dalfox v3.2.2

Looking for the Go v2.x version? Dalfox v3 is a complete rewrite in Rust. The Go codebase is preserved on the v2 branch and continues to receive security backports. See SECURITY.md for the support policy, and the migration guide for what changed in v3. Dalfox is a powerful open-source tool that...

Security Bulletin: Due to use of IBM SDK, Java Technology Edition, IBM Tivoli Application Dependency Discovery Manager is vulnerable to multiple vulnerabilities

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, used by IBM Tivoli Application Dependency Discovery Manager TADDM. These issues were disclosed as part of the Java Technology Edition Quarterly CPU - Jul 2026 - Includes Oracle July 2026 CPU plus four additional...

Exploit for CVE-2026-82592

D-Link Router DIR-825M - Buffer Overflow in /boafrm/formDiskFo...

Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones

The most common way into a company last year was to ask. A web page tells the visitor to prove they are not a robot. While they read the instructions, it quietly places a command on their clipboard. Then it talks them through opening a terminal and pasting it in. The technique is called ClickFix,...

IPI-exposure-signal

IPI Exposure Signal This is the code repository for our paper: Your Agentic LLMs Secretly Encode Latent Signals of Indirect Prompt-Injection Exposure. ArXiv version and paper link: https://arxiv.org/abs/2608.02657 This repository implements the probing pipeline for latent IPI-exposure signals:...

lenovo-a1000g-mt8317-A412_01_09_130907-kernel-3.4.0-root-cve-2016-5195

Lenovo IdeaTab A1000G — Root Note: This documentation and exploit code was generated with AI assistance Kiro. Verify before use — AI can and does make mistakes. Device Field| Value ---|--- Model| Lenovo IdeaTab A1000G SoC| MediaTek MT8317 = MT6517 CPU| Dual-core Cortex-A9 @ 1.2GHz Kernel| Linux...

OpenEMR < 7.0.1 - Cross-Site Scripting

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1. id: CVE-2023-2948 info: name: OpenEMR 7.0.1 - Cross-Site Scripting author: ritikchaddha,princechaddha severity: medium description: | Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr...

CVE-2026-80213

A flaw was found in the resolv gem. This vulnerability arises from the incorrect handling of DNS label lengths during message encoding. A remote attacker could exploit this by providing a specially crafted hostname to an application utilizing the resolv gem. This could lead to the bypass of...

CVE-2025-52914

CVE-2025-52914 How does this detection method work? Versions are extracted from target hosts, specifically the SVRVER html response in the body, and then matches on versions prior to 9.3.1 and versions from 10.0.26 to 10.1.101 inclusive. How do I run this script? 1. Download Nuclei from here 2...

CVE-2025-58360

CVE-2025-58360 The vulnerability in question is CVE-2025-58360 CVSS score: 8.2, an unauthenticated XML External Entity XXE flaw that affects all versions prior to and including 2.25.5, and from versions 2.26.0 through 2.26.1. It has been patched in versions 2.25.6, 2.26.2, 2.27.0, 2.28.0, and...

Infostealers are hijacking Claude accounts at users’ expense

Anthropic has warned some Claude users that criminals are using information stealers to take over their accounts. Rather than guessing passwords or intercepting two-factor authentication 2FA codes, the attackers steal the browser sessions that prove a user is already logged in. According to a...

CVE-2025-66478

1 root@kitploit: POST / HTTP/1.1 Host: localhost:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0 Next-Action: x X-Nextjs-Request-Id: b5dce965 Content-Type: multipart/form-data;...

wBlock v3.0.0

wBlock The end of Safari ad-blocking B.S. A Safari content blocker for macOS, iOS, iPadOS, and visionOS. 750,000 rules across 5 extensions, Protocol Buffer storage, LZ4 compression, and iCloud sync. !NOTE Looking for a detailed comparison? Check out my comparison guide to see how wBlock stacks up...

vm2 v3.11.8

vm2 vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Installation root@kitploit: npm install vm2 Quick Examples root@kitploit: import VM from 'vm2'; const vm = new VM; vm.runprocess.exit; // TypeError: process.exit is not a function root@kitploit: import Node...

AndroidSecurityEvolution

Android Security Evolution Significant security enhancements of recent major Android versions, starting with Android 5.0 Lollipop API 21. Android 5.0 API 21 - Lollipop Security Enhancements - Android 5 Starting August 2023, Google Play Services updates will only be received from this Android...

n8n-cve-2025-68613-thm

CVE-2025-68613 – Explotación RCE crítica de n8n Resumen Este repositorio documenta una explotación práctica de CVE-2025-68613 CVSS 9.9 , una vulnerabilidad crítica de ejecución remota de código que afecta a la plataforma de automatización de flujos de trabajo n8n versiones 0.211.0 hasta 1.120.3...

Exploit for Code Injection in Langflow

CVE-2026-0768 Donate Help maintain this pr...

CVE-2020-12124

Anatomy of an IoT Exploit, from Hands-On to RCE originally at https://www.klogixsecurity.com/scorpion-labs-blog/anatomy-of-an-iot-exploit-from-hands-on-to-rce by David E. Baker, published on June 1, 2023 Foreword This study concerns the firmware of the Wavlink Wireless-AC1200 Gigabit router as of...

ble_proxy

Sistema de Proxy HTTP por BLE Un sistema de proxy HTTP basado en Bluetooth Low Energy BLE que enruta el tráfico del navegador web a través de un dispositivo iOS. Esto permite navegar por internet usando la conexión del dispositivo iOS mediante BLE como capa de transporte. Descripción General de l...

NuReaper

NuReaper — Escáner de Seguridad de Paquetes NuGet ⚠️ Trabajo en Progreso — El proyecto está en desarrollo activo. El motor de escaneo principal es funcional; la persistencia de base de datos, el almacenamiento en caché y la cobertura completa de pruebas están planificados para próximas iteraciones...