radmin-vpn-linux v1.1.0

Radmin VPN for Linux Run Radmin VPN on Linux via Wine. Join VPN networks, see peers, play games — all without a Windows VM. I did not build this because it was easier than a VM. I built it because I thought it was easier than a VM. AI-assisted code. Built collaboratively between a human and Claud...

xalgorix v4.5.153

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

sshroute v0.2.11

sshroute CI| Code| OpenSpec| Security ---|---|---|--- | | | Net...

DOMPurify v3.4.14

DOMPurify DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's also very simple to use and get started with. DOMPurify was started in February 2014 and, meanwhile, has reached version v3.4.14. DOMPurify runs as JavaScript and works in all modern browsers...

BrowserBox v18.6.5

BrowserBox by DOSAYGO Secure, modern Remote Browser Isolation RBI with a clientless experience 🔐 NEW in v18.0.1 — Passkey authentication on macOS: sign in to websites with real passkeys inside your remote browser. Passkeys are created and stored on your Mac's Secure Enclave and unlocked with Touc...

K000162994: Node.js vulnerabilities CVE-2026-21712 and CVE-2026-56846

Security Advisory Description CVE-2026-21712 A flaw in Node.js URL processing causes an assertion failure in native code when url.format is called with a malformed internationalized domain name IDN containing invalid characters, crashing the Node.js process. CVE-2026-56846 A flaw in Node.js HTTP/...

CVE-2026-41091-PoC-Exploit Full-PoCv2

☀️ CVE-2026-41091 - RedSun SolarFlare - Microsoft Defender LPE Exploit Microsoft Defender Link Following Vulnerability - Local Privilege Escalation to NT AUTHORITY\SYSTEM The vulnerability is known as "RedSun" 🎯, "SolarFlare" is the name I gave to my exploit. ✅ 📌 Overview This repository contains...

Seal v0.2.3

Seal Peer-to-peer, end-to-end encrypted chat. No inbox. No account to recover. Nobody's listening — not even us. github.com/Emn4tor/Seal !GitHub last commithttps://img.shields.io/github/last-commi...

reproxy v1.7.1

Reproxy is a simple edge HTTPs server / reverse proxy supporting various providers docker, static, file, consul catalog. One or more providers supply information about the requested server, requested URL, destination URL, and health check URL. It is distributed as a single binary or as a docker...

aquaman v0.14.1

🔱 Aquaman 🔱 The only independent credential proxy for AI agents: bring-your-own-vault isolation & least-privilege request policies. Your keys stay where you already keep them, never in the agent's memory. Compatible with 1Password, keychain, keepassxc and many others. You set up Claude Code,...

repokid v0.19.8

Repokid Repokid uses Access Advisor provided by Aardvark to remove permissions granting access to unused services from the inline policies of IAM roles in an AWS account. Getting Started Install root@kitploit: mkvirtualenv repokid git clone [email protected]:Netflix/repokid.git cd repokid pi...

XSRFProbe v3.0.0

XSRFProbe The Prime Cross Site Request Forgery Audit & Exploitation Toolkit. -blue.svg About XSRFProbe is an advanced Cross Site Request Forgery CSRF/XSRF Audit and Exploitation Toolkit. Equipped with a powerful crawling engine and numerous systematic checks, it is able to detect most cases of CS...

regipy v6.3.0

regipy ⚠️ Breaking Changes in v6.0.0 Version 6.0.0 includes significant modernization changes: Python 3.9+ required - Dropped support for Python 3.6, 3.7, and 3.8 attrs library removed - Data classes now use Python's built-in dataclasses module If your code imports internal classes Cell,...

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by an authentication bypass vulnerability (CVE-2026-14525)

Summary IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by an authentication bypass vulnerability when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled. Vulnerability Details Refer to the security bulletins listed in the...

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by an authentication bypass vulnerability (CVE-2026-14525)

Summary IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by an authentication bypass vulnerability when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled. Vulnerability Details Refer to the security bulletins listed in the...

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by an authentication bypass vulnerability (CVE-2026-14525)

Summary IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by an authentication bypass vulnerability when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled. Vulnerability Details Refer to the security bulletins listed in the...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty (bundled with IBM Enterprise Application Runtimes) are affected by multiple vulnerabilities due to Apache CXF (CVE-2026-57819, CVE-2026-54225, CVE-2026-64958)

Summary There are mulitple vulnerabilities in the Apache CXF library that affect IBM WebSphere Application Server and WebSphere Application Server Liberty, which are bundled with IBM Enterprise Application Runtimes, when the jaxrs-2.0, jaxrs-2.1, jaxws-2.2, xmlWS-3.0, or xmlWS-4.0 features are...

Exploit for CVE-2026-8181

💥 CVE-2026-8181 - Burst Statistics Authentication Bypass...

EUVD-2026-62972

LMDeploy deserializes disaggregated-serving peer messages with pickle. The handlezmqrecv coroutine in lmdeploy/pytorch/disagg/conn/engineconn.py reads peer-to-peer cache-free requests with recvpyobj, which deserializes the received bytes with pickle.loads, and the isinstance check against...

Duplicati 2.2.0.3 JWT Signing Key Leak Bypass

Duplicati exposes the JWT signing key through a case-sensitive guard bypass in the settings endpoint. A GET request to /api/v1/serversetting/JWTConfig PascalCase bypasses the guard check for "jwt-config", allowing any authenticated user to retrieve the secret. With the extracted SigningKey,...