CVE-2026-99055

A flaw was found in the Linux kernel's TCP networking subsystem. When handling zero-copy data reception involving certain device memory buffers, the kernel fails to properly validate memory fragment types before dereferencing them, resulting in a null pointer dereference. An attacker sending...

CVE-2025-49596-PoC

CVE-2026-23744-PoC Automated PoC for CVE-2026-23744 RCE on MCPJam inspector prior to 1.4.2 on linux targets How to use use netcat to run listener on any port like 9002. nc -nvlp 9002 use the automation like this python3 CVE-2025-49596.py https://mcpjam-server.com...

CVE-2026-99054

A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication subsystem. A local user could exploit this flaw to cause a Denial of Service DoS or potential memory corruption. The vulnerability arises from a race condition during topology server shutdown, where connections ar...

CVE-2026-99053

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC subsystem. This flaw allows a local user to cause a denial of service DoS or potentially escalate privileges on the system. The issue occurs because link configuration handlers release read locks without properly...

CVE-2026-23111

🐧 CVE-2026-23111 - Linux Kernel nftables Use-After-Free Vulnerability ⚠️ Use-After-Free in Linux Kernel nftables 📖 Overview CVE-2026-23111 is a high-severity Use-After-Free UAF vulnerability affecting the Linux kernel's netfilter/nftables subsystem. The flaw originates from incorrect handling of...

CVE-2026-99052

A flaw was found in the Linux kernel. When a Network File System version 4 NFSv4 share configured with security labels is mounted multiple times, the Security-Enhanced Linux SELinux subsystem fails to preserve native labeling flags on the reused filesystem. This flaw allows a local user to silent...

CVE-2026-99051

A flaw was found in the Linux kernel's fsverity subsystem. A lack of proper synchronization when removing file verification structures allows concurrent lookup operations to access memory after it has been freed. A local user could exploit this vulnerability by triggering simultaneous file...

CVE-2026-99050

A flaw was found in the Linux kernel's Multi-Protocol Synchronous Serial Engine MPSSE GPIO driver. A race condition occurs when enabling interrupt polling while disconnecting a device, allowing scheduled background work to run after the underlying device memory has been released. A local attacker...

TTPRunner

TTPRunner Autonomous TTP execution agent for purple team operations Feed it a threat report. It builds the attack plan. You approve. It executes. Features Feature| Description ---|--- Multi-Format Parsing| PDF LLM-powered, STIX 2.1, Markdown, URLs - paste a threat report and go LLM Analysis|...

Kali-Linux

Kali-Linux hacks and setup current release Kali-weekly images: href Download single inode apt install subversion -y svn checkout https://github.com/nu11secur1ty/Kali-Linux/trunk/$inode Introduce: Is Kali Linux Right For You? As the distribution’s developers, you might expect us to recommend that...

cve-2026-31431

CVE-2026-31431 — "Copy Fail" Research Repository A 100% reliable Linux local privilege escalation affecting every mainstream distribution since 2017. One logic bug in authencesn, chained through AFALG and splice into a 4-byte page-cache write — silently exploitable for nearly a decade. ⚠️...

metasploitable-penetration-testing-lab

🔐 Metasploitable 2 Penetration Testing Lab A controlled cybersecurity lab project demonstrating vulnerability discovery, exploitation, post-exploitation validation, and defensive mitigation within an isolated virtual environment. 📌 Project Overview This project simulates a real-world penetration...

CVE-2021-3560-PolkitPrivilegeEsclation

CVE-2021-3560-Polkit-Privilege-Esclation PoC Original research by Kevin Backhouse This is just a Bash PoC script, that automates the exploitation steps mentioned in Kevin Backhouse's blog. Read his post on this vulnerability:...

CVE-2026-31431-Copy-Fail---Minified-LPE-PoC

CVE-2026-31431-CopyFail---Minified-LPE-PoC ⚠️ Disclaimer For Educational and Authorized Security Testing Purposes Only. This Proof-of-Concept PoC was synthesized for authorized Red Team emulation and vulnerability auditing. The authors and contributors assume no liability for the misuse of this...

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

copyfail-guard

CopyFail Guard / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / // // / // / // / / / // / / / / // / // / // / / / // / // ./, // ,/// /,/,// ,/ // // Fast, auditable Linux exposure assessment and mitigation for CVE-2026-31431 “Copy Fail” while kernels get patched...

frida

Frida Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. Learn more at frida.re. Two ways to install 1. Install from prebuilt binaries This is the recommended way to get started. All you need to do is: pip install frida-tools CLI tools pip install frida...

mass-bruter

Mass Bruter Mass bruteforce network protocols Info Simple POC to quickly mass bruteforce common services in a large scale of network. It will check for default credentials on ftp, ssh, mysql, mssql...etc. This was made for authorized penetration testing purpose only. How it works 1. Use...

MrHandler

MR.HANDLER MR.Handler is a specialized tool designed for responding to security incidents on Linux systems. It connects to target systems via SSH to execute a range of diagnostic commands, gathering crucial information such as network configurations, system logs, user accounts, and running...

zero-click-exploit-analysis

Zero-Click, Old Tricks Anatomy of the 2025 WhatsApp/ImageIO zero-click exploit chain CVE-2025-55177 + CVE-2025-43300. Research paper plus an interactive web companion with CVE walkthroughs, patch diffs, and hands-on heap/stack labs. Live site: https://mcs.danielwagner.ro Paper PDF:...