CVE-2026-34990

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

Exploit for Improper Validation of Consistency within Input in Linux Linux_Kernel

CVE-2026-31431 "Copy Fail" Toolkit Author: byt3l0rd De...

Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover

Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover A hands-on forensic walkthrough of CVE-2025-59359, a critical OS command injection flaw in Chaos-Mesh. Learn how attackers hijack Kubernetes clusters via GraphQL mutations, and how to detect, analyze, and report the breach using ELK...

threatcl v0.6.8

threatcl Threat Modeling with HCL What happened to hcltm? hcltm has been renamed to threatcl. Welcome! Overview !TIP Want to read the new documentation? Head over to threatcl.dev There are many different ways in which a threat model can be documented. From a simple text file, to more in-depth wor...

IDAssist v2.3.0

IDAssist AI-Powered Reverse Engineering Plugin for IDA Pro Author: Jason Tang Description IDAssist is an IDA Pro plugin that integrates LLM-powered analysis directly into IDA's interface, providing AI-assisted binary reverse engineering through configurable LLM providers, semantic knowledge graph...

woody-woodpacker

Woody-Woodpacker A 42 school project that implements a binary packer for 64-bit ELF executables. The packer encrypts the executable's code sections and injects a decryption routine that executes at runtime. 🎯 About Woody-Woodpacker is a program that takes a 64-bit ELF binary as input and creates ...

CVE-2024-21262

REGISTROS Solo para reproducción de CVEs. Recursos relacionados: LINK GITHUB1 GITHUB2 ISSUE Verificar Entornos Descargar docker-24.0.6.tgz desde https://download.docker.com/linux/static/stable/x8664/. root@kitploit: sudo mkdir -p /usr/local/docker-24.0.6 sudo tar -xzf docker-24.0.6.tgz -C...

CVE-2021-27328

Path Traversal on Yeastar TG400 GSM Gateway - 91.3.0.3 This is a Proof of Concept for CVE-2021-27328 Example to get firmware decrypting password root@kitploit: http://192.168.43.246/cgi/WebCGI?1404=../../../../../../../../../../bin/firmwaredetect to get /etc/paswd root@kitploit:...

rustinel v1.4.0

Rustinel Open-source endpoint detection. Three platforms. Your rules. Run Sigma, YARA, and IOC detections on native Windows, Linux, and macOS telemetry. Written in Rust, with local alerts and no cloud account required. Bring your detection content, monitor your endpoints, and send alerts to the...

Exploit for CVE-2026-19949

CVE-2026-19949 Donate Help maintain this p...

HexWalk v2.2.0

HexWalk - Hex Editor/Viewer/Analyzer HexWalk is an Hex editor, viewer, analyzer. Built on qhexedit2, Capstone and Qt, with a built-in signature scanner, HexDig, inspired by binwalk. It is cross platform and has plenty of features: Advanced Find can find patterns in binary files based on...

vigolium v0.4.4

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...

Malicious code in cbc97b7a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d772b04ff3be605aae9022f0462b9834f488dbb6c1397b7cc1075bb68db63c0 The tarball ships only package.json with no code, scripts, main, or bin. The description field contains a 41KB base64-encoded POSIX shell script that...

MAL-2026-15878 Malicious code in cbc97b7a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d772b04ff3be605aae9022f0462b9834f488dbb6c1397b7cc1075bb68db63c0 The tarball ships only package.json with no code, scripts, main, or bin. The description field contains a 41KB base64-encoded POSIX shell script that...

OWASP-Open-Source-Intelligence-Standard

Open-source intelligence now informs decisions that affect liberty, safety, and national security. OOVS is an open standard that makes those decisions defensible. Every judgment traceable to its origin · every requirement testable against published criteria · AI output never mistaken for evidence...

secure-by-default-rce-demo

Node.js RCE Mitigation: DevOps as the Last Line of Defense This project demonstrates a critical Remote Code Execution RCE vulnerability in a Next.js application specifically via Server Actions and how infrastructure hardening effectively neutralizes the attack even when the code vulnerability...

CVE-2025-3248

CVE-2025-3248 Introducción Las versiones de Langflow anteriores a la 1.3.0 son susceptibles a una inyección de código no autenticada en el endpoint /api/v1/validate/code a través de la función Python exec. Este exploit establece una conexión de shell inversa abusando de esta vulnerabilidad. Uso...

jenkinsci__workflow-cps-plugin_CVE-2022-25173_2646-v6ed3b5b01ff1

Pipeline: Groovy Plugin Introduction A key component of the Pipeline plugin suite, this provides the standard execution engine for Pipeline steps, based on a custom Groovy interpreter that runs inside the Jenkins controller process. In principle other execution engines could be supported, with...

keycloak__keycloak_CVE-2022-4137_20-0-3

Keycloak Keycloak is an Open Source Identity and Access Management solution for modern Applications and Services. This repository contains the source code for the Keycloak Server, Java adapters and the JavaScript adapter. Help and Documentation Documentation User Mailing List - Mailing list for...

user-scanner v1.5.1

User Scanner A powerful 2-in-1 OSINT suite engineered for deep Email and Username Intelligence. With 465+ total scan vectors —including 175+ email-integrated sites and 290+ username platforms —you can map digital footprints, analyze target behavior, uncover interests, full metadata of usernames a...