ROOT-APP-GOBINARY-CVE-2026-78669 CVE-2026-78669 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-78669 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-78660 CVE-2026-78660 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-78660 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-27136 CVE-2026-27136 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-27136 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

mcpshield

mcpshield A drop-in fix for the unpatched MCP STDIO command-injection flaw the CVE-2026-30623 family, disclosed by OX Security in April 2026 as "by design" -- no SDK patch is coming. Import one line, and every stdio MCP server your Python app launches gets its command/args/env validated before th...

CVE-2026-18963_analyst

Open Source Identity and Access Management Add authentication to applications and secure services with minimum effort. No need to deal with storing users or authenticating users. Keycloak provides user federation, strong authentication, user management, fine-grained authorization, and more. Help...

ROOT-APP-NPM-CVE-2026-48801 CVE-2026-48801 in linkify-it - Patched by Root

Root has patched CVE-2026-48801 in the linkify-it package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-59887 CVE-2026-59887 in linkify-it - Patched by Root

Root has patched CVE-2026-59887 in the linkify-it package for Root:npm. Multiple fixed versions available...

Check-Point-Trusted-Access-Review

Check Point Trusted Access Review PLEASE ALWAYS APPLY VENDOR PATCHES AS QUICKLY AS POSSIBLE Local web app for conducting a Check Point Trusted Access Review with trusted Check Point Management API commands. Most checks are review-only. Any available remediation action requires explicit operator...

wp2shell

wp2shell-check Non-intrusive checker for CVE-2026-63030 / CVE-2026-60137 "wp2shell", a pre-authentication RCE chain in WordPress core REST API batch-route confusion → SQL injection → RCE. Affected: WordPress 6.9.0–6.9.4, 7.0.0–7.0.1, 7.1 beta full RCE chain; 6.8.0–6.8.5 SQL injection only,...

Linux-Kernel-Copy-Fail-CVE-2026-31431-

Copy Fail CVE-2026-31431 Vulnerability Analysis and Response Practice This project analyzes the operational principle of the Linux Kernel Copy Fail CVE-2026-31431 vulnerability and compares the pre-patch and post-patch state using the non-destructive checker from the public PoC repository. It doe...

CVE-2026-0768

CVE-2026-0768 Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

CopyFail

Local Privilege Escalation / Container Escape CVE-2026-31431 Usage: go build -ldflags="-s -w" -o CopyFail CVE-2026-31431.go ./CopyFail Affected Versions: Ubuntu 18.04, 20.04, 22.04, 24.04 Debian 11, 12, 13 RHEL 8, 9, 10 CentOS 8 Rocky Linux 8, 9, 10 AlmaLinux 8, 9, 10 Fedora 33-42 Alibaba Cloud...

VTIGER-CRM-RCE-CVE-2026-23698

This repository does not have a README...

mgo3-rce

MGO3 RCE This repository contains information regarding CVE-2026-19874. documentation video demo Timeline 2026-06-26: vulnerability is discovered 2026-06-26: first contact with Konami 2026-07-01: vulnerability is reported to Konami 2026-08-04: vulnerability is silently patched by Konami...

iQOO-Z9_5G-vivo-T3_5G-Root-GhostLock

iQOO Z9 5G / vivo T3 5G Jailbreak Root GhostLock Installed KernelSU An iQOO Z9 5G and vivo T3 5G jailbreak/root Android application and payloads. Both devices use the MediaTek Dimensity 7200 MT6886 platform. There are two supported run methods: the Android APK with Shizuku, or the native helper r...

UniBLEed

UniBLEed Unitree G1 RCE PoC & Scripts CVE-2026-76639 / CVE-2026-76640 technical details at boschko.ca/g1-ble-rce/ Use this repository only with robots, accounts, and networks you are authorized to test. The active chains can change the robot's WiFi configuration, stop or restart services, crash...

CVE-2026-77806

exp.py link instruction scan.py link...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb Exploit Tool Author : polar bear Version : 2.1 Applicable Vulnerability : CVE-2026-49975 HTTP/2 Protocol Memory Bomb 📖 Vulnerability Principle CVE-2026-49975 is a memory exhaustion vulnerability in the HTTP/2 protocol implementation. The attack chain consists of two key...

mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452 — MediaTek WLAN AP Heap Overflow PoC Proof of concept exploit for CVE-2026-20452, a heap-based buffer overflow in MediaTek's WLAN Access Point driver. Vulnerability CVE : CVE-2026-20452 CVSS : 8.0 HIGH CWE : CWE-122 — Heap-based Buffer Overflow Subcomponent : wlan AP driver Attack...

JCEzploit-CVE-2026-48907

JCEzploit Joomla JCE Security Testing Framework A professional command-line utility for authorized penetration testing, controlled vulnerability research, and defensive validation. Authorized use only. Run this project exclusively against systems you own or are explicitly permitted to test. Use a...