CVE-2026-3854-lab

Flagship Lab 001: From Git Push Options to RCE A local Learning Lab and Research Lab inspired by the publicly documented vulnerability concepts behind CVE-2026-3854. Both experiences use real authenticated Git pushes against ForgeDock, a fictional Git server; the Research Lab. !CAUTION This proje...

authelia

Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on SSO for your applications via a web portal. It acts as a companion for reverse proxies by allowing, denying, or redirecting requests. Documentation is available at...

CVE-2026-42978-PoC-Research

CVE-2026-42978 PoC e Investigación — Use-After-Free en Notificaciones Push de Windows Condición de carrera en el servicio de Notificaciones Push de Windows WpnService que se ejecuta como NT AUTHORITY\SYSTEM. Un atacante con acceso local puede desencadenar un use-after-free durante el apagado de l...

terminalphone

TerminalPhone Comunicación de voz push-to-talk cifrada a través de servicios ocultos de Tor. TerminalPhone es un único script Bash autocontenido que proporciona comunicación de voz y texto anónima, cifrada de extremo a extremo, entre dos o más partes a través de la red Tor. Funciona como un...

talisman

Talisman A tool to detect and prevent secrets from getting checked in Table of Contents What is Talisman? Installation Install onto path recommended approach Installation as a global hook template Configuring a project...

EUVD-2026-78085

A weakness has been identified in a2aproject a2a-java 1.2.0. The affected element is the function BasePushNotificationSender.dispatchNotification of the file server-common/src/main/java/org/a2aproject/sdk/server/tasks/BasePushNotificationSender.java of the component Authorization Header...

browser-identity-attacks-matrix

Matriz de Ataques al Navegador y la Identidad Este repositorio es una colección de técnicas de ataque al navegador y la identidad que abarcan aplicaciones SaaS, ataques basados en el navegador, proveedores de identidad y phishing. Su objetivo es ser un recurso para investigadores de seguridad,...

CVE-2026-90790

A security vulnerability has been detected in a2aproject a2a-python up to 1.1.3. This affects the function dispatchnotification of the file src/a2a/server/tasks/basepushnotificationsender.py of the component Push Notification Sender. The manipulation of the argument pushinfo.url leads to...

CVE-2026-90790

A server-side request forgery (SSRF) vulnerability exists in a2aproject a2a-python (versions up to 1.1.3 ). The flaw is in the function _dispatch_notification within the Push Notification Sender component (src/a2a/server/tasks/base_push_notification_sender.py), where an attacker can manipulate th...

EUVD-2026-77535

A security vulnerability has been detected in a2aproject a2a-python up to 1.1.3. This affects the function dispatchnotification of the file src/a2a/server/tasks/basepushnotificationsender.py of the component Push Notification Sender. The manipulation of the argument pushinfo.url leads to...

CVE-2026-73370

Incorrect Authorization vulnerability in Apache Syncope. Delegated administration security checks performed by Reconciliation service's pull and push, being incomplete, could accept calls by administrator not provided with adequate entitlements. This issue affects Apache Syncope: from 3.0.0-M0...

CVE-2026-73370

Apache Syncope is vulnerable to an Incorrect Authorization flaw in its Reconciliation service (pull and push operations). Delegated administration security checks are incomplete, allowing an administrator lacking adequate entitlements to bypass cross-realm boundaries during reconciliation. The is...

GitBackdorizer

GitBackdorizer BETA GitBackdorizer es una prueba de concepto, totalmente inspirada en la charla de Ulisses Castro 50 ton of backdoors, que abusa de la falta de atención del usuario para robar credenciales de acceso a git. Cómo funciona GitBackdorizer consta de tres partes: el handler, el dropper ...

PrivExchange

PrivExchange Herramientas de prueba de concepto que acompañan al blog Abusing Exchange: One API call away from Domain Admin. Requisitos Estas herramientas requieren impacket. Puedes instalarlo desde pip con pip install impacket, pero se recomienda usar la última versión de GitHub. privexchange.py...

PT-2026-91190

Incorrect Authorization vulnerability in Apache Syncope. Delegated administration security checks performed by Reconciliation service's pull and push, being incomplete, could accept calls by administrator not provided with adequate entitlements. This issue affects Apache Syncope: from 3.0.0-M0...

CVE-2026-3854-PoC

CVE-2026-3854 PoC — GitHub RCE via X-Stat Push Option Injection For educational and authorized security research purposes only. Do not use against any system without explicit written permission. Overview CVE-2026-3854 is a Remote Code Execution vulnerability in GitHub Enterprise Server's and...

crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

CVE-2026-12960

CVE-2026-12960 ASUS Router アプリにおける Android アプリケーションコンポーネントの不適切なエクスポート ASUS Router Android アプリ（com.asus.aihome）に同梱されているコンポーネントは、 android:permission を指定せずに android:exported="true" と宣言されていました。 同じ端末上の他のアプリは、権限を一切保持していなくても、細工した Intent を送信し、 ASUS Router アプリにユーザーに代わって攻撃者制御の URI を開かせることができました。 2026-03-17...

CVE-2026-42978-PoC-Research

CVE-2026-42978 Windows Push Notifications Module for AI Security Tool Next-Gen AI Security Ecosystem, Multi-Protocol Terminal & Autonomous Agent Suite...

ghe-push-option-rce-scanner

CVE-2026-3854 — GitHub Enterprise Server RCE via Push Option Injection Overview Improper neutralization of push option values in GHE. Attacker with push access achieves RCE on the instance. Field| Value ---|--- CVE| CVE-2026-3854 Severity| CRITICAL Product| GitHub Enterprise Server CISA KEV|...