CVE-2026-82522 libjxl < 0.12.0 Container Box Parser Integer Underflow via 32-bit Size Truncation

libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size truncation to sizet on 32-bit platforms. Attackers can supply a crafted JPEG XL file causing the decoder to parse...

EUVD-2026-70241

libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size truncation to sizet on 32-bit platforms. Attackers can supply a crafted JPEG XL file causing the decoder to parse...

CVE-2026-82522

libjxl before version 0.12.0 contains an integer underflow vulnerability in the container box parser . On 32-bit platforms , 64-bit box sizes are truncated to size_t, allowing a remote attacker to supply a crafted JPEG XL file that causes the decoder to parse attacker-controlled codestream bytes ...

CVE-2026-82522

libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size truncation to sizet on 32-bit platforms. Attackers can supply a crafted JPEG XL file causing the decoder to parse...

CVE-2026-82522 libjxl < 0.12.0 Container Box Parser Integer Underflow via 32-bit Size Truncation

libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allows remote attackers to inject arbitrary metadata by exploiting 64-bit box size truncation to sizet on 32-bit platforms. Attackers can supply a crafted JPEG XL file causing the decoder to parse...

mimipenguin

MimiPenguin 2.0 A tool to dump the login password from the current linux desktop user. Adapted from the idea behind the popular Windows tool mimikatz. This was assigned CVE-2018-20781 https://vulners.com/cve/CVE-2018-20781. Fun fact it's still not fixed after GNOME Keyring 3.27.2 and still works ...

backdoor-apk

backdoor-apk backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of...

zero-touch-containment

zero-touch-containment Antigena Darktrace → Aruba ClearPass CoA ब्रिज — मॉडल-संचालित, रीयल-टाइम उपयोगकर्ता/डिवाइस क्वारंटाइन। डिटेक्शन और कंटेनमेंट के बीच शून्य SOC क्लिक। एक प्रोडक्शन NDR↔NAC इंटीग्रेशन पैटर्न का सैनिटाइज़्ड रेफरेंस इम्प्लीमेंटेशन जो वित्त-क्षेत्रीय पैमाने बहु-हज़ार एंडपॉइंट, 24...

Orbit Tracer

Orbit Tracer وكيل Orbit Tracer للمعالجة الأمنية الذكية أتمت تحليل الثغرات الأمنية وتقييم المخاطر ومعالجتها عبر قاعدة الكود بأكملها باستخدام الذكاء الاصطناعي ومخطط المعرفة Orbit المشكلة تواجه فرق الأمان تحديًا حرجًا: اكتشاف الثغرات سريع. إصلاحها يستغرق إلى الأبد. root@kitploit: Manual vulnerabilit...

camoufox

Camoufox Camoufox is an open source anti-detect browser built for webscraping & AI agents. 🦊 ⚠️ This project is under development. It may not be suitable for stable production use. ⚠️ !NOTE All of the latest documentation is available atcamoufox.com. !NOTE Browser development is active at...

meltdown-exploit

MELTDOWN EXPLOIT POC Speculative optimizations execute code in a non-secure manner leaving data traces in microarchitecture such as cache. Lipp et. al 2018 published their code 2018-01-09 at https://github.com/IAIK/meltdown. Look at their paper for details: https://meltdownattack.com/meltdown.pdf...

sploits

sploits | Code| Description ---|---|--- CVE-2018-4310| code| MediaRemote: تمت معالجة مشكلة وصول من خلال إضافة المزيد من قيود العزل sandbox CVE-2018-4991| code| إصدارات تطبيق Adobe Creative Cloud Desktop 4.4.1.298 والإصدارات الأقدم تحتوي على ثغرة قابلة للاستغلال في التحقق غير السليم من الشهادة. قد...

CVE-2016-5195

سجل لأغراض التعلم فقط، ويُحظر استخدامه لأغراض غير قانونية المبدأ يعتمد مبدأ هذه الثغرة على الكتابة المتزامنة للصفحات المتسخة، مما يؤدي إلى تغيير محتوى ملف كان للقراءة فقط إذا كان الملف المعدَّل مملوكًا لـroot ويمتلك صلاحية SUID، فيمكن استغلاله لرفع الصلاحيات نطاق التأثير النوى التي تم تجميعها قبل...

are-you-get-tanstack-attack

Scanner CVE TanStack Router Un outil de scan de sécurité pour détecter la CVE TanStack Router | GHSA TanStack Router dans vos projets. Aperçu Cet outil analyse votre base de code à la recherche d'indicateurs de la vulnérabilité TanStack Router CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx, qui affecte des...

CVE-2024-27198_Lab

Labo CVE-2024-27198 Description TeamCity fournit une page réservée aux administrateurs pour la gestion des jetons qui n'est pas protégée par l'authentification. Cela permet à un utilisateur non authentifié de générer un jeton d'accès pour l'utilisateur administrateur s'il parvient à trouver l'ID...

agentic-ioc-scanner

agentic-ioc-scanner एजेंटिक AI कोडिंग टूल्स के लिए IOC स्कैनर — Mini Shai-Hulud, Gemini CLI RCE, Cursor CVE-2026-26268 और DPRK PromptMink का पता लगाता है। एक डिटेक्शन किट जो एजेंटिक AI कोडिंग सहायकों Claude Code, Gemini CLI, Cursor और आपके रिपॉजिटरी में वे जो निर्भरताएँ लाते हैं, उनके समझौते का प...

HikvisionExploiter_fixed

HikvisionExploiter Outil de sécurité éducatif pour vérifier les expositions non sécurisées de Hikvision et tester CVE-2021-36260 dans des environnements autorisés. ⚠️ Avertissement juridique et éthique Ce projet doit être utilisé uniquement sur des systèmes qui vous appartiennent ou pour lesquels...

concealed_code_execution

Concealed Code Execution Hunt& Hackett presents a set of tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows. Here you will find explanations of how these techniques work, receive advice on detection, and get sample source code for testi...

CVE-2026-53649

Joro is a web exploitation framework by BishopFox. Prior to version 1.1.1 , its default proxy mode exposes a local API on 127.0.0.1:9090 with no authentication and a wildcard CORS policy . Because plugin uploads use the CORS-safelisted multipart/form-data content type, cross-origin JavaScript on ...

CVE-2026-53649 Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE

Joro is a web exploitation framework. Prior to version 1.1.1, Joro's default proxy mode exposes a local API on 127.0.0.1:9090 that performs no authentication and applies a wildcard CORS policy. Because plugin uploads use the CORS-safelisted multipart/form-data content type, cross-origin JavaScrip...