ssh-tpm-agent

SSH agent for TPM ssh-tpm-agent is a ssh-agent compatible agent that allows keys to be created by the Trusted Platform Module TPM for authentication towards ssh servers. TPM sealed keys are private keys created inside the Trusted Platform Module TPM and sealed in .tpm suffixed files. They are bou...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

DumpBrowserSecrets

DumpBrowserSecrets Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers Chrome, Microsoft Edge, Firefox, Opera, Opera GX, and Vivaldi. Quick Links Maldev...

sdk

@cosignet/sdk Thin, zero-dependency TypeScript client for Cosignet — human-in-the-loop approval for high-risk AI-agent actions, with payload-bound passkey signatures. Put a human in the loop before a dangerous action runs: pause it, get an explicit passkey approval from a person Face ID / Touch I...

ZeroCrumb

ZeroCrumb Dumping App Bound Protected Credentials & Cookies Without Privileges. Explanation ZeroCrumb bypasses the Chrome Elevation Service by impersonating a Chrome instance using Transacted Hollowing, Effectively allowing us to use the IElevator COM interface to decrypt the App Bound Key. Then,...

DumpChromeSecrets

!IMPORTANT This project is no longer maintained. Please useDumpBrowserSecrets instead, which supports Chrome, Edge, Brave, Firefox, Opera, Opera GX, and Vivaldi. DumpChromeSecrets Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsi...

CVE-2026-48178

Out of bound access in PPC due to race condition in global variable access...

CVE-2026-33972

In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation...

EUVD-2026-117261

Out of bound access in PPC due to race condition in global variable access...

CVE-2026-48178

CVE-2026-48178 involves an out of bound access in PPC. The root cause is a race condition occurring during global variable access , as identified by CWE-413 (Improper Resource Locking). Specific details regarding the affected software version, hardware component, or practical consequences are not...

CVE-2026-33972

An Out of Bound access vulnerability exists in the Exynos modem's IMS stack due to improper validation of specified quantities. While the vulnerability is identified as CWE-1284 , the provided documents do not specify the exact affected version, the specific component involved, the practical impa...

EUVD-2026-117274

In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation...

PT-2026-137356

Out of bound access in PPC due to race condition in global variable access...

PT-2026-137350

In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation...

PT-2026-136438

Name of the Vulnerable Software and Affected Versions node-opcua versions 2.42.0 through 2.179.0 Description Namespace-level access control configured via setDefaultRolePermissions is not honored by the runtime enforcement path for nodes lacking explicit per-node RolePermissions. The...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Check card index validity at probe The aloop driver blindly trusts that the given devptr-id value is within the proper card index range during probe. It’s acceptable for the devices created by the driver itself at th...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix portid extraction from SRC TAG On the packet reception path, the ID of the MAC Port on which the packet was received is embedded in the RX DMA Descriptor’s metadata. This ID is extracted usi...

ChromeKatz

ChromeKatz ChromeKatz is a solution for dumping sensitive information from memory of Chromium based browsers. As for now, ChromeKatz consists of three projects: 1. CookieKatz - The cookie dumper 2. CredentialKatz - Deprecated.. for now 3. ElevationKatz - Get the decryption key from the elevation...

Chrome-App-Bound-Encryption-Decryption

ChromElevator Chrome App-Bound Encryption Decryption 🚀 Overview A post-exploitation tool demonstrating a complete, in-memory bypass of Chromium's App-Bound Encryption ABE. This project utilizes Direct Syscall-based Reflective Process Hollowing to launch a legitimate browser process in a suspended...

CVE-2024-29943

CVE-2024-29943 A Pwn2Own SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE. Reproducing CVE-2024-29943 for Windows, based on https://github.com/bjrjk/CVE-2024-29943 Modifications The original exploit is written for Linux, so I attempted to reproduce it on...