945fc5311fb5876cfb42ffccc1b91f61841237b04c1 Fixed: bpfdoorcontroller.c Original to fixed helper: formatfix.py Compile: $ apt install libssl-dev $ gcc -Wno-implicit-function-declaration...

C0deVari4nt

C0deVari4nt Description C0deVari4nt is a variant analysis and visualisation tool that inspects codebases for similar vulnerabilities. It leverages CodeQL, a semantic code analysis engine, to query code based on user-controlled CodeQL query templates and passes the results to our client interface...

public-research

Nokia Deepfield ERT — 公开研究 来自诺基亚Deepfield应急响应团队（ERT）的威胁研究，专注于DDoS僵尸网络及相关基础设施。每个目录涵盖一个僵尸网络家族，附有简要总结和机器可读的入侵指标（IoCs）。 本仓库整合了先前的社区研究与Deepfield ERT的原创分析。具体参考信息和归属请参见各README文件。 注意： 指标以原始（非去毒化）形式提供，以便检测工具直接使用。处理URL和域名时请谨慎。 部分指标包含威胁行为者出于品牌或反分析目的而选择的攻击性或粗俗语言。这些内容按原样复现，以利于检测和归因。 目录 目录| 描述 ---|--- aisuru|...

Hardware-Vulnerability-with-Proof-of-Concept-

🛡️ Spectre Variant 2 CVE-2017-5715 — Hardware Vulnerability Research An in-depth research paper and hands-on Proof-of-Concept PoC exploring speculative execution attacks on modern CPUs. 📖 Overview This project is a research and lab-based exploration of Spectre Variant 2 CVE-2017-5715 , also known...

CVE-2026-40453

Case-Variant Camel Header Injection Reproducer CVE-2026-40453 This project demonstrates CVE-2026-40453 — an incomplete fix for CVE-2025-27636. The 2025 fix added setLowerCasetrue to HttpHeaderFilterStrategy so that case-variant header names e.g. CAmelExecCommandExecutable are filtered alongside t...

CVE-2025-53770-SharePoint-Zero-Day-Variant-Exploited-for-Full-RCE

🚨 CVE‑2025‑53770 – SharePoint Zero-Day Variant Exploited for Full RCE A Critical Escalation from CVE‑2025‑49706 By Aditya Bhatt – Red Team | VAPT 📌 TL;DR CVE‑2025‑53770 is a critical CVSS 9.8 zero-auth RCE vulnerability in Microsoft SharePoint now actively exploited in the wild. This isn’t a...

codeql-buffer-overflow-variant

codeql-buffer-overflow-variant Un programa en C deliberadamente vulnerable, de 170 líneas, usado como objetivo de análisis estático de CodeQL. Reproduce la clase de bug de CVE-2020-8597 — el desbordamiento de búfer de pila en rhostname de EAP en pppd CWE-120 — en un programa que no comparte ningu...

CVE-2021-40444--CABless

CVE-2021-40444--CABless version Actualización: Código modificado para que no necesitemos depender de archivos CAB. El archivo "index.html" que desencadena la ejecución del payload contendrá solo 1 línea de código, dentro de la etiqueta 'script': new...

AgentTesla-Config-Extractor

AgentTesla-Config-Extractor Extractor de configuración para AgentTesla - Variante Discord/Telegram Uso agenttesla-config-extractor.py -f Ejemplo de Salida Ejemplo de Hashes 0de25252f312735c0a26f7ac7a27cc8a51bfcdd900fc2e8d0a8b65013988e7e9...

rails-activestorage-vips-audit

rails-activestorage-vips-audit Una Agent Skill que audita repositorios Ruby on Rails para detectar exposición a CVE-2026-66066 KindaRails2Shell — la vulnerabilidad de procesamiento de variantes libvips de Active Storage que permite la lectura arbitraria de archivos y, en una aplicación Rails, la...

miasma-toolkit

Miasma / Shai-Hulud toolkit Incident analysis + detection/remediation tooling for the Miasma worm a Mini Shai-Hulud variant that injects auto-run payloads into AI-agent / IDE configs and npm/GitHub repos. ⚠️ Disclaimer — no warranty. This is a community defensive toolkit provided "as is" , without...

Veridiff

════════════════════════════════════════════════════════════════ VERIDIFF the exact instruction where two runs of the same code split ════════════════════════════════════════════════════════════════ Two traces go in. One address comes out: the exact basic block where your two runs stopped agreein...

CVE-2026-21012-Rust-serde-Deserialization-of-Untrusted-Enum-Variant-Injection-

CVE-2026-21012 – Rust serde Deserialización de Enum No Confiable Inyección de Variantes Código del Programa Rust // serdevuln.rs - Deserializes an enum from user JSON without validation use serde::Deserialize, Serialize; use serdejson; deriveDeserialize, Debug enum AdminAction ReadLogs,...

CVE-2026-31431

PoC en Python para Copy Fail CVE-2026-31431 Python usar variante nosplice...

Chrome-CVE-2024-2887-RCE-POC

Chrome-CVE-2024-2887-RCE-Poc概述 漏洞名称：Google Chrome Type Confusion 威胁类型：代码执行 利用可能性：高 POC状态：已公开 在野利用状态：未公开 EXP状态：已公开 技术细节状态：已公开 This can be considered a variant bug of CVE-2024-2887 discovered by Manfred Paul and presented in Vancouver 2024. 注明 Poc和Exp均来自互联网，仅供交流学习使用，请在虚拟机内测试 Pwned by Seunghyun Lee...

ssbd-tools

Herramientas para poner en práctica Speculative Store Bypass Disable El proyecto ssbd-tools es una colección de programas que hace uso de la funcionalidad Speculative Store Bypass Disable SSBD proporcionada en los procesadores x86. SSBD es una mitigación basada en el procesador para el ataque...

CVE-2025-12758

CVE-2025-12758: Bypass del Selector de Variación Unicode en isLength de Validator.js ID de CVE: CVE-2025-12758 Puntuación CVSS: 8.7 ALTA Severidad: ALTA CWE: CWE-792 Filtrado incompleto de una o más instancias de elementos especiales Publicado: 26 de noviembre de 2025 Divulgado: 19 de octubre de...

CLEANSTART-2026-GT85159 Security fix for CVE-2025-22872 applied in: cert-manager-webhook-pdns-fips 2.2.0-r0, cert-manager-webhook-pdns-fips 2.4.0-r0, cfssl 1.5.0-r1, cosign 2.4.3-r0, cosign 2.5.3-r0, ingress-nginx-controller 1.24.2-r0, kserve-rest-proxy 0.12.0-r3, kube-fluentd-operator 1.18.2-r0, kube-state-metrics 2.10.1-r0, kuberay-operator 1.3.2-r3, kubernetes-csi-node-driver-registrar 2.13.0-r0, prometheus 2.55.1-r3, prometheus-pushgateway 1.10.0-r3, prometheus-pushgateway-fips 1.10.0-r3, rclone 1.69.0-r0, runc 1.1.14-r0, tempo-fips 2.7.2-r0, wavefront-collector-for-kubernetes 1.13.0-r0

CVE-2025-22872 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YI67273 Security fix for CVE-2026-34040 applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, amazon-cloudwatch-agent-fips 1.300069.0-r1, cadvisor-fips 0.55.1-r0, docker-compose 5.1.0-r0, gitlab-runner 18.11.1-r0, grafana-alloy 1.14.2-r2, grafana-alloy 1.15.0-r0, grafana-alloy 1.15.1-r1, grafana-alloy-fips 1.14.2.r0, grafana-alloy-fips 1.15.0-r0, grafana-alloy-fips 1.15.1-r0, harbor-trivy-adapter-fips 0.36.0-r1, k8ssandra-client-fips 0.6.4-r7, k8ssandra-client-fips 0.7.0-r5, kubevela 1.10.8-r0, melange 0.45.4-r0, melange 0.46.1-r0, melange 0.47.0-r0, melange 0.55.0-r1, melange 0.56.1-r1, paranoia 0.2.1-r0, prometheus-fips 3.10.0-r2, prometheus-fips 3.11.3-r2, promxy 0.0.93-r1, pulumi 3.299.0-r0, rancher-agent 2.11.15-r1, spire-server-fips 1.15.1-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1, tkn-fips 0.44.2-r0, vault 1.21.4-r1

CVE-2026-34040 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VF40617 Security fix for CVE-2026-33816 applied in: argo-workflows 4.0.4-r1, certificate-transparency-trillian-ctserver 1.3.2-r2, certificate-transparency-trillian-ctserver-fips 1.3.2-r0, cloudnative-pg 1.26.3-r1, cloudnative-pg-fips 1.24.4-r5, cloudnative-pg-fips 1.25.4-r4, cloudnative-pg-fips 1.27.3-r3, cloudnative-pg-fips 1.27.4-r0, cloudnative-pg-fips 1.28.1-r3, cloudnative-pg-fips 1.28.2-r0, cloudprober 0.13.9-r0, cloudprober 0.14.2-r0, jitsucom-bulker 2.10.0-r2, jitsucom-bulker 2.11.0-r1, jitsucom-bulker 2.8.6-r0, jitsucom-bulker 2.9.0-r0, keda 2.19.0-r3, keda-fips 2.18.3-r3, kube-bench 0.15.0-r0, openbao-fips 2.3.2-r6, openbao-fips 2.4.4-r6, openbao-fips 2.5.1-r2, openbao-fips 2.5.2-r0, opentelemetry-collector-contrib 0.150.0-r0, spire-server 1.13.5-r0, spire-server 1.14.5-r0, spire-server-fips 1.14.5-r0, step 0.29.0-r0, step-cli 0.27.5-r1, step-issuer 0.10.2-r1, step-issuer 0.9.11-r1, temporal 1.5.1-r0, temporal-server 1.29.6-r0, temporal-server 1.30.4-r0, temporal-server 1.31.0.153.3-r0, temporal-server-fips 1.29.6-r0, temporal-server-fips 1.31.0.153.1-r0, vault 1.20.4-r3, vault 1.21.4-r3

CVE-2026-33816 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...