CVE-2026-91041

The FileX filesystem component is vulnerable to an out-of-bounds heap write during log replay when mounting a crafted FAT image with fault tolerance enabled. The vulnerability is caused by the system writing past the destination sector, allowing an attacker to control the position and value of th...

CVE-2026-91041 FileX fault-tolerant log replay writes past the destination sector when mounting a crafted FAT image

Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FXMEDIA driver callback, giving control of the instruction point...

grype

Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...

php-jpeg-injector

php-jpeg-injector Injects php payloads into jpeg images. Related to this post. Use Case You have a web application that runs a jpeg image through PHP's GD graphics library. Description This script injects PHP code into a specified jpeg image. The web application will execute the payload if it...

kali-packer

Kali-Packer This used to be the home of Kali-Vagrant's build-scripts. Since Kali 2025.2, the Kali team has stopped using Packer to generate Vagrant VMs and now uses DebOS. This is the same method used to generate our other/stock VMs. As this repository is no longer responsible for theKali Vagrant...

CVE-2026-7574

🚨 CVE-2026-7574 — Claude Desktop Cowork VM Integrity Bypass Anthropic Claude Desktop Cowork VM Image Integrity Bypass 🔥 Local Persistence Through VM Image Tampering An integrity validation weakness allowing modification of the Claude Desktop Cowork VM filesystem image rootfs.img, enabling...

CVE-2024-52794-Discourse-Stored-XSS

CVE-2024-52794 – Stored Cross-Site Scripting XSS in Discourse Summary I discovered a stored cross-site scripting XSS vulnerability in Discourse, an open-source forum platform. The vulnerability allows an attacker to execute arbitrary JavaScript in the victim’s browser by injecting a malicious...

drupal-ckeditor-fileisimage

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · drupal-ckeditor-fileisimage drupal-ckeditor-fileisimage Class: Unrestricted upload / stored XSS Reach: Remote Drupal core 11.4.8 61044508 - Drupal SA-CORE-2026-009 added FileIsImage on JSON:API and REST image fields...

TinyXPB

TinyXPB REQUIREMENTS: A Virtual Machine or Bochs running XP SP3 XP SP0 will not work, other versions may USAGE: 1. run build.bat 2. copy floppy.img to wherever you wish to use it 3. set virtual machine / bochs to boot from floppy.img 4. Boot! EXECUTABLES: Tools\MakeImage\imagefs.exe - Commandline...

powerglot

Powerglot Powerglot encodes several kind of scripts using polyglots, for example, offensive powershell scripts. It is not needed a loader to run the payload. In red-team exercises or offensive tasks, masking of payloads is usually done by using steganography, especially to avoid network level...

GG-AESY

Blogpost: https://redteamer.tips/introducing-gg-aesy-a-stegocryptor/ WARNING: you might need to restore NuGet packages and restart visual studio before compiling. If anyone knows how I can get rid of this problem, DM me. Manual To start off, I highly recommend to always use GG-AESY using verbose...

img-payloads

⚠️ Disclaimer : The content in this repository is for educational and informational purposes only; the authors hold no responsibility for misuse. Ensure proper authorization before use, act responsibly at your own risk, and comply with all legal and ethical guidelines. 🚀...

CVE-2026-105312

A vulnerability in the Console-operator for Apache Kafka Console allows a Kubernetes tenant with create permissions on Console custom resources to perform namespace-to-cluster privilege escalation . By setting spec.containers.api.spec.image to an arbitrary container image, an attacker can force t...

CVE-2026-105312 Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalation

A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container image. The operator deploys this image into a pod whose ServiceAccount is bound via ClusterRoleBinding to a ClusterRole granting cluster-wide get/list/watch on a...

CVE-2026-113495

A flaw in cockpit-machines allows for the disclosure of Red Hat Subscription Management (RHSM) authentication tokens. During image retrieval operations, these tokens are passed as command-line arguments to background helper processes. A local, unprivileged attacker capable of cross-user process i...

CVE-2026-113495 Cockpit-machines: rhsm access-token disclosure through image helper command-line arguments

A flaw was found in cockpit-machines. Red Hat Subscription Management RHSM authentication tokens are passed as command-line arguments to background helper processes during image retrieval operations. A local, unprivileged attacker on a system permitting cross-user process inspection can view thes...

klar

Klar Integration of Clair and Docker Registry supports both Clair API v1 and v3 Klar is a simple tool to analyze images stored in a private or public Docker registry for security vulnerabilities using Clair https://github.com/coreos/clair. Klar is designed to be used as an integration tool so it...

Deep-Live-Cam

Deep-Live-Cam 2.1.6 Real-time face swap and video deepfake with a single click and only a single image. Disclaimer This deepfake software is designed to be a productive tool for the AI-generated media industry. It can assist artists in animating custom characters, creating engaging content, and...

base-wordpress

BASE-WORDPRESS This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/base-wordpress Image based on: https://github.com/Medicean/VulApps/tree/master/base/wordpress...

Docker IPsec VPN Server

English | 简体中文 | 繁體中文 | Русский IPsec VPN Server on Docker Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Based on Alpine 3.23 or Debian 12 with Libreswan IPsec VPN software and xl2tpd L2TP daemon. An IPsec VPN encrypts your network traffic, so that nobody betwee...