Research-CVE-2026-21858

CVE-2026-21858 Ni8mare: n8n Authentication Bypass & Remote Code Execution 1. OverviewVulnerability Name: Ni8mare CVE ID: CVE-2026-21858 CVSS Score: 10.0 Critical Vulnerability Type: Authentication Bypass, Local File Inclusion LFI, Remote Code Execution RCE Affected Versions: n8n versions 1.65.0 a...

trevorc2

trevorc2 TrevorC2 - Command and Control via Legitimate Behavior over HTTP Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Note that this is a very early release - heavy randomization and encryption to be added soon. TrevorC2 is a client/server model for masking command a...

trevorc2

trevorc2 TrevorC2 - Comando y Control mediante Comportamiento Legítimo sobre HTTP Escrito por: Dave Kennedy @HackingDave Sitio web: https://www.trustedsec.com Tenga en cuenta que esta es una versión muy temprana; pronto se añadirán gran aleatorización y cifrado. TrevorC2 es un modelo...

JudasDNS

Judas DNS root@kitploit: ,, 7MMF' 7MM 7MM"""Yb. 7MN. 7MF'.M"""bgd MM MM MM Yb. MMN. M ,MI "Y MM 7MM 7MM ,M""bMM ,6"Yb. ,pP"Ybd MM Mb M YMb M MMb. MM MM MM ,AP MM 8 MM 8I " MM MM M MN. M YMMNq. MM MM MM 8MI MM ,pm9MM YMMMa. MM ,MP M MM.M . MM O MM MM MM Mb MM 8M MM L. I8 MM ,dP' M YMM Mb dM Ymmm9...

CVE-2026-31431

CVE-2026-31431 CVE-2026-31431 detection and testing 0x01 Quick Start Some target environments do not have Python installed, so this privilege escalation logic was rewritten in C. 1. Compile Run the following command on your Linux machine or WSL using -static is recommended to avoid GLIBC version...

PadBuster

PadBuster - Automated script for performing Padding Oracle attacks Author: Brian Holyfield - Gotham Digital Science [email protected] Credits to J.Rizzo and T.Duong for providing proof of concept web exploit techniques and S.Vaudenay for initial discovery of the attack. Credits also to James...

copy-fail-CVE-2026-31431-Python-Golfing

This repository does not have a README...

Spring-Cloud-Function-SpEL

Spring-Cloud-Function-SpEL Visit my personal blog for details https://pizz33.github.io/ A test environment for Spring Cloud Function SpEL expression injection Version: Java 11. Start with java -jar demo-0.0.1-SNAPSHOT.jar Once set up, access port 127.0.0.1:8080 root@kitploit: POST /functionRouter...

Linux-copy-fail-CVE-2026-31431

CVE-2026-31431 — Copy Fail Linux Privilege Escalation Overview This repository presents a technical overview and demonstration of CVE-2026-31431 , commonly referred to as Copy Fail , a Linux kernel vulnerability that enables local privilege escalation. The vulnerability affects a wide range of...

Sentora

Sentora Community Edition Self-hosted security stack for small/mid teams that don't have a dedicated SOC. Drop an agent on each endpoint, point them at the server, and you get SIEM logs, file integrity, package vulnerabilities, an OpenSearch-powered log explorer, autonomous AI triage and a SOAR...

CVE-2026-44590

CVE-2026-44590 - sherlock-project/sherlock CI - RCE via pullrequesttarget Injection → Supply Chain Compromise Discovered & reported by: Astaruf Full writeup: https://nstsec.com/en/posts/sherlock-rce-pull-request-target-cve-2026-44590/ Upstream advisory: sherlock-project/sherlock GHSA advisory NVD...

gost

gost - GO Simple Tunnel A simple security tunnel written in Golang Features Listening on multiple ports Multi-level forward proxy - proxy chain Standard HTTP/HTTPS/HTTP2/SOCKS4A/SOCKS5 proxy protocols support Probing resistance support for web proxy Support multiple tunnel types TLS encryption vi...

CVE-2026-23918-test

CVE-2026-23918-test This repository contains a Proof of Concept PoC demonstrating the Double Free vulnerability CVE-2026-23918 in Apache HTTP Server 2.4.66 modhttp2. The vulnerability stems from a race condition during early RSTSTREAM frame processing. I focused on the timing window where the...

portscan-CVE-2026-41940

portscan-CVE-2026-41940 IP CIDRs presumably as input, maybe command line or file and checks ports 2083 and 2087 for openness portscan-CVE-2026-41940 IP CIDRs presumably as input, maybe command line or file and checks ports 2083 and 2087 for openness CIDR Port Scanner 2083 & 2087 A lightweight,...

CVE-2026-96749

A flaw was found in pymongo. An integer overflow exists in the bundled native extension for Binary JSON BSON document encoding when processing an unusually large amount of data. An unprivileged attacker who can submit oversized data to an application for encoding can trigger an arithmetic overflo...

awesome-privacy

Awesome Privacy List of free, open source and privacy respecting services and alternatives to privative services. About | Contributing | Quotes | Discussions !IMPORTANT Anonymity, Privacy, and Security are often used interchangeably, but they actually represent distinct concepts. It is important ...

CVE-2026-31431-Copy-Fail-add-arm64

Vulnerability Overview Item| Content ---|--- CVE ID| CVE-2026-31431 Vulnerability Name| Copy Fail Vulnerability Type| Linux Kernel Local Privilege Escalation LPE CVSS 3.1 Score| 7.8 HIGH CWE| CWE-669: Incorrect Resource Transfer Between Spheres Affected Scope| All Linux kernels built between 2017...

aegis-latent-core

Aegis Latent Core AI Governance and Cryptographic Evidence Gateway Aegis Latent Core commits signed, hash-linked evidence of every governed AI call — before the response reaches the caller — and issues a portable proof that a third party verifies without trusting the gateway, us, or you. -green...

CVE-2026-31431

CVE-2026-31431 Proof of Concept PoC This repository contains a Proof of Concept PoC exploit for CVE-2026-31431 , demonstrating a local privilege escalation vulnerability. !WARNING This project is intended strictly for educational and security research purposes only. Use it only on systems you own...

hayduk

Hayduk: Open-source Metasploit GUI and Armitage alternative Hayduk is a free, open-source Metasploit GUI for authorized penetration testing. It brings the Armitage workflow to your browser: map hosts, browse modules, manage Meterpreter and shell sessions, and export campaign reports. Download one...