tachyon

Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60. Usage The default payloads are stored in payloads/ after a successful run, the ELF loader listens on port 9021. Stability notes Webkit may need several attempts, reload the page if the browser stalls. The kernel exploit may hang or panic...

appspec-yaml-leaks

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install appspec-yaml-leaks Run bellow command to check appspec-yaml-leaks -h Configurations 2. We integrated with the Telegram API to...

behat-config-leaks

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install behat-config-leaks Run bellow command to check behat-config-leaks -h Configurations 2. We integrated with the Telegram API to...

shell-history-leaks

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install shell-history-leaks Run bellow command to check shell-history-leaks -h Configurations 2. We integrated with the Telegram API to...

cdf

CDF – crypto differential fuzzing CDF is a tool to automatically test the correctness and security of cryptographic software. CDF can detect implementation errors, compliance failures, side-channel leaks, and so on. CDF implements a combination of unit tests with "differential fuzzing", an approa...

CVE-2026-98842

A flaw was found in the Linux kernel's module loading subsystem. When an error occurs during module initialization, the kernel fails to propagate the error code and incorrectly reports a successful load after the module has already been cleaned up. A local privileged user could trigger this...

phpinfo-files-leaks

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install phpinfo-file-leaks Run bellow command to check phpinfo-file-leaks -h Configurations 2. We integrated with the Telegram API to...

LeakLooker

LeakLooker - Powered by Binaryedge.io Find open databases/services GUI https://www.offensiveosint.io/leaklooker-gui-discover-browse-and-monitor-database-source-code-leaks/ https://github.com/woj-ciech/LeakLooker-X New version supports: Elasticsearch CouchDB MongoDB Gitlab Rsync Jenkins Sonarqube...

Linux Distros Unpatched Vulnerability : CVE-2026-114041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in clientclipresentgatewaymessage that passes a byte count as wide-character printf precisio...

Learn-SecByte-CTF-Labs-Collection-Windows-Kernel-Exploits-Client-Side-Browser-Attacks

Learn-SecByte-CTF-Labs-Collection-Windows-Kernel-Exploits-Clie...

CVE-2026-114041 FreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD Gateway Consent Message

FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in clientclipresentgatewaymessage that passes a byte count as wide-character printf precision. A malicious RD Gateway can send pre-authentication consent or service messages, causing the client to read twice the buffer size,...

CVE-2026-114041

FreeRDP versions prior to 3.32.1 on Windows are vulnerable to a heap out-of-bounds read in the client_cli_present_gateway_message function. The root cause is the improper passing of a byte count as a wide-character printf precision. This allows a malicious RD Gateway to send pre-authentication co...

CVE-2026-114041 FreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD Gateway Consent Message

FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in clientclipresentgatewaymessage that passes a byte count as wide-character printf precision. A malicious RD Gateway can send pre-authentication consent or service messages, causing the client to read twice the buffer size,...

EUVD-2026-106992

FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in clientclipresentgatewaymessage that passes a byte count as wide-character printf precision. A malicious RD Gateway can send pre-authentication consent or service messages, causing the client to read twice the buffer size,...

PT-2026-120195

Trigger.dev before 4.6.0 contains an improper authorization vulnerability in the GET /api/v1/projects/:projectRef/envvars endpoint, which returns the environment's root API key as TRIGGER SECRET KEY for staging, production, and preview environments. Attackers holding a restricted read:envvars key...

LLM-Attack-Prompt

LLM-Attack-Prompt A comprehensive collection of Large Language Model LLM attack techniques, prompts, and security research materials. This repository serves as a centralized resource for understanding and studying various methods used to exploit or bypass LLM safety mechanisms. The latest large...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46083)

In the Linux kernel, the following vulnerability has been resolved: spi: fix resource leaks on device setup failure Make sure to call controller cleanup if spisetup fails while registering a device to avoid leaking any resources allocated by setup. This plugin only works with Tenable.ot. Please...

CVE-2026-98607

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix object leaks in virtiogpuresourcecreateblobioctl virtiogpuresourcecreateblobioctl calls drmgemobjectrelease on both the virtiogpuresourceassignuuid and drmgemhandlecreate error paths instead of dropping the...

CVE-2026-98437

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pmruntimeresumeandget in irisenablepowerdomains to avoid leaking a runtime PM usage count on failure. Also ensure pmruntimeputsync is always called in irisdisablepowerdomains,...