TriforceAFL

New: For those looking to play with TriforceAFL and TLSF, Richard Johnson created a Dockerfile which installs both and even builds a Linux kernel for you. It's available here https://hub.docker.com/r/moflow/afl-triforce/tags/. Also new: afl-tmin now works with the forkserver!...

CVE-2026-87164

Oracle Banking Branch (Oracle Financial Services Applications), component: Reports , is affected in supported versions 14.5.0.0.0 through 14.9.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though it is rated as difficult to exploit and requires hum...

EUVD-2026-79819

Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications component: Reports. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79408

Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications component: Reports. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83080

Oracle Banking Branch (component: Reports ) in Oracle Financial Services Applications versions 14.5.0.0.0 through 14.9.0.0.0 contains a vulnerability that allows a low-privileged attacker with network access via HTTP to achieve full compromise (high confidentiality, integrity, and availability im...

Jump-over-ASLR-BTB

Branch Predictors & ASLR Author: Byte Reaper Description This repository contains research C implementation that demonstrates concepts related to branch predictors, speculative execution, and cache-based side channels in the context of address space layout randomization ASLR. Requirements :...

ConcoLLMic

ConcoLLMic: Agentic Concolic Execution Paper : IEEE S&P 2026 ConcoLLMic is the first language- and theory-agnostic concolic executor powered by LLM agents. Unlike traditional symbolic execution tools that require language-specific implementations and struggle with constraint solving, ConcoLLMic:...

qubes-core-admin

Qubes core, version 3 This is master branch of the Qubes OS core. API documentation is available: https://dev.qubes-os.org/projects/core-admin/en/latest/...

gh-safe-repo

gh-safe-repo Create GitHub repositories with safe defaults applied automatically. Replaces the five-minute post-creation settings checklist with a single command. root@kitploit: gh-safe-repo create Branch protection, immutable tags, Dependabot, restricted Actions permissions, secret scanning with...

Hardware-Vulnerability-with-Proof-of-Concept-

🛡️ Spectre Variant 2 CVE-2017-5715 — Hardware Vulnerability Research An in-depth research paper and hands-on Proof-of-Concept PoC exploring speculative execution attacks on modern CPUs. 📖 Overview This project is a research and lab-based exploration of Spectre Variant 2 CVE-2017-5715 , also known...

CVE-2023-0045

Bypassing Spectre-BTI User Space Mitigations on Linux This is a working document, please send us feedback if you think we got something wrong or if we missed a citation Version 1.0 José Oliveira esoj Rodrigo Branco BSDaemon Introduction When testing the success rate of Spectre-BTI attacks, we...

scorecard

OpenSSF Scorecard...

ESAPI__esapi-java-legacy_CVE-2022-24891_2-2-3-1

Enterprise Security API for Java Legacy OWASP® ESAPI The OWASP Enterprise Security API is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications. The ESAPI for Java library is designed to make it easier for programmers t...

CVE-2021-33624

Proof of Concept for CVE-2021-33624 compile with gcc -pthread -o bpfspectretypeconfusion bpfspectretypeconfusion.c -Wall -ggdb -std=gnu99 execute with sudo ./bpfspectretypeconfusion 1 2 ffffffffa4925620 0x10 where 1 and 2 are CPU threads which run on two distinct hardware cores, ffffffffa4925620 ...

CVE-2021-3345

CVE-2021-3345 How to build vulnerable libgcrypt root@kitploit: git clone --single-branch --branch LIBGCRYPT-1.9-BRANCH https://dev.gnupg.org/source/libgcrypt.git cd libgcrypt git checkout aa3f595341eb ./autogen.sh ./configure --enable-maintainer-mode && make How to use exploit root@kitploit: make...

mitmproxy

mitmproxy !autofix.ci:...

functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

CVE-2026-82035 PyMuPDF 1.28.2 Path Traversal via extract_objects() Font Branch

PyMuPDF through 1.28.2, fixed in commit b2c8f3a, contains a path traversal vulnerability in the font branch of extractobjects in src/main.py, where the output filename is constructed by joining a document-controlled BaseFont name directly onto the user-supplied output directory without stripping...

CVE-2026-59960

@argos-ci/core versions prior to 6.2.1 contain an OS Command Injection (CWE-78) in the gitFetch() and gitMergeBase() functions within packages/core/src/ci-environment/git.ts. When a project has hasRemoteContentAccess: false (the default without a Git provider integration), attacker-controlled bra...

CVE-2026-59960 Argos JavaScript: CI Branch Name OS Command Injection in @argos-ci/core

Argos JavaScript provides official Argos SDKs for JavaScript. Prior to Argos core package version 6.2.1, attacker-controlled CI branch or ref values from GITHUBHEADREF or ARGOSBRANCH can flow through config.branch and getMergeBaseCommitSha when hasRemoteContentAccess is false. The gitFetch and...