ratched

ratched ratched is a Man-in-the-Middle MitM proxy that specifically intercepts TLS connections. It is intended to be used in conjunction with the Linux iptabes REDIRECT target; all connections that should be intercepted can be redirected to the local ratched port. Through the SOORIGINALDST sockop...

CVE-2026-23003-Cross-Chain-Bridge-Message-Forging-via-Missing-Origin-Chain-ID

CVE-2026-23003 – Cross‑Chain Bridge Message Forging via Missing Origin Chain ID Program Code Solidity + Python exploit // Bridge.sol - Vulnerable bridge contract contract Bridge mappingbytes32 = bool public processed; event Depositedaddress from, address to, uint256 amount, uint256 chainId;...

CVE-2024-3408-dtale

CVE-2024-3408 - D-Tale Authentication Bypass & RCE Reproducible lab environment for CVE-2024-3408, an authentication bypass and remote code execution vulnerability in D-Tale. Vulnerability D-Tale versions up to 3.15.1 are vulnerable due to: 1. Hardcoded SECRETKEY "Dtale" for Flask session signing...

httplab

The interactive web server. HTTPLabs let you inspect HTTP requests and forge responses. Install Golang go install github.com/gchaincl/httplab/cmd/httplab@latest Archlinux yaourt httplab Snap FIXME On systems where snap is supported: snap install httplab Binary distribution Each release provides...

CVE-2026-0257

CVE-2026-0257 PAN-OS GlobalProtect Authentication Bypass Vulnerability ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone...

CVE-2026-45156-POC

Hacker Matrix Glitch 🚨 CVE-2026-45156 🚨 Nextcloud useroidc ID4me JWT Signature Bypass Fully Automated Proof of Concept PoC Exploit for Admin Takeover. 📖 The Story Behind every CVE, there's a story. This one was found at 2 AM on a cold winter night, fueled by a breakup mashup on loop. Read the ful...

EUVD-2026-125815

IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands is vulnerable to Log Forging on a request to create a resource...

CVE-2026-115788

The IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands are vulnerable to Log Forging (CWE-117). This vulnerability occurs when a request is made to create a resource , potentially allowing an attacker to inject forged entries into the application logs. The base ...

CVE-2026-18963

CVE-2026-18963 Keycloak Reset-Credentials State Bypass Detector https://github.com/user-attachments/assets/005fab89-339a-4e4e-881c-da6a626f6c9e python3 kc-resetforge.py -h usage: kc-resetforge.py -h --target TARGET --targets-file TARGETSFILE --port PORT --realm REALM --client-id CLIENTID --userna...

EUVD-2026-125094

2FAuth before 9.0.1 contains a weak password recovery vulnerability that allows unauthenticated attackers to poison reset links by forging the HTTP Host header. Attackers can request password or WebAuthn recovery emails with an attacker-controlled host, capture the victim's token, and take over...

cs50-cyber-paloalto-oauth

CS50 Cybersecurity Final Project Title: The Salesloft OAuth Breach & CVE-2024-3400 Palo Alto impact Author: Yafiya Darwesh GitHub: Yafiah-Darwesh YouTube video: https://youtu.be/CxQNj9qWoZ0?si=cHCwuTIY26YHJ8aw CVE: CVE-2024-3400 Files presentation.pdf — slides script.txt — speaker notes Summary...

PT-2026-147206

Name of the Vulnerable Software and Affected Versions IBM App Connect Operator affected versions not specified IBM App Connect Enterprise Certified Containers Operands affected versions not specified Description Log forging is possible when making a request to create a resource. Log forging occur...

ClaimJumper

/ | | | | | | | | | | | | | |/ | | ' \ | | | | | ' | ' \ / \ '| | || | | | | | | | | || | || | | | | | | | | / | ||,||| || ||/ |,|| || || ./ || |/ | | || v0.1.0 Professional JWT security testing toolkit. Analyze, crack, forge, and exploit JSON Web Tokens with 15+ vulnerability checks, 100k...

Important: rsyslog

Issue Overview: An SQL injection issue affects rsyslog deployments using the optional omclickhouse output module. Its built-in INSERT template used escaping that did not account for ClickHouse backslash escapes. A sender able to submit a log message routed to this action could alter the SQL sent ...

keycloak-services: keycloak-services: DCR registration-time claim-path gap allows forging realm_access.roles

A flaw was found in the Dynamic Client Registration component of Keycloak, an open-source identity and access management solution. The issue occurs because the system does not properly restrict which claim names can be used when setting up new clients. An attacker with valid registration...

CVE-2026-96547

A flaw exists in the Dynamic Client Registration (DCR) component of Keycloak , an open-source identity and access management solution. The system fails to properly restrict which claim names can be used during the registration of new clients. This allows an attacker with valid registration creden...

CVE-2026-96547 Keycloak-services: keycloak-services: dcr registration-time claim-path gap allows forging realm_access.roles

A flaw was found in the Dynamic Client Registration component of Keycloak, an open-source identity and access management solution. The issue occurs because the system does not properly restrict which claim names can be used when setting up new clients. An attacker with valid registration...

EUVD-2026-39567

Keycloak has authentication bypass via jwt algorithm confusion...

Improper Django output handling vulnerability

Versions prior to Django 6.1.3, 6.0.10, and 5.2.19 contain a vulnerability related to improper output handling. This issue arises because django.contrib.gis.forms.widgets.BaseGeometryWidget.deserialize fails to escape submitted invalid values before logging them, potentially allowing remote...

PT-2026-115506

Name of the Vulnerable Software and Affected Versions Mattermost version 11.10.0 Mattermost versions 11.7.x through 11.7.9 Mattermost versions 11.9.x through 11.9.1 Mattermost versions 11.8.x through 11.8.5 Description An issue exists where the software fails to verify the integrity of the SAML...