CVE-2026-39376

CVE-2026-39376 CVE-2026-39376Infinite redirect loop DoS via meta-refresh chain Summary When parse fetches a URL that returns an HTML page containing a tag, it recursively calls itself with the redirect URL — with no depth limit, no visited-URL deduplication, and no redirect count cap. An...

CVE-2023-42829

CVE-2023-42829; 'An app may be able to access SSH passphrases' This document presents both an analysis of a logic vulnerability identified in the ssh binary on macOS my first software vulnerability!, and a patch analysis demonstrating how Apple fixed the vulnerability. I reported the issue Apple...

nginx-rift-detector

NGINX Rift Detector for CVE-2026-42945 Read-only Bash checker for owned NGINX servers. It helps an operator answer two questions after the CVE-2026-42945 disclosure: Is this server still running an exposed NGINX build or risky rewrite configuration? Do local logs show crash, long-URI, or encoding...

CVE-2023-4450-Attack

CVE-2023-4450-Attack An automated tool for attacking the CVE-2023-4450 vulnerability in JimuReport Introduction This tool is only for security testing, do not use it for illegal purposes! Usage java -jar CVE-2023-4450-Attack.jar Provides three functions: command execution, CMD/Behinder memory she...

CVE-2026-4631-cockpit-RCE

CVE-2026-4631 — Code Analysis Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection Field| Detail ---|--- CVE ID| CVE-2026-4631 GHSA| GHSA-m4gv-x78h-3427 Severity| Critical CVSS 9.8 Affected versions| Cockpit 327 – 359 Fixed in| Cockpit 360 CWE| CWE-78: OS Command...

friman

friman Do you ever feel that finding the right Frida version for the job is like threading a needle? With different projects, devices, and debugging scenarios all requiring specific builds, keeping track of Frida versions can quickly become a tedious balancing act. friman pronounced "free man " i...

CVE-2024-49668

🚨 CVE-2024-49668: WordPress Verbalize WP Plugin Arbitrary File Upload Vulnerability 📋 Overview CVE-2024-49668 is a critical vulnerability in the WordPress Verbalize WP plugin versions 1.0 and below. This vulnerability allows unauthenticated attackers to upload arbitrary files, including web shell...

CVE-2026-6307-Longinus

CVE-2026-6307-Longinus Type Confusion in V8 TurboFan JS-to-Wasm call inlining + FrameState merging Better Known as 'Longinus': 2 Boundaries in One Bug Repository: https://github.com/J4ck3LSyN-Gen2/CVE-2026-6307-Longinus Detailed Report: OS-IS-CVE-2026-6307-07-2026.md Technical Write-up: Nebula...

cpufetch

Simple yet fancy CPU architecture fetching tool cpufetch is a command-line tool written in C that displays the CPU information in a clean and beautiful way Table of contents 1. Support 2. Installation 2.1 Installing from a package 2.2 Building from source 2.3 Android 3. Examples 3.1 x8664 3.2...

CVE-2021-43857

CVE-2021-43857 Gerapy prior to version 0.9.8 is vulnerable to remote code execution. This issue is patched in version 0.9.8. CVE-2021-43857 is a vulnerability marked as Critical priority CVSS 9.8 leading to remote code execution. This vulnerability works on all versions prior to 0.9.8. Tested onl...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

CVE-2025-60751

CVE-2025-60751: GeographicLib Stack-based Buffer Overflow 📌 This repository contains the analysis and technical documentation of vulnerability CVE-2025-60751 , a stack-based buffer overflow flaw located in the C++ library GeographicLib. 📝 Description The vulnerability is located in the function...

CVE-2026-116054 SH3 Módulo de Gestão/Módulo de Arrecadação weak password hash

A security vulnerability has been detected in SH3. This affects an unknown function of the component Módulo de Gestão/Módulo de Arrecadação. The manipulation leads to password hash with insufficient computational effort. The attack is possible to be carried out remotely. A high degree of complexi...

CVE-2026-116054

A security vulnerability exists in the Módulo de Gestão/Módulo de Arrecadação component of SH3 . The flaw allows for the creation of password hashes with insufficient computational effort (CWE-916, CWE-326). While the attack can be performed remotely , it requires a high degree of complexity and ...

DevGuide

OWASP Foundation Developer Guide The Developer Guide is one of the original documents from OWASP and so has a long history. The original DevGuide repository has many of the previous versions going back to the very first version 1.0 release from 2002. This is the content for the Developer Guide...

phuip-fpizdam

PHuiP-FPizdaM What's this This is an exploit for a bug in php-fpm CVE-2019-11043. In certain nginx + php-fpm configurations, the bug is possible to trigger from the outside. This means that a web user may get code execution if you have vulnerable config see below. Writeup While we were too lazy t...

Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat

Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat CVE-2025-59287 is a critical RCE vulnerability in Windows Server Update Services WSUS caused by unsafe deserialization of untrusted data. It allows remote attackers to execute arbitrary code without authentication. Urgent...

arsenal

Arsenal Arsenal is just a quick inventory, reminder and launcher for pentest commands. This project written by pentesters for pentesters simplify the use of all the hard-to-remember commands In arsenal you can search for a command, select one and it's prefilled directly in your terminal. This...

NotSecDrv

NotSecDrv - A PoC code for CVE-2018-7249 General Description An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. Two carefully timed calls to IOCTL 0xCA002813 can cause a race...

NemoClaw

NVIDIA NemoClaw: Reference Stack for Sandboxed AI Agents in OpenShell NVIDIA NemoClaw is an open source reference stack for running supported AI agents more safely inside NVIDIA OpenShell sandboxes. It provides guided onboarding, managed inference, network policy, managed integrations,...