CVE-2026-21014-CAN-Bus-Frame-Replay-Attack-on-Automotive-ECU

CVE-2026-21014 – هجوم إعادة بث إطار ناقل CAN على وحدة التحكم الإلكترونية للمركبات الكود البرمجي محاكي SocketCAN بلغة Python root@kitploit: canreplaysim.py - Simulates CAN bus replay import time canmessages = def sendcanmsgid, data: printf"CAN msgid:x: data.hex" canmessages.appendmsgid, data def...

nuguard

NuGuard Open Source NuGuard is an open source AI application security toolkit. Its goal is to provide the most extensive redteaming and behavioral validation of Agentic AI applications. With NuGuard, AI developers can focus on building their applications while NuGuard continuously tests and...

padding-oracle-attacker

padding-oracle-attacker أداة سطر أوامر ومكتبة لتنفيذ هجمات حشو الوسادة بسهولة، مع دعم الطلبات الشبكية المتزامنة وواجهة مستخدم أنيقة. التثبيت تأكد من تثبيت Node.js، ثم قم بتشغيل root@kitploit: $ npm install --global padding-oracle-attacker أو root@kitploit: $ yarn global add padding-oracle-attacke...

CVE-2026-85105

A remote authorization bypass vulnerability exists in NousResearch hermes-agent 0.18.0 , specifically in the _sess_nowait function of the s71.py file within the Session Management component. The root cause is improper handling of the session_id argument, allowing an unauthenticated remote attacke...

CVE-2026-85105 NousResearch hermes-agent Session Management s71.py _sess_nowait authorization

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function sessnowait of the file s71.py of the component Session Management. This manipulation of the argument sessionid causes authorization bypass. The attack can be initiated remotely. The vendor was...

CVE-2026-85105 NousResearch hermes-agent Session Management s71.py _sess_nowait authorization

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function sessnowait of the file s71.py of the component Session Management. This manipulation of the argument sessionid causes authorization bypass. The attack can be initiated remotely. The vendor was...

EUVD-2026-70388

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function sessnowait of the file s71.py of the component Session Management. This manipulation of the argument sessionid causes authorization bypass. The attack can be initiated remotely. The vendor was...

blanket

blanket Blanket هي أداة للهروب من صندوق الرمل تستهدف iOS 11.2.6، على الرغم من أن الثغرة الرئيسية لم تُصلَح إلا في iOS 11.4.1. تستغل ثغرة استبدال منفذ Mach في launchd CVE-2018-4280، بالإضافة إلى عدة ثغرات أصغر في خدمات أخرى، لتنفيذ كود داخل عملية ReportCrash، وهي عملية غير محصورة في صندوق الرمل،...

Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images

Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2026-5450 DESCRIPTION: Calling the scanf family of functions with a %mc malloc'd character match in the GNU C Library version 2.7 to version 2.43 with a format wid...

Politician

Politician Une bibliothèque sophistiquée d'audit WiFi pour microcontrôleurs ESP32 Politician est une bibliothèque C++ embarquée conçue pour l'audit de sécurité WiFi sur les plateformes ESP32. Elle fournit une API propre et moderne pour capturer les handshakes WPA/WPA2/WPA3 et récolter des...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Content Cortex(CCx) 26.0.0-IF002 for August 2026

Summary IBM Content Cortex CCx 26.0.0-IF002 addresses CVEs across components including AI Services & tools, FDM and CPE. Vulnerability Details CVEID:CVE-2026-12817 DESCRIPTION: In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also...

xalgorix

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

PocList

PocList مجموعة من أكواد POC و EXP للثغرات مكتوبة ذاتيًا. بعد تحديد ملف url في سكربت POC، يمكن إجراء مسح جماعي متعدد الخيوط للأهداف للتحقق منها؛ ويمكن لسكربت EXP استغلال الثغرات، مثل قراءة الملفات، رفع أحصنة طروادة، تنفيذ الأوامر، إلخ. بيئة التطوير: Python 3.7 👉تحديث 2021-08-02 التحديثات كالتالي: ...

CVE-2026-81092

A flaw was found in mcp-go. This component failed to validate the Host header in HTTP requests, specifically within its StreamableHTTPServer and SSEServer transports. A remote attacker could exploit this by using a crafted web page to perform a DNS rebinding attack. This allows the attacker to...

asterion-network-minotaur

Этичный аудитор сетевой безопасности — более 50 проверок SMB, RDP, LDAP, SSH, Kerberos и других протоколов, с анализом CVE на базе ИИ и сопоставлением с OWASP/CIS/NIST. Быстрый старт · Документация · Docker · Возможности ИИ · Отметить на GitHub В действии !Asterion — реальный вывод...

Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks

Threat actors are leveraging the trusted Node.js JavaScript runtime in multiple cyber attacks as a way to deploy malicious payloads. According to a new report published by the Symantec Threat Hunter Team today, the attack method has been put to use in attacks targeting government departments,...

cve-2020-1472

CVE-2020-1472 POC في بيئة macOS، أعد إنتاج هذه الثغرة في بيئة نطاق Windows باستخدام وكيل بروكسي تشينز proxychains. البيئة DC وحدة تحكم المجال الأساسية: Domain User جهاز عضو المجال: عبر إعداد وكيل SOCKS5 مباشر باستخدام gost. Attack Hacker جهاز المهاجم: قم بضبط proxychains4 root@kitploit: vim...

Exploit for Integer Overflow or Wraparound in Microsoft

CVE-2026-62735 Information - This vulnerability was ori...

Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means

In early August, GitGuardian researchers found that a recent Shai-Hulud infostealer worm variant had evolved to scan for credentials across 469 locations across developer environments, Continuous Integration/Continuous Deployment CI/CD tooling, cloud configurations, and even AI tool configs...

Adrenaline adrenaline-bof-bundle-2026-08-31-171332-c55f015

Adrenaline BOF Kit A C2-agnostic collection of Beacon Object Files BOFs for red team and offensive security operations. BOFs are organized by attack chain phase and designed to be small, modular, and automation-friendly for use in reconnaissance, enumeration, and post-exploitation workflows. Tabl...