Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618-CVE-2026-109619 This script: Scans common web...

Nginx 开源免费 WAF 防火墙宝塔插件

Nginx 开源免费 WAF 防火墙基于 OpenResty ngxlua 的高性能 Web 应用防火墙，宝塔面板（BT Panel）插件。...

CVE-2026-41940-Linux

CVE-2026-41940 — WHM/cPanel Exploit Tool Linux ⚠️ DISCLAIMER: This tool is intended for authorized penetration testing and educational purposes only. Using this tool against systems without explicit written permission is illegal. The developers are not responsible for any misuse or damage caused. ...

agentclaw-nl-control

用一句中文让机械臂干活——系统自动完成"解译 → 风险判定 → 安全确认 → 执行 → 全程审计"，在 Gazebo 仿真环境全链路可用。...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP CVE-2026-109618/109619 资产排查工具（源码 GUI 单文件exe）...

Exploit for CVE-2022-30190

CVE-2022-30190-Follina-Research A def...

Exploit for CVE-2026-109619

php2shell...

bileiwaf

勤加壁垒waf，简称：壁垒WAF bileiwaf 演示站点：demo.bileiwaf.com...

Exploit for CVE-2026-109618

PHP2Shell — CVE-2026-109618 / CVE-2026-109619 Proof of Co...

ClawPanel - OpenClaw管理面板！

🦞 OpenClaw & Hermes Agent 多引擎 AI 管理面板 — 内置 AI 助手（工具调用 + 图片识别 + 多模态），一键安装 | Tauri v2 跨平台桌面应用 | 11 种语言 | Built-in AI Assistant with tool calling & image recognition...

MEGALODON

MEGALODON Automated w...

Data-Void Exploits in Web-Searching LLMs

Web-searching Large Language Models LLMs have changed how users seek online information: instead of sifting through ranked lists of links, users read synthesized answers. This shift creates a new LLM vulnerability: a data-void exploit. Disinformers publish their narratives in search spaces where...

iOS安全攻防研究

现代 iOS 纵深防御体系系列研究笔记：SPTM/TXM/Exclaves 架构、沙箱逃逸攻防、Coruna 与 DarkSword 漏洞链、WebKit 到内核提权、OTA 固件更新安全、后台驻留与持久化检测。内容为防御性研究与公开资料整理。...

undici

An HTTP/1.1 client, written from scratch for Node.js...

firejail

Linux namespaces and seccomp-bpf sandbox...

Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election

The iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia's student protest movement, was infected with NSO Group's Pegasus spyware in 2026, the Citizen Lab said on October 19. The finding came six days before Serbia's October 25 snap parliamentary...

vulnclaw

基于 LLM Agent + MCP 工具链 + 渗透 Skill 编排， 配合 OpenAI / MiniMax / DeepSeek 等兼容模型， 自然语言输入 → 自动完成「...

EUVD-2025-26338

A vulnerability has been found in RemoteClinic up to 2.0. This issue affects some unknown processing of the file /patients/edit-patient.php. The manipulation of the argument Email leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public a...

store-api

RESTful API auto-generation for common-store data layer fastify + fastapi adapters over GQL, spec-driven dual-runtime parity...

Tufayel Ahmed TikTok Video Downloader PHP Script authorization issue vulnerability

The Tufayel Ahmed TikTok Video Downloader PHP script versions c4230497bb23dd9c1f81456fe8a982d951feac0d and earlier contain a security vulnerability. This vulnerability stems from improper handling of unknown functionality in the index.php file within the TLS Handler component, leading to inadequa...