279 matches found
Kernel-Exploit-Dojo-248
Kernel-Exploit-Dojo-248 CTF kernel exploitation notes, PoCs,...
Kernel-Exploit-Dojo-866
Kernel-Exploit-Dojo-866 CTF kernel exploitation notes, PoCs,...
Kernel-Exploit-Dojo-283
Kernel-Exploit-Dojo-283 CTF kernel exploitation notes, PoCs,...
Kernel-Exploit-Dojo-962
Kernel-Exploit-Dojo-962 CTF kernel exploitation notes, PoCs,...
Dstack-Capsule: Pod-Level Remote Attestation for Confidential Workloads on Kubernetes
The rise of LLM-as-a-Service and other confidential cloud workloads demands cryptographic proof that user data is processed in a trusted, untampered environment. Existing solutions, notably Confidential Containers CoCo, enforce a strict "one Pod per VM" model that attests only the Guest OS stack,...
NICE: A Framework for Declarative and Machine-Checkable Vulnerability Reproduction
Reproducing software vulnerabilities is fundamental to security researchers, open-source maintainers, and educators. Yet, vulnerabilities remain hard to reproduce today, and even when they can be reproduced, recreating a software environment where the vulnerability can be exploited becomes harder...
bungee-gum
bungee-gum A colle...
mythos-preview
🜲 Mythos Preview Multi-agent vulnerability discovery harn...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential-stealing payload and worm propagation logic. A malicious actor associated with the "TeamPCP" or "Mini Shai-Hulud" campaign compromised a maintainer's access token; this allowed the...
OrchidMantis
Orchid Mantis A Framework for ZKPoX — Zero-Knowledge Proof...
poc-archive
poc-archive A structured archive of security research proof-o...
offsec-skills
offsec-exploit-research Elite adaptive whitebox exploit resea...
UGen: An Agentic Framework for Generating Microarchitectural Attack PoCs
Microarchitectural attacks continue to evolve, uncovering new exploitation vectors in modern processors. From a defensive perspective, assessing a system's susceptibility to such attacks remains challenging. Developing functional attack implementations is labor-intensive, requires deep...
telnet-pocs-2026
All Telnet PoCs — Consolidated All proof-of-concept exploits...
MAGIQ: A Post-Quantum Multi-Agentic AI Governance System with Provable Security
Our computing ecosystem is being transformed by two emerging paradigms: the increased deployment of agentic AI systems and advancements in quantum computing. With respect to agentic AI systems, one of the most critical problems is creating secure governing architectures that ensure agents follow...
security-research
Security Research This project hosts security advisories and...
Noir 安全漏洞
Noir is an open-source domain-specific language developed by noir-lang, used for SNARK proofs. Versions of Noir prior to 1.0.0-beta.19 contained a security vulnerability, caused by a nested array memory allocation error, which could lead to damage to the Brillig VM heap...
CVE-2026-34067 nimiq-transaction vulnerable to panic via `HistoryTreeProof` length mismatch
nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation. Prior to version 1.3.0, HistoryTreeProof::verify panics on a malformed proof where history.len != positions.len due to asserteq!history.len, positions.len. The proof object is derived from untrusted p2...