CVE-2022-40684

CVE-2022-40684 إثبات المفهوم POC لثغرة CVE-2022-40684 التي تؤثر على أجهزة Fortinet FortiOS وFortiProxy وFortiSwitchManager. تحليل فني يمكن العثور على تحليل فني للسبب الجذري للثغرة على مدونتنا:...

CVE-2026-107785

Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 bytes instead of the 32 bytes WireGuard requires. The agent does not validate this size; instead it attempts to use the wg s...

some-tweak-to-hide-jwt-payload-values

some-tweak-to-hide-jwt-payload-values a handful of tweaks and ideas to safeguard the JWT payload, making it futile to attempt decoding by constantly altering its value, ensuring the decoded output remains unintelligible while imposing minimal performance overhead. What is a JWT Token? A JSON Web...

Azure

Kit de sécurité offensive Azure Une collection de scripts Bash et PowerShell pour les évaluations de sécurité Azure, couvrant l'escalade de privilèges IAM, la sécurité des conteneurs, l'exposition de Key Vault, la configuration d'Entra ID, et plus encore. Conçus pour être exécutés dans Azure Clou...

EUVD-2026-95774

Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 bytes instead of the 32 bytes WireGuard requires. The agent does not validate this size; instead it attempts to use the wg s...

CVE-2026-107785 Crux Agent silently fails SKA preshared key rotation when SHA-512 peering is negotiated

Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 bytes instead of the 32 bytes WireGuard requires. The agent does not validate this size; instead it attempts to use the wg s...

CVE-2026-107785

Crux Agent versions 1.9.0 before 2.0.3 are vulnerable to a silent failure during SKA preshared key rotation . When a peering session negotiates SHA-512 , the agent generates a 64-byte key instead of the 32 bytes required by WireGuard. Because the agent fails to validate this size, it attempts to ...

OAuth-Request-Crafter

OAuth-Request-Crafter OAuth Request Crafter est un outil qui vous aide à jouer avec les URLs protégées par signature OAuth. Fonctionnalités Supporte GET, POST, PUT et DELETE Proxyfie la requête Modifie l'URL, les paramètres et les en-têtes à la volée Ajoute des en-têtes supplémentaires et des...

aes-finder

AES Finder أداة للعثور على مفاتيح AES في ذاكرة العمليات الجارية. تعمل للمفاتيح ذات طول 128 و192 و256 بت. الاستخدام افتح الحل aes-finder.sln في Visual Studio 2013 لتجميع الشيفرة المصدرية. بدلاً من ذلك، استخدم gcc/clang: g++ -O3 -march=native -fomit-frame-pointer aes-finder.cpp -o aes-finder للبحث ...

CVE-2026-86851

The Livees Checkout WordPress plugin through 7.0.2 does not perform any capability, nonce or order-key check before acting on request parameters on the order confirmation page, allowing unauthenticated users to change the status of arbitrary orders, store arbitrary data and notes on them, and...

rust_citadel

Citadel Post-quantum hybrid encryption and key management server. Citadel combines X25519 + ML-KEM-768 for key encapsulation and AES-256-GCM for data encryption, following NIST's hybrid approach for the post-quantum transition. Applications encrypt and decrypt data through a REST API. Citadel...

CVE-2026-82329-poc

CVE-2026-82329 Outil d'évaluation de sécurité Artifactory PoC et outil de validation pour identifier les installations JFrog Artifactory auto-hébergées affectées par CVE-2026-82329. Cet outil valide la chaîne d'authentification suivante : 1. Crée un JWT HS256 de jonction en utilisant la clé de...

EUVD-2026-95708

The Livees Checkout WordPress plugin through 7.0.2 does not perform any capability, nonce or order-key check before acting on request parameters on the order confirmation page, allowing unauthenticated users to change the status of arbitrary orders, store arbitrary data and notes on them, and...

CVE-2026-86851

The Livees Checkout WordPress plugin, affecting versions up to 7.0.2 , contains a vulnerability where it fails to perform necessary capability, nonce, or order-key checks on the order confirmation page. This flaw allows unauthenticated users to manipulate request parameters to change the status o...

CVE-2026-86851 Livees Checkout 6.8 - 7.0.2 - Unauthenticated Order Status Change, Order Note Injection & Order Key Disclosure

The Livees Checkout WordPress plugin through 7.0.2 does not perform any capability, nonce or order-key check before acting on request parameters on the order confirmation page, allowing unauthenticated users to change the status of arbitrary orders, store arbitrary data and notes on them, and...

MsSettingsDelegateExecute

MsSettingsDelegateExecute Contournement de l'UAC sur Windows 10/11 x64 à l'aide de la clé de registre DelegateExecute de ms-settings. Ce projet Visual Studio compilera un binaire x64 statique pour tester ce problème. Licence Ces fichiers sont disponibles sous la licence BSD à 3 clauses...

CVE-2026-78026

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-78023

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

cve-2025-26466-openssh-poc

CVE-2025-26466 OpenSSH SSH2MSGPING DoS PoC تنبيه: هذا الكود مخصص حصريًا للأغراض التعليمية واختبارات الأمان المصرح بها. الهجمات غير المصرح بها على الأنظمة الأخرى غير قانونية. الثغرة CVE-2025-26466 هي ثغرة رفض خدمة DoS قبل المصادقة في OpenSSH، تتيح إغراق خادم SSH قبل اكتمال تبادل المفاتيح. التفاصيل...

Arisu

Arisu — AI Key 自动化采矿系统 Arisu 是一款自动扫描公开代码仓库（GitHub、GitLab、Gitee、Docker Hub、PyPI、npm 等）和代码片段（Gist、Issues、CommonCrawl），提取 AI 服务 API 密钥（DeepSeek、OpenAI、Anthropic、Kimi 等）并验证其有效性及余额的工具。提供 TUI 仪表板和多种输出格式（JSON、CSV、Markdown）。 功能特性 🔍 多源扫描 ：GitHub 代码搜索、Sourcegraph、Gist、Issues、GitLab、Gitee、Docker...