Nullify

Nullify Secure. Transparent. Nullified. Nullify is an open source, modular data retention, deletion, and lifecycle governance platform. It provides a centralized framework for discovering data, evaluating retention policies, executing controlled lifecycle actions, and maintaining verifiable audit...

sopa

sopa A practical client for ADWS in Golang. Sopa implements the ADWS protocol stack MS-NNS + MC-NMF + SOAP, exposing the following command-line features: Object search & retrieval query: runs LDAP-filter searches via WS-Enumeration Enumerate + Pull loop with attribute projection, scope control...

CVE-2026-46590

CVE-2026-46590 — camel-pqc Key-Lifecycle Unsafe Deserialization Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime:...

secure-coding-practices-quick-reference-guide

Traducción al español es-UR Agradecemos todo tipo de sugerencias y correcciones sobre esta traducción de la Guía Rápida de Prácticas de Codificación Segura Para generar el PDF, posicionado en el directorio es/uy: root@kitploit: pandoc --output=OWASPSCPQuickReferenceGuide.es-UY.pdf title.pdf.yaml ...

np-audit

np-audit — npm package auditor Static security analysis for npm packages — detects obfuscated lifecycle scripts, known vulnerabilities, and malicious patterns before they run. Drop-in replacement for npm install and...

CVE-2026-54686-poc

CVE-2026-54686: PoC de suplantación de hooks del ciclo de vida DCS de Warp Versión en inglés Resumen Este repositorio es un PoC local seguro de CVE-2026-54686 basado en el advisory público de Warp GHSA-9w2v-jhww-vm85. Las versiones de Warp anteriores a la corrección no verificaban si algunos hook...

attack-surface-framework

Attack Surface Framework Overview ASF aims to protect organizations acting as an attack surface watchdog, provided an “Object” which might be a: Domain, IP address or CIDR Internal or External, ASF will discover assets/subdomains, enumerate their ports and services, track deltas and serve as a...

alibaba__one-java-agent_CVE-2022-25842_0-0-1

one-java-agent Goals 1. Provide plugin support to centrally manage multiple Java Agents. 2. Plugins support install/uninstall, requiring the plugin to implement interfaces. 3. Support traditional Java agents, i.e., already developed Java agents. Plugin System If a plugin wishes to be aware of the...

postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle

A flaw was found in PostgreSQL. This vulnerability, caused by type confusion in the 'portal'/cursor lifecycle, allows a user to execute arbitrary code as the operating system user running the database. This can occur by re-creating a cursor or other portal with different types. Successful...

CVE-2026-45321-Tanstack

Simulasi Supply Chain Attack — CVE-2026-45321 TanStack Educational Lab for Understanding npm Supply Chain Attacks, CI/CD Abuse, and Install-Time Code Execution Disclaimer Project ini dibuat hanya untuk: pembelajaran keamanan siber, riset defensive security, simulasi local lab, memahami konsep...

TriSuElla-AIDLCA-Framework

🔱 TriSuElla-AIDLCA Framework AI-Driven Development Life Cycle & Autonomous Agent Governance LLMSecOps Software Version : 3.2.0 | Framework Version : 3.2.0 | Status : Institutionalized Production-Ready, DevSecOps-Ready & CI-Verified Consolidated Invariants : 305 Checks | Rules : 204 | Domain...

CVE-2026-45321-Tanstack

Supply Chain Attack Simulation — CVE-2026-45321 TanStack Educational Lab for Understanding npm Supply Chain Attacks, CI/CD Abuse, and Install-Time Code Execution Disclaimer This project is created only for: cybersecurity learning, defensive security research, local lab simulation, understanding t...

IntelligentProcessLifecycle

IntelligentProcessLifecycle El ciclo de vida inteligente de procesos de los defensores cibernéticos activos Descripción Este GitHub aloja los archivos del póster relacionados con las categorías de falsos positivos y errores en los servicios de operaciones de seguridad. El objetivo es definir un...

claude-project-scanner

Claude Project Scanner Read-only Claude Code skill that scans third-party projects for known security risks before you open them. Catches the attack patterns documented in: CVE-2025-59536 Claude Code Lifecycle Hooks injection CVE-2025-61260 OpenAI Codex CODEXHOME injection CVE-2025-54136 Cursor...

Full-Attack-Lifecycle-Simulation-on-Metasploitable

Este repositorio no tiene un README...

Linux Distros Unpatched Vulnerability : CVE-2026-80983

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: fix socket refcount leak in smcswitchconns smcswitchconns takes a reference on the SMC socket before dropping lgr-connslock, so the connection stays...

CVE-2026-54107

Cuando ValidateHwnd no es una puerta: análisis de la causa raíz de CVE-2026-54107 Un use-after-free en la gestión del ciclo de vida de ventanas de win32kfull.sys — cómo lo encontré, cómo me convencí de que era real, y cómo se ve realmente el proceso de MSRC desde el lado del investigador. Eran ca...

PT-2026-90456

In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imx uart ports lifetime imx uart probe publishes its devm-allocated port in imx uart ports before uart add one port because console setup uses the table. The entry is not cleared when adding the port fails ...

Malicious code in cat-sis2go-utils (npm)

cat-sis2go-utils is a dependency-confusion package published against the SIS2GO namespace, with versions inflated to 99.0.0 and 99.1.0. It ships no library code index.js is an 87-byte stub, and package.json declares both preinstall and postinstall running node scripts/run.js, so the payload...

POC-CVE-2026-23520

CVE-2026-23520 — Ejecución Remota de Código en Etiquetas de Ciclo de Vida de Arcane Inyección de Comandos del Sistema Operativo en Arcane Docker Management 1.13.0 Resumen Arcane es una plataforma moderna de gestión de Docker basada en web. Las versiones anteriores a la 1.13.0 son vulnerables a un...