web-traffic-generator

web-traffic-generator A quick and dirty HTTP/S "organic" traffic generator. About Just a simple poorly written Python script that aimlessly "browses" the internet by starting at pre-defined ROOTURLS and randomly "clicking" links on pages until the pre-defined MAXDEPTH is met. I created this as a...

CVE-2026-63520

CVE-2026-63520 RCE por tipo inseguro no SharePoint + cadeia CVE-2026-55040 RCE não autenticado no Microsoft SharePoint Server. Nenhuma credencial necessária. Stephen Fewer Rapid7 demonstrou a CVE-2026-55040 no Pwn2Own Berlin 2026. A Rapid7 então descobriu a CVE-2026-63520 durante pesquisas de...

Two Alleged ‘TeamPCP’ Hackers Arrested in Australia

Authorities in Australia have arrested two men believed to be members of TeamPCP , a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever. In a statement released today, the Australian Federal Police AFP said two men...

cPanelSniper

cPanelSniper CVE-2026-41940 — Bypass dell'autenticazione cPanel & WHM tramite iniezione CRLF nel file di sessione Catena di exploit in 4 fasi · Shell WHM interattiva · Scanner di massa · Pronto per pipeline · Solo stdlib Panoramica cPanelSniper è un framework di exploitation mirato per...

cPanelSniper

cPanelSniper CVE-2026-41940 — Bypass dell'autenticazione cPanel & WHM tramite iniezione CRLF nel file di sessione Catena di exploit in 4 fasi · Shell WHM interattiva · Scanner di massa · Pronto per pipeline · Solo stdlib Panoramica cPanelSniper è un framework di sfruttamento mirato per...

cve-2026-31431

CVE-2026-31431 — "Copy Fail": Escalatione dei Privilegi Locali nel Kernel Linux algifaead CISA KEV | CVSS 7.8 ALTO | Interessa i kernel Linux 4.14 – inizio 2026 9 anni Indice 1. Sintesi Esecutiva 2. Valutazione del Rischio 3. Analisi Tecnica Approfondita 4. Metodologia di Attacco — Red Team 5...

CVE-2026-31431-Copy-Fail

CVE-2026-31431 — "Copy Fail": Escalação de Privilégio Local no algifaead do Kernel Linux CISA KEV | CVSS 7.8 ALTO | Afeta kernels Linux 4.14 – início de 2026 9 anos Índice 1. Resumo Executivo 2. Avaliação de Risco 3. Análise Técnica Detalhada 4. Metodologia de Ataque — Red Team 5. Detecção e...

block-copyfail

Zusammenfassung CVE-2026-31431 „Copy Fail" ist eine Privilege-Escalation-Schwachstelle im Linux-Kernel in der kryptografischen Schnittstelle algifaead. Ein Angreifer nutzt AFALG-Sockets mit dem Algorithmus authencesn und splice, um beliebige Dateien im Kernel-Page-Cache zu korrumpieren –...

Principal-HackTheBox

HackTheBox — Principal Schwierigkeit: Mittel Betriebssystem: Linux Plattform: HackTheBox Übersicht Webanwendung, die pac4j-jwt v6.0.3 ausführt — anfällig für CVE-2026-29000. Der öffentliche RSA-Schlüssel ist unauthentifiziert über einen JWKS-Endpunkt zugänglich und kann verwendet werden, um ein...

CVE-2026-41940-cPanel-Auth-Bypass-Exploit

CVE-2026-41940: Análise de Bypass de Autenticação no cPanel/WHM Visão Geral da Vulnerabilidade A CVE-2026-41940 é uma vulnerabilidade crítica de bypass de autenticação no cPanel & WHM que afeta todas as versões atualmente suportadas. Ela permite que um atacante não autenticado contorne a...

keyhog v0.5.86

Website · Documentation · Architecture · Vyre GPU engine KeyHog: GPU-accelerated secret scanner for code, cloud, and CI KeyHog is an open-source secret scanner in Rust that finds and verifies leaked API keys, tokens, passwords, and credentials across source code, Git history, containers, cloud...

New Instagram and Facebook rules set a default two-hour limit for teens

Meta decided that discretion was the better part of valor on Wednesday, agreeing to settle a landmark child safety case for up to $17 billion. The agreement would introduce a default two-hour daily limit for teens on Instagram and Facebook, overnight restrictions, and a range of other protections...

CVE-2026-41940

CVE-2026-41940 Auto Exploit Panoramica CVE-2026-41940 è un proof-of-concept PoC che mira a cPanel/WHM. Questo exploit dimostra un bypass di autenticazione non autenticato utilizzando l'iniezione CRLF per divulgare i token di sicurezza e ottenere accesso a livello root all'interfaccia WHM,...

GhostShell

GhostShell CVE-2026-31431 — Escalatazione dei Privilegi Locali tramite Corruzione della Page Cache del Kernel Linux GhostShell è uno strumento di escalation dei privilegi locali che sfrutta una vulnerabilità nell'implementazione AEAD authencesn del kernel Linux per ottenere una shell di root da u...

droidground v1.0.14

DroidGround Website | Demo In traditional CTF challenges , it's common to hide flags in files on a system, requiring attackers to exploit vulnerabilities to retrieve them. However, in the Android world, this approach doesn't work well. APK files are easily downloadable and reversible, so placing ...

LSN-0121-1: Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: ksmbd: ipc: fix use-after-free in ipcmsgsendrequest ipcmsgsendrequest waits for a generic netlink reply using an ipcmsgtableentry on the stack. In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix...

JavaScript obfuscation: From party trick to phishing kit

We open a JavaScript artifact hoping for code, and instead get string arrays, strangely named functions, encoded URLs, runtime decoders, and eval statements. That is the point where "reading the script" stops being enough. Obfuscated JavaScript is still code, but it is code with the useful contex...

FortiSandbox-RCE-Exploit-CVE-2026-39808

FortiSandbox RCE-Scanner — CVE-2026-39808 Nicht authentifizierte OS-Befehlsinjektion als root in Fortinet FortiSandbox Schwachstelle • Installation • Verwendung • Funktionsweise • Pipeline • Shodan-Dorks • Haftungsausschluss Schwachstelle CVE-2026-39808 ist eine kritische, nicht authentifizierte...

CVE-2026-37272

CVE-2026-37272 CVE-2026-37272 Descrizione Esiste una vulnerabilità di cross-site scripting XSS riflesso in /dashboard/settings.php nel Bank Management System in Web 1.0. La vulnerabilità si verifica a causa di una sanitizzazione impropria dell'input fornito dall'utente nel parametro GET msg. Un...

sandbox-runtime v0.0.74

Anthropic Sandbox Runtime srt A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. srt uses native OS sandboxing primitives sandbox-exec on macOS, bubblewrap on Linux and proxy-based network filterin...