CVE-2026-88002

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.1, the message-chain reconstruction helper in backend/openwebui/utils/misc.py advanced through a chat history by map key but tracked visited entries using each message body's optional id...

soc-investigation-powershell-edrfreeze

PowerShell EDRFreeze Investigation LetsDefend Case Study This repository contains a documented SOC investigation based on a LetsDefend scenario involving suspicious PowerShell activity, a GitHub-hosted payload, and execution of the EDRFreeze tool. What this repository includes Full report:...

CVE-2026-88002 Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.1, the message-chain reconstruction helper in backend/openwebui/utils/misc.py advanced through a chat history by map key but tracked visited entries using each message body's optional id...

Malicious code in discord-mfa-solver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91086c84ad0836c4b32ee5db890c9a6d9543f00e9dd31d18aed8a6acc9bdb3e On require of the package, lib/cache.js reached from index.js executes trymodule'require'catch — a bracket-notation, error-swallowed dynamic require ...

CVE-2026-21852-PoC

Claude Code Vulnerability Educational Demo This project demonstrates three vulnerabilities disclosed by Check Point Research in Anthropic's Claude Code CLI tool. It is designed for cybersecurity students and researchers to understand how AI development tool supply-chain attacks work...

DoubleStar

root@kitploit: . . \ \ \ | | | / // | | | \ / \ | | | \ | | / \ \ \ \ \ \ \ \ | \ | | /| \ | |\ / / \ | | / | | / / / / |/ | /|/ \ / / || /|| / / / / / Windows 8.1 IE/Firefox RCE - Sandbox Escape - SYSTEM EoP Exploit Chain | Remote PAC | || ^ | HTTPS RPC/ALPC RPC/ALPC | firefox.exe |...

vuln-chain-lab

File Upload Bypass + Stored XSS PoC Lab A deliberately vulnerable web application demonstrating how a file upload bypass chains with stored XSS to create backdoor admin accounts, even when CSP, CORS, and CSRF protections are in place. Full Blog Post: KurtiseBear Blog This is an educational lab fo...

CVE-2026-33634-Scanner

CVE-2026-33634-Scanner Automated scanner for detecting indicators of compromise IOCs associated with the TeamPCP supply chain attack CVE-2026-33634 📋 Table of Contents Overview Vulnerability Features Detected IOCs Installation Usage Examples Report Format Project Structure System Requirements...

JOP_ROCKET

JOP ROCKET NOTE: With 2.15, we introduce the two-gadget disaptcher--this significantly expands possibilities with dispatcher gadgets. A lot of optimizations and additional new features have been added with 2.15 on May 26, 2021. Update: November 29, 2021: I have uploaded the slides for @Hack in...

golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect

A flaw was found in the net/http package of the Golang standard library. The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header redirected to b.com/ will not send that header to b.com. However, the...

CVE-2026-25632

CVE-2026-25632 — JSON Deserialization RCE in REST API Bugfix Challenge Inspired by a real 2026 vulnerability CVSS 10.0, actively exploited Based on: CVE-2026-25632 — Remote Code Execution via unsafe type-driven JSON deserialization discovered in the EPyT-Flow water-network simulation REST API and...

woocommerce-plugin-supply-chain-security-assessment

CVE-2026-49777 - WooCommerce Product Slider Pro Malicious Software Implantation RCE Consultant-Style Cybersecurity Report Professional vulnerability assessment report for WooCommerce plugin supply-chain risk, including business impact, remediation, and mitigation strategy. 📍 Report Snapshot...

woocommerce-plugin-supply-chain-security-assessment

CVE-2026-49777 - Implantación de Software Malicioso y RCE en WooCommerce Product Slider Pro Informe de Ciberseguridad Estilo Consultoría Informe profesional de evaluación de vulnerabilidades sobre el riesgo en la cadena de suministro del plugin de WooCommerce, que incluye el impacto empresarial, ...

mojarragadget

mojarragadget description We found a new Java gadget chain in the Mojarra Library, this repo contains 2 POC to reproduce the exploit on version 2.3 and 3.0. More information here: https://www.synacktiv.com/publications/finding-gadgets-like-its-2015-part-1.html...

CVE-2024-56059

CVE-2024-56059 Partners = 0.2.0 - Unauthenticated PHP Object Injection Description The Partners plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 0.2.0 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject...

crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

A flaw was found in Go's crypto/x509 package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service DoS for...

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

teamcity-cve-2026-63077-remediation

Enterprise Security Remediation Suite A production-grade security engineering suite containing four specialized incident response and hardening packages. 📁 Repository Module Architecture root@kitploit: . ├── README.md Enterprise Suite Index & Quick Start ├── package.json Master test runner Jest +...

CVE-2025-54068-livewire

CVE-2025-54068 - Livewire v3.6.3 Vulnerable Lab This folder builds a minimal Laravel + Livewire v3 application pinned to Livewire 3.6.3 vulnerable for reproducing CVE-2025-54068. The mounted component is intentionally written to be compatible with the public exploit chain it allows the stage-1...