Priv2Admin

The idea is to "translate" Windows OS privileges to a path leading to: 1. administrator, 2. integrity and/or confidentiality threat, 3. availability threat, 4. just a mess. Privileges are listed and explained at: https://learn.microsoft.com/en-us/windows/win32/secauthz/privilege-constants If the...

wifit3

wifit3 A standalone USB Wi-Fi auditor for Linux, Windows, and macOS. At least one of the supported USB adapters is required. Why? Cross-Platform: Runs identically on Linux, macOS, and Windows. Wireless Driver Heaven: Built-in wireless stack avoids kernel driver versioning hell and Windows' NDIS...

CVE-2023-3519

CVE-2023-3519 Because you can run powershell on ur mum's PC without having to install NMAP or PYTHON or tell anyone you run ARCH! ; x...

CVE-2021-36934

CVE-2021-36934 C implementation of CVE-2021-36934 also called HiveNightmare/SeriousSAM with built-in parser...

UACME

UACMe Defeating Windows User Account Control by abusing built-in Windows AutoElevate backdoor. This project demonstrates various UAC bypass techniques and serves as an educational resource for understanding Windows security mechanisms. ⚠️ Warning : This tool demonstrates security vulnerabilities...

renovate-operator

Renovate: The Kubernetes-Native Way Run Renovate on your own infrastructure with CRD-based scheduling, parallel execution, auto-discovery, and a built-in UI. If you self-host Renovate and already run Kubernetes, this operator gives you the control and observability that plain self-hosted setups...

pgedge-anonymizer

pgEdge Anonymizer Documentation: Introduction Best Practices Installation Configuration Quickstart Usage Custom Patterns Built-in Patterns Example Configuration Troubleshooting Release Notes Licence pgEdge Anonymizer is a command-line tool for anonymizing personally identifiable information PII i...

CVE-2026-110196

IBM Langflow OSS versions 1.0.0 through 1.12.4 are affected by a vulnerability where a remote attacker with a low-privileged authenticated account can bypass administrator-only restrictions. By providing attacker-supplied inputs to a built-in code-execution component, the attacker can execute arb...

Apache bRPC authorization issue vulnerability

Versions of Apache bRPC prior to 1.18.0 contain an authorization issue vulnerability. This vulnerability arises when ServerOptions.auth and ServerOptions.internalport are set simultaneously; the HTTP built-in service on internalport can then be exploited. Upon receiving authentication for the fir...

Nextcloud Collabora Online Built-in CODE Server 26.4.302 Command Injection Exposure Checker

The Collabora Online Built-in CODE Server richdocumentscode app for Nextcloud before version 26.4.303 contains an unauthenticated OS command injection vulnerability in proxy.php. This tool passively checks a supplied Nextcloud instance for public exposure indicators...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Tracing: Build event generation tests are now performed only as modules. The kprobes and synth event generation test modules add events and lock them get a reference to those event files in the module initialization function,...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: tick/nohz: unexport init-annotated ticknohzfullsetup EXPORTSYMBOL and init are a bad combination because the .init.text section is freed after initialization. As a result, modules cannot use symbols annotated init. Accessing a...

CVE-2026-73252 Mongoose: Unauthenticated remote heap out-of-bounds read in built-in TLS: off-by-one length check in mg_tls_recv_record() underflows recv_len to SIZE_MAX

Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS stack selected by MGTLSBUILTIN in src/tlsbuiltin.c accepts a TLS 1.3 record whose decrypted size is exactly the 16-byte authentication tag with no plaintext or ContentType byte. In mgtlsrecvrecord, the msgsz...

CVE-2026-73252

The Mongoose embedded web server and network library (prior to version 7.23 ) contains an unauthenticated remote heap out-of-bounds read vulnerability in its built-in TLS stack. The root cause is an off-by-one length check in mg_tls_recv_record() within src/tls_builtin.c, which allows a TLS 1.3 r...

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. A web shell is a small file that executes any command an...

CVE-2026-110447

Collabora Online Built-in CODE Server before 26.4.303 richdocumentscode, a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't...

CVE-2026-110447

Collabora Online Built-in CODE Server before 26.4.303 richdocumentscode, a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't...

CVE-2026-110447

Collabora Online Built-in CODE Server before 26.4.303 richdocumentscode, a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't...

EUVD-2026-100780

Collabora Online Built-in CODE Server before 26.4.303 richdocumentscode, a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't...

CVE-2026-110447

The Collabora Online Built-in CODE Server (Nextcloud app richdocumentscode ) is vulnerable to remote code execution (RCE) via an OS command injection in the proxy.php script. The flaw occurs specifically when the CODE server is not running, such as immediately after a restart, crash, or upgrade. ...