CVE-2025-49844

🚨 CVE-2025-49844 — “RediShell” Critical Remote Code Execution in the World's Fastest In-Memory Store Redis Lua scripting just became the perfect post-auth landing zone. Authenticated attacker → crafted Lua script → escape sandbox → full RCE on host ⚠️ Overview CVE-2025-49844 "RediShell " is a...

CVE-2021-42667

CVE-2021-42667 CVE-2021-42667 - SQL Injection vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: An SQL Injection vulnerability exists in the Event management software version 2.3.0. An attacker can leverage the vulnerable "id" parameter in the...

CVE-2008-4687-exploit

CVE-2008-4687-exploit Quick and dirty python exploit for CVE-2008-4687. Description by NIST: manageprojpage.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP sequences, which are processed by createfunction within the...

CVE-2025-55182

RSC Detector - React Server Components Vulnerability Scanner A Python-based security scanner for detecting and exploiting React Server Components RSC vulnerabilities in Next.js applications. This tool performs passive detection, active fingerprinting, and RCE exploitation testing. ⚠️ WARNING : Thi...

kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content

Summary ValidateResponse panics on a nil pointer when a spec declares a response header with content instead of schema. doc.Validate accepts that document, so the crash comes from a spec the library just called valid. Same class as GHSA-jpcw-4wr7-c3vq, which covered the request-parameter case in...

Recreate-cve-2023-21768

Root Cause: Comparing the AFD.sys between the 202209 and 202307 versions, in the function AfdNotifyRemoveIOCompletion, both the 202209 and 202307 Windows versions include a step that uses the ProbeForWrite function to check whether a memory region is in user mode. However, the buffer address...

Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution

The Claude Agent SDK for Python passed the resume option to the Claude CLI without validation, allowing a value beginning with - to be interpreted as a separate CLI flag. An attacker who controlled the resume value could inject an --mcp-config flag defining a stdio MCP server, resulting in...

CVE-2026-96620

The Claude Agent SDK (a Python SDK for Claude Code) is vulnerable to argument injection in versions prior to 0.2.121 . The root cause is the lack of validation on the resume option , where a dash-leading value is incorrectly parsed as an independent CLI flag. An attacker providing untrusted input...

CVE-2026-96620 Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution

Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed to the Claude CLI as a separate token without validation, so a dash-leading value is parsed as an independent CLI flag. An attacker can inject the --mcp-config flag to define a stdio MCP server, causin...

EUVD-2026-103155

Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed to the Claude CLI as a separate token without validation, so a dash-leading value is parsed as an independent CLI flag. An attacker can inject the --mcp-config flag to define a stdio MCP server, causin...

SAFE

SAFE SAFE performs controlled, repository-aware security assessment of Semgrep and Trivy findings in research artifacts. It supports two independent classification tasks: direct binary prediction SECURITYRELEVANT or NONSECURITY and the detailed multiclass contextual taxonomy three labels — see...

kingfisher

Detect and Validate Secrets Anywhere. Map Access. Revoke Fast. Find leaked secrets. Validate what’s live. Map the blast radius. Revoke fast. Kingfisher is a blazingly fast, completely free and open source secret scanner built in Rust. It detects leaked secrets across your entire stack with hundre...

-LogicSentry-AI

LogicSentry AI LogicSentry AI is a deterministic, offline application security triage engine designed to run entirely inside your local runtime environment. It combines static application security testing SAST and dynamic application security testing DAST to isolate critical business logic...

severitas

🛡️ Severitas Framework Severitas is an authorized social-engineering awareness and simulation framework. It is structurally constrained to run exclusively inside isolated laboratory environments against synthetic identities. 💎 Features Severitas isolates assessment execution logically so that...

Arkari

Arkari Just ARKARI | ---|--- Yet another LLVM-based obfuscator derived from Goron Introduction Supported features: Inter-procedural obfuscation Indirect jumps with...

Overthrone

Overthrone Active Directory Exploitation Framework. Every throne falls. Overthrone makes sure of it. !kerb...

phantom-grid

⬡ Phantom Grid Free, open-source Burp Collaborator alternative for penetration testing labs Out-of-Band OOB interaction capture · HTTP/HTTPS · DNS · SQLite · Exfil reassembly What is this? Phantom Grid is a self-hosted OOB Out-of-Band interaction capture tool — a free alternative to Burp...

BurpIA

BurpIA BurpIA turns Burp Suite into an AI-assisted web security testing environment. It analyzes real HTTP traffic with LLMs 12+ providers or local models, validates findings with autonomous CLI agents over Burp MCP, and keeps every result traceable — works on Burp Suite Community and Professiona...

CVE-2026-102607

ZoneMinder is vulnerable to authenticated OS command injection (RCE) in versions prior to 1.38.3 , specifically affecting the exportEvents() function. The root cause is the direct concatenation of the unsanitized exportFile request parameter into a shell command executed via PHP's exec() without ...

CVE-2026-102607 ZoneMinder: Authenticated OS Command Injection (RCE) via Export Feature

ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents function concatenates the attacker-controlled exportFile request parameter into a shell command without neutralizing shell metacharacters when an authenticated user with View Events...