smolvm

smolvm Ship and run software with isolation by default. This is a CLI tool that lets you: 1. Manage and run custom Linux virtual machines locally with: sub-second cold start, cross-platform macOS, Linux, Windows, elastic memory usage. 2. Pack a stateful virtual machine into a single file...

turbolite

turbolite turbolite is a SQLite VFS in Rust that serves point lookups and joins directly from S3 with sub-250ms cold latency. This repo is a Cargo workspace with two crates: turbolite — Pure Rust library. SQLite VFS with page-level compression, encryption, and S3 tiering. turbolite-ffi — C FFI /...

memguard

MemGuard Enclave de software para almacenar información sensible en memoria. Este paquete intenta reducir la probabilidad de que datos sensibles queden expuestos mientras están en memoria. Su objetivo es ser compatible con los principales sistemas operativos y está escrito en Go puro...

memguard

MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...

BareMetal-RAM-Dumper

BareMetal RAM Dumper Una herramienta bare-metal simple para x86 diseñada para arrancar desde un disco/USB y volcar la RAM del sistema directamente al medio de arranque. Se basa en interrupciones de BIOS para arrancar y realizar operaciones de disco, y entra en modo unreal para acceder a memoria p...

Centry

Centry WARNING: THIS IS EXPERIMENTAL SOFTWARE. IT IS LIKELY TO CONTAIN BUGS. Updates If you have already installed Centry, please run git pull to update to the latest version. The latest updates make it much more secure against replay attacks. Introduction Centry is a panic button intended to...

henkaku

Build Only Linux is supported. You will need: Python 3 Vita SDK Uglify JS Ubuntu 16.04 package node-uglify tested version 2.4.15 Other standard tools that you should already have installed, such as openssl, dd, cat, touch All tools should be in your PATH. Run ./build.sh to build everything. This...

CVE-2026-21002-Serverless-Cold-Start-Credential-Leakage-via-Reused-tmp

CVE-2026-21002 – Serverless Cold Start Credential Leakage via Reused /tmp Program Code Python AWS Lambda sim root@kitploit: lambdafuncsim.py - Simulated serverless function import os, tempfile, time SECRETFILE = '/tmp/credentials' reused across warm starts def handlerevent: On first invocation,...

CVE-2026-23007-Serverless-Cold-Start-Memory-Remanence-Data-Leakage-

CVE-2026-23007 – Serverless Cold Start Memory Remanence Data Leakage Program Code Python Lambda sim root@kitploit: lambdaremanence.py - Simulated Lambda environment reuse import os, secrets def firstinvocation: Simulates storing a secret in a global variable global SECRET SECRET =...

CVE-2022-3546

CVE-2022-3546 https://vulners.com/cve/CVE-2022-3546 A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /csms/admin/?page=user/list of the component Create User Handle...

smolvm v1.8.3

smolvm Ship and run software with isolation by default. This is a CLI tool that lets you: 1. Manage and run custom Linux virtual machines locally with: sub-second cold start, cross-platform macOS, Linux, Windows, elastic memory usage. 2. Pack a stateful virtual machine into a single file...

ColdFusion - Path Traversal

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read and limited write access. An attacker could exploit this vulnerability to access sensitive...

Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments

Cybersecurity researchers have disclosed details of a large-scale fraud campaign that involves creating lookalike websites of major Russian companies with an aim to siphon funds from international firms for more than nine years. According to Russian cybersecurity vendor F6, the threat actors have...

CVE-2026-48320

ColdFusion is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. The vulnerable component is restricted to an...

CVE-2026-48321 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain unauthorized read and write access. The vulnerable component is restricted to an administrative network zone by default. Exploitation...

CVE-2026-12257

Versions of Mura CMS prior to 10.0.712 contain a critical remote code execution RCE vulnerability. The flaw is located in the endpoint “/index.cfm/api/json/v1/default”, where the “method” parameter in POST requests is not properly validated or sanitised before being processed by the ColdFusion...

EUVD-2026-43487

Versions of Mura CMS prior to 10.0.712 contain a critical remote code execution RCE vulnerability. The flaw is located in the endpoint “/index.cfm/api/json/v1/default”, where the “method” parameter in POST requests is not properly validated or sanitised before being processed by the ColdFusion...

VulnCheck KEV: CVE-2026-48282

Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user...

CVE-2026-48307

creationtimestamp| type| source ---|---|--- 2026-07-01 09:45:23+00:00| seen| https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse 2026-07-01 13:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q 2026-07-08...

CVE-2026-48285

creationtimestamp| type| source ---|---|--- 2026-07-01 09:45:21+00:00| seen| https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse 2026-07-01 13:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q 2026-07-08...