sh4d0wup v0.11.1

sh4d0wup root@kitploit: % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low...

CVE-2026-0133

A missing permission check in the smmu_attach_dev function of arm-smmu-v3.c allows for the signing of malicious Android Runtime bootclass artifacts . This vulnerability can be exploited to achieve local escalation of privilege without requiring additional execution privileges or user interaction....

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the buildSpCertificateStore function. An attacker can gain unauthorized access by supplying a malicious signing certificate in the SAMLResponse, which is accepted instead of the trusted pre-configured Identit...