the-few-chosen-ctf-2026

The Few Chosen CTF 2026 — Writeups Solutions, exploits, and w...

pingap v0.14.2

Pingap A reverse proxy and application gateway built on Cloudflare Pingora. It is configured through TOML files or a web admin that is part of the binary, takes changes without a restart, and comes with more than thirty plugins. 中文说明 | Documentation · 中文文档 | Examples | Plugins | Crates | Upgradin...

Root-My-Device-Payloads

Root My Device Payloads A fork of BuSung-dev/Root-My-Galaxy-...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Linux Linux_Kernel

CVE-2025-38352: Linux Kernel POSIX CPU Timer TOCTOU Race Condi...

sakuda

sakuda sakuda is short for 「さくっとDAST」 "DAST, quickly...

waf-checker v1.2.0

WAF Checker This project helps you check how well your Web Application Firewall WAF protects your product against common web attacks. It can be run as a Cloudflare Worker with a built-in interactive Web UI or as a standalone Node.js CLI tool. 🧪 Test Coverage & Status All packages are thoroughly...

eJPT-Prep-Guide

eJPT-Prep-Guide eJPT Junior Penetration Tester preparation a...

clawpatrol v0.5.10

clawpatrol The security firewall for agents. Claw Patrol sits between your agents and prod, parses their traffic at the wire, and gates each action against rules you write in HCL. For example, you can block destructive SQL, or pause kubectl delete pod until a human approves it before the request...

CVE-2026-90603: Unrestricted Upload of File with Dangerous Type

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be...

PT-2026-90987

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be...

SUSE CVE-2026-89766

In the Linux kernel, the following vulnerability has been resolved: pidfd: hold execupdatelock around namespace ioctl The PIDFDGETNAMESPACE ioctls in pidfdioctl perform a filesystem credentials ptrace access check before handing out a namespace file descriptor. The accompanying comment states tha...

CyberStar

--- Table of Contents - Overview - Architectu...

vuln-chain-labs

VulnChain Labs A deliberately vulnerable API that reproduces...

blitzstrike

BlitzStrike MCP security-audit toolbelt — blitz triage → eagle-e...

Exploit for Static Code Injection in N-Able N-Central

CVE-2026-86218 — N-able N-central Pre-Authentication RCE | IOC...

When the Whole Company Adopts AI: What It Does to Your SOC

Over the past year, we watched a new class of alert appear in enterprise security operations centers and grow faster than anything else in the stream: alerts that were triggered by AI tools and agents. Not attacks against AI, but the ordinary, everyday footprint of an organization using it, from...

mcpsnoop v0.22.0

Wireshark for MCP. mcpsnoop sits between your AI client and your MCP server and records every JSON-RPC frame they exchange, with no change to either side. Watch it live in your terminal, fail CI on what it finds, or send it to your tracing backend as OpenTelemetry spans. The problem The official...

Exploit for Improper Privilege Management in Echo Anti_Cheat_Tool

!image-removebg-preview1https://github.com/kite03/echoac-poc/...

firecracker v1.17.0

Our mission is to enable secure, multi-tenant, minimal-overhead execution of container and function workloads. Read more about the Firecracker Charter here. What is Firecracker? Firecracker is an open source virtualization technology that is purpose-built for creating and managing secure,...

ApplicationInspector v1.10.2

Introduction Microsoft Application Inspector is a software source code characterization tool that helps identify coding features of first or third party software components based on well-known library/API calls and is helpful in security and non-security use cases. It uses hundreds of rules and...