sgxray

SGXRay : Automatisation de la détection de vulnérabilités pour les applications SGX Intel SGX protège la logique applicative isolée et les données sensibles à l'intérieur d'une enclave grâce au chiffrement mémoire basé sur le matériel. L'utilisation d'un tel mécanisme de sécurité matériel nécessi...

mkdev

mkdev Real HTTPS for local dev — with a TUI and LAN sharing. mkdev runs trusted HTTPS on .local. A single Go binary: cert authority + reverse proxy + /etc/hosts + mDNS broadcast + a full TUI. What makes it different: LAN sharing Mark a route shared, hit https://app.local from your phone or any...

CVE-2025-7783-poc

form-data boundary randomness vulnerability CVE-2025-7783 Largely based on https://hackerone.com/reports/2913312 by https://hackerone.com/parrot409?type=user Installing: npm install Make sure you have python3 installed with the z3 module pip3 install -r requirements.txt -- the exploit code shells...

Quantum-Silicon-Core-Loader

Quantum Silicon Core Loader Primary Core: qslcl.asm v0.0.2 under development Assistant Module: qslcl.bin v0.7.4 Universal Controller: qslcl.py v2.2.2 Legally Protected Research - This project operates under established legal frameworks for security research, right to repair, and academic freedom...

boundary

Boundary Boundaryとは: https://developer.hashicorp.com/boundary/docs/what-is-boundary ウェブサイト: https://www.developer.hashicorp.com/boundary/ フォーラム: HashiCorp Discuss ドキュメント: https://developer.hashicorp.com/boundary/docs チュートリアル: HashiCorpのLearnプラットフォーム...

CVE-2026-84376

Astro is a web framework for content-driven websites. Prior to 7.2.4 , it stripped a configured non-root base path from request pathnames using a string-prefix check without verifying a path-segment boundary. For example, with base "/app", a request to "/appX/admin" resolved internally to the pro...

CVE-2026-24423

CVE-2026-24423 root@kitploit: CVE-2026-24423 – 재현 ⚠️ 보안 연구 및 승인된 테스트 전용 / For security research and authorized testing only 개요（Overview） 이 프로젝트는 CVE-2026-24423 취약점을 재현하기 위한 것입니다. 해당 취약점은 SmarterMail ConnectToHub 기능에 존재하며, 근본 원인은 다음과 같습니다: - 관리자 수준 인터페이스에 인증이 없음 - 서버가 사용자가 지정한 Hub에 능동적으로 연결함（SSRF） ...

CVE-2026-27597

CVE-2026-27597 — удалённое выполнение кода в версии Быстрое использование root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Примечания по эксплуатации Серьёзность: КРИТИЧЕСКАЯ CVSS: 10.0 Воздействие: Конфиденциальность, Целостность, Доступность...

ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

A flaw was found in the ip-address library. This library incorrectly interprets IPv4 address octets with leading zeros as decimal, while standard network parsers interpret them as octal. This inconsistency can cause applications to misclassify network targets, allowing a remote attacker to bypass...

CVE-2026-66730-Infinite-Loop-DoS-in-facil.io-MIME-Parser

Уведомление о безопасности: Бесконечный цикл DoS в MIME-парсере facil.io Частичная граница Назначенный CVE ID : CVE-2026-66730 Продукт: facil.io Затронутые версии: facil.io = 0.6.0 все 0.6.x, все 0.7.x, master; появился вместе с MIME-парсером в 0.6.0 Компонент: lib/facil/http/http.c,...

CVE-2026-22019-libcurl-HTTP-2-CONNECT-Tunnel-Mixup

CVE-2026-22019 – Смешивание туннелей HTTP/2 CONNECT в libcurl Код программы C-симуляция root@kitploit: // curlhttp2tunnelmixup.c - Simulated libcurl handling CONNECT over HTTP/2 include void handlehttp2streamint streamid // Vulnerability: after CONNECT, the proxy mixes streams with the tunneled...

CVE-2026-73714

CVE-2026-73714 is an authenticated sensitive information disclosure vulnerability in the API of HPE Networking Fabric Composer . An authenticated low-privilege operator user can access data beyond what their existing privilege level authorizes, potentially leading to further unauthorized access. ...

CTF-Web-Exploitation

Nether Portal Desync HUUP "Je ne voyage pas sur des routes établies mais je saute librement à travers le vide. Empaquetez-moi mal, et je livrerai un secret à la mauvaise porte." Description Le défi présente une application HTTP/3 QUIC superposée à UDP. Comme UDP est sans état et que le proxy...

CVE-2026-84126

Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

CVE-2026-84126 Incorrect boundary conditions in the Layout: Grid component

Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

CVE-2026-84126

Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

EUVD-2026-69075

Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

CVE-2026-84126 Incorrect boundary conditions in the Layout: Grid component

Incorrect boundary conditions in the Layout: Grid component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

CVE-2026-84126

CVE-2026-84126 is a vulnerability in the Layout: Grid component of Firefox , caused by incorrect boundary conditions . The flaw allows a network-based attack with low complexity and no required privileges , but user interaction is required (e.g., visiting a crafted page). The impact is limited to...

CVE-2026-82873

ToolJet through 3.0.0-ee-beta.2 contains authorization bypass vulnerabilities in the POST /api/v2/resources/export endpoint that allow authenticated users to disclose TooljetDB table schemas across workspace boundaries and export app definitions across granular permission boundaries. Attackers ca...