vmp2

Introduction This repository is a collection of legacy tools for working with VMProtect 2 -protected binaries. These tools enable unpacking, analysis, and experimental devirtualization of software protected with VMProtect 2. At the core of this collection is vmprofiler , a utility library that...

octopus

Octopus Huge thanks to QuoScient for having sponsored this project. Octopus is a security analysis framework for WebAssembly module and Blockchain Smart Contract. The purpose of Octopus is to provide an easy way to analyze closed-source WebAssembly module and smart contracts bytecode to understan...

CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-

CVE-2025-2945 – pgAdmin4 Authenticated RCE PoC This repository contains a proof-of-concept script created for security research and authorized penetration testing involving the vulnerability CVE-2025-2945 , affecting certain versions of pgAdmin4. The issue allows an authenticated pgAdmin user wit...

PT-2026-104355

Name of the Vulnerable Software and Affected Versions GitLab AI Gateway versions 18.1.6 through 19.2.3 GitLab AI Gateway versions 19.3 through 19.3.1 GitLab AI Gateway versions 19.4 through 19.4.0 Description An improper neutralization weakness in the self-hosted AI Gateway service allows an...

tomcat: Apache Tomcat: Misleading security logs due to incorrect control flow

A flaw was found in Apache Tomcat. Due to an always-incorrect control flow implementation, special roles and empty authorization constraints were not accurately included when the effective web.xml configuration was logged. This could lead to a security oversight where administrators might...

CVE-2026-51876

DeepTutor 1.4.0 contains an authorization bypass vulnerability in the book confirmation flow. An unauthenticated or unauthorized caller can reuse a publicly exposed bookid to submit a confirm-proposal request for an existing book, causing unauthorized overwrites of persisted metadata and spine...

sast-scan-action

Offensive360 SAST Scan — GitHub Action Запустите полное статическое сканирование безопасности приложений SAST Offensive360 при каждом push или pull request. Глубокий анализ потоков данных и taint-анализ для 60+ языков, результаты в формате SARIF для вкладки code scanning в GitHub и шлюз по...

Project-CVE-2026-33017

CVE-2026-33017 Langflow Script — Пояснение кода автор: Xer0TLabs x Persephrak Decentralized Syndicate Назначение этого документа Этот документ представляет собой высокоуровневое объяснение предоставленной Python-программы для анализа, реагирования на инциденты и защитного анализа. Он намеренно не...

CVE-2026-41940-cPanel-WHM-Verification-Tool

CVE-2026-41940 Инструмент проверки cPanel & WHM Этот репозиторий содержит Python-скрипт для проверки CVE-2026-41940 — критической уязвимости обхода аутентификации, раскрытой в cPanel & WHM. Этот проект предназначен только для авторизованной защитной валидации. Он не предназначен для разработки...

keycloak-CVE-2026-18963

CVE-2026-18963 - Обход процесса сброса учётных данных Keycloak Docker-настройка для тестирования версий Keycloak 26.x, затронутых обходом процесса сброса учётных данных. Включённая лаборатория фиксирует Keycloak 26.6.2 , который находится в затронутом диапазоне 26.0 и --username \ --new-password ...

CVE-2026-18963

Keycloak Reset Path Finder Nuclei-шаблон для обнаружения открытых конечных точек reset-credentials Keycloak среди множества прокси-префиксов, путей контекста, имен доменов realm и вариаций путей. Краткое описание Этот шаблон помогает выявить доступные потоки сброса пароля, которые могут быть...

CVE-2026-33017-Exploit

CVE-2026-33017 - Langflow Неаутентифицированное удалённое выполнение кода / \ | | \ ^ / ||||| exec без аутентификации, без песочницы, без надежды. Langflow chat.py - startflowbuild - buildgraphfromdata - Graph.frompayload - loading.py - eval.py createclass - validate.py prepareglobalscope -...

BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens

A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function getredirectresponsefromopenid of the file litellm/proxy/managementendpoints/uisso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be carri...

LiteLLM: SSO Debug Flow Has Improper Authentication

A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm/proxy/managementendpoints/uisso.py of the component SSO Debug Flow. Executing a manipulation can lead to missing authentication. The attack can be executed remotely. The exploi...

tomcat: Apache Tomcat: Misleading security logs due to incorrect control flow

A flaw was found in Apache Tomcat. Due to an always-incorrect control flow implementation, special roles and empty authorization constraints were not accurately included when the effective web.xml configuration was logged. This could lead to a security oversight where administrators might...

WordPress DevKit Pro plugin <= 2.3.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via 'original_user_id' Cookie in Frontend Revert Switch Flow vulnerability

Unauthenticated Authentication Bypass to Administrator Account Takeover via 'originaluserid' Cookie in Frontend Revert Switch Flow vulnerability discovered by h0xilo in WordPress Plugin DevKit Pro versions = 2.3.0...

ndff

ndff nDPI for fluentd ndff is a flow collector with nDPI library for fluentd. ndff has been implemented on the basis of ndpiReader which is an example in nDPI. Overview nDPI is an open source LGPLv3 library for deep-packet inspection. ndpiReader is an example in nDPI which has the following...

CVE-2025-32013

CVE-2025-32013 Security Advisory and PoC for CVE-2025-32013 How to Use 1. Start here: Read this README file for an overview of the repository structure and contents. 2. Internal Security Advisory: Open 01SecurityAdvisory.md to see the detailed write-up addressing the vulnerability, its impact, an...

cve-2026-33067

CVE-2026-33017 — Langflow Unauthenticated RCE Nuclei Template Nuclei template that detects CVE-2026-33017 — an unauthenticated remote-code-execution vulnerability in Langflow ≤ 1.8.2 reachable through the public flow-build endpoint: POST /api/v1/buildpublictmp/flowid/flow The vulnerable handler...

Detection-and-Mitigation-for-CVE-2022-2639

Detection-and-Mitigation-for-CVE-2022-2639 Description The Open vSwitch kernel module allows flexible userspace control over flow-level packet processing on selected network devices. It can be used to implement a plain Ethernet switch, network device bonding, VLAN processing, network access...