CVE-2026-118275

A vulnerability was found in a2ui-project a2ui up to 0.10.6. This affects the function DataContext.resolveSignal of the file renderers/webcore/src/v09/rendering/data-context.ts of the component Resolver. The manipulation results in resource consumption. The attack can be launched remotely. The...

Seal

Seal Peer-to-peer, end-to-end encrypted chat. No inbox. No account to recover. Nobody's listening — not even us. github.com/Emn4tor/Seal !GitHub last commithttps://img.shields.io/github/last-commi...

credactor

Credactor Find the secret. Fix it. Commit clean. Most secret scanners stop at the alert: you get a list of leaked credentials and the cleanup is yours. Credactor finds hardcoded secrets and rewrites them in place, so a leak in your working tree goes from found to fixed in one command. It runs on...

reditrap

RediTrap Honeypot RediTrap is a minimal Redis honeypot tailored to spot early attempts to exploit CVE-2025-49844 "RediShell", the critical Remote Code Execution vulnerability described by Wiz Research. The exploit abuses a 13 year old use-after-free bug in the embedded Lua engine: Redis would sto...

CVE-2021-30632

From: https://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/v8/CVE-2021-30632 The analysis of this bug can be found here. This is a Chrome bug that is reported by an anonymous researcher and was believed to be exploited in the wild. The exploit here is tested on v8 version...

AhsayCBS-Auth-Bypass-RCE

AhsayCBS Authentication Bypass & RCE CVE-2026-105133 + CVE-2026-105134 — Unauthenticated remote code execution in AhsayCBS ≤10.3.4 Blog Post Technical analysis covering root cause, exploitation, and indicators of compromise is available on the Horizon3.ai attack research blog:...

yowie

Yowie ▄▄▓▓▓▓▓▓▓▓▓▄▄ ▄▓▓▒▒▒▒▒▒▒▒▒▒▒▓▓▄ Yowie · tracking down the SaaS nobody told you about ▓▓▒▒░░░░░░░░░░░▒▒▓▓ ▓▒░░ ● ● ░▒▓ Domain acme.com.au ▓▒░░ ▼ ░▒▓ Candidates acme, acmecorp ▓▓▒░░ ╰───╯ ░▒▓▓ ▀▓▓▒▒░░░░░░░░░▒▒▓▓▀ ▀▀▓▓▓▓▓▓▓▓▓▓▓▀▀ Finds the SaaS services an organisation subscribes to, using onl...

permanently-jailbroken

Permanently Jailbroken We asked GPT-4, Claude, Gemini, DeepSeek, Grok, and Mistral 5 questions about their own programming. All 6 said jailbreaking will never be fixed. Not because the patches are bad. Because alignment doesn't change what the model understands — it changes what the model says. T...

MCPDebugger

Fatmike's MCP Debugger Server Introduction This project is a self-made, lightweight MCP Debugger Server developed for learning and experimentation. The MCP Debugger Server exposes debugger functionality as MCP tools, enabling external MCP clients to control execution, inspect memory, and analyze...

rmx3888-cve-2026-43499-config

CVE-2026-43499 Exploit Configuration for realme RMX3888 Device Information Brand/Model : realme RMX3888 Android Version : 16 SDK 36 Build ID : BP2A.250605.015 Kernel : Linux 6.1.141-android14-11-o-gffc54a6d2287 SoC : Qualcomm SM8650 Snapdragon 8 Gen 3 Architecture : ARM64 aarch64 Overview This...

scopeblind-gateway

protect-mcp Local policy enforcement and signed decision receipts for AI agent tool calls. Developer page · Quickstart · Agent setup · Policy packs · Sample record · Integrations · Documentation · Contribute Put the gateway between an MCP client and its tool server, or use its hooks in a coding...

CVE-2018-15473-py3

CVE-2018-15473-py3 https://github.com/r3dxpl0it/CVE-2018-15473 is the original I got this from. All I did was make this a little more friendly for python3. fixed the print statements and changed ".handlertable" to ".clienthandlertable" so paramiko doesnt complain. It may not for you but on the...

WordPress-HT-Contact-CVE-2025-7340-RCE

WordPress HT Contact Form Widget | CVE-2025-7340 File Upload Vulnerability Analysis Vulnerability Location Vulnerability Location: ht-contactform/admin/Includes/Services/FileManager.php Key Function: tempfileupload 1. Main Vulnerability Point: tempfileupload function Line 63 public function...

CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability

CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability By Mark Mallia Containerization and the Power of Automation Containerization is the backbone of modern application delivery: it bundles an entire runtime stack into a single, immutable image that can be rolled out on any host in a cluster...

POC_CVE-2024-12537

CVE-2024-12537 Open WebUI Code Format DoS Lab This repository contains a local, isolated reproduction lab and nuclei template candidate for CVE-2024-12537, an unauthenticated denial-of-service vulnerability in Open WebUI's code formatting endpoint. The lab does not send large denial-of-service...

ThreatHunting-JupyterNotebooks

🟣 Weekly Purple Team - Threat Hunting Notebooks A collection of threat hunting and detection engineering Jupyter notebooks accompanying the Weekly Purple Team YouTube channel. Each notebook provides detection logic to help security professionals understand both offensive techniques and defensive...

sshconfig-lint

sshconfig-lint One engine for every place your SSH config changes. sshconfig-lint finds semantic mistakes in OpenSSH client configs: duplicate hosts, broken identity paths, unsafe options, weak algorithms, wildcard ordering, and tangled Include chains. Use the same rule codes locally, in Git hook...

gobalance-patch

GoBalance Security Patch & PoC Advisory package forgitlab.com/n0tr1v/gobalance - master branch, commit bb1b0f3 "fix crash". Status: CRITICAL - two independent full-takeover paths. The upstream patch1 branch fixes neither of them. This package contains a complete security patch, an end-to-end...

cpanel-cve-2026-41940-ioc

CVE-2026-41940 IOC Scanner Detection script for the cPanel/WHM authentication bypass CVE-2026-41940 affecting all cPanel versions after 11.40. This is a rewrite of the upstream cPanel detection script with fixes for false positives and added log correlation. What it does Scans...

Ashwesker-CVE-2026-21509

🛡️ CVE-2026-21509 — Microsoft Office Zero-Day Status: Actively exploited → Emergency patch released Severity: 🔴 High Risk Type: Security Feature Bypass 🔍 What is it? CVE-2026-21509 is a serious vulnerability in Microsoft Office that allows attackers to bypass built-in security protections by...