exocomp

Exocomp Self-hosted multi-agent environment tailored to Golang. Features Attention, profit-seekers and visionaries! Are organics costing you time, wages, and - worst of all - benefits? Then upgrade your operation today with the all new Exocomp adaptive repair unit, the smartest investment this si...

fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

apache__rocketmq_CVE-2023-37582_4-9-6

Apache RocketMQ Developer Guide This guide helps developers to understand and use Apache RocketMQ quickly. 1. Concepts & Features Concept：introduce basic concepts in RocketMQ. Feature：introduce functional features of RocketMQ's implementations. 2. Architecture Design Architecture：introduce...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ Qu'est-ce que c'est ? CrackLord est un système conçu pour fournir un système évolutif, extensible et distribué à la fois pour le craquage de mots de passe ainsi que pour tout autre travail nécessitant beaucoup de ressources informatiques. Mieux dit,...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ What Is It? CrackLord is a system designed to provide a scalable, pluggable, and distributed system for both password cracking as well as any other jobs needing lots of computing resources. Better said, CrackLord is a way to load balance the resource...

TickTock

TickTock Этот репозиторий демонстрирует PoC-сканер памяти для перечисления таймеров очереди таймеров, используемых в обфускации сна Ekko: https://github.com/Cracked5pider/Ekko. Полное техническое описание см. в сопутствующей статье в блоге:...

CVE-2025-8045

CVE-2025-8045 — Arm Mali GPU KCPU Queue UAF Эксплойт для локального повышения привилегий, использующий CVE-2025-8045 — use-after-free в драйвере графического ядра Arm Mali GPU kbase. Непривилегированный локальный процесс гоняется с путём дампа CSF KCPU queue , чтобы освободить и переиспользовать...

wch-ch56x-lib

wch-ch56x-lib Cette bibliothèque a été construite en parallèle de Hydradancer, un nouveau backend pour la bibliothèque d'émulation USB Facedancer basée sur la puce WCH569. Des pilotes fiables étaient nécessaires pour ce projet et de nombreuses fonctionnalités manquaient dans les exemples WCH ou...

CobaltBus

CobaltBus Intégration C2 externe de Cobalt Strike avec Azure Servicebus, trafic C2 via Azure Servicebus Configuration 1. Créez un Azure Service Bus 2. Créez une stratégie d'accès partagé chaîne de connexion qui ne peut qu'envoyer et écouter 3. Modifiez la variable statique connectionString dans l...

dhcpoptinj

Injecteur d'options DHCP Avez-vous déjà voulu intercepter des requêtes DHCP et y insérer quelques options DHCP supplémentaires, à l'insu de l'expéditeur ? Probablement pas. Cependant, si le besoin se présentait, dhcpoptinj vous aidera espérons-le. Pourquoi Il peut y avoir de nombreuses raisons de...

CVE-2026-73317

CVE-2026-73317: Approval job authorization bypass XenForo before 2.3.13 lets an administrator with only the cache-rebuild permission dispatch an approval job as another user. What happens The ACP rebuild endpoint accepts a caller-supplied job class and options. Its authorization check asks only...

CVE-2026-104058

The Podgrab application contains a missing authentication vulnerability (CWE-306) due to the /ws WebSocket route being incorrectly registered on the root gin engine instead of the BasicAuth-protected router group . This flaw allows unauthenticated network clients to connect even when a PASSWORD i...

CVE-disclosures

CVE-2026-3171 и CVE-2026-3170 – Archana M Официальные раскрытия уязвимостей от Archana M. 🔹 CVE-2026-3171 Продукт: SourceCodester / Patrick Mvuma Patients Waiting Area Queue Management System 1.0 Тип уязвимости: Межсайтовый скриптинг CWE-79 Затронутый файл: /queue.php Вектор атаки: Удалённый...

CTT-Kernel-Resonance-io_uring-Temporal-Phase-Transition

Этот эксплойт для CVE-2026-24102 представляет собой вершину серии SimoesCTT. Атакуя iouring — самый продвинутый асинхронный интерфейс ядра Linux — вы атакуете саму концепцию «последовательной логики». В iouring системные вызовы не выполняются; они текут. Мы воспользуемся Временным окном между...

ibm-qradar-ajp_smuggling_CVE-2022-26377_poc

CVE-2022-26377 Un Proof of Concept développé par @watchTowr pour exploiter une vulnérabilité de contrebande AJP afin d'empoisonner la file d'attente des réponses HTTP d'une instance IBM QRadar avec une redirection stockée. Suivez l'équipe des Labs watchTowr pour nos recherches en sécurité...

CVE-2026-103251

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package installation handler for queue mode deployments. Attackers with Redis write access can bypass name validation, permission checks, checksum...

CVE-2026-103251 n8n before 1.123.80, 2.39.6, and 2.40.1 Package Install Validation Bypass via PubSub

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package installation handler for queue mode deployments. Attackers with Redis write access can bypass name validation, permission checks, checksum...

EUVD-2026-90645

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package installation handler for queue mode deployments. Attackers with Redis write access can bypass name validation, permission checks, checksum...

CVE-2026-103251 n8n before 1.123.80, 2.39.6, and 2.40.1 Package Install Validation Bypass via PubSub

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package installation handler for queue mode deployments. Attackers with Redis write access can bypass name validation, permission checks, checksum...

CVE-2026-103251

The software n8n versions before 1.123.80 , 2.39.6 , and 2.40.1 contains a validation bypass vulnerability in the community package installation handler specifically for queue mode deployments . An attacker with Redis write access can bypass name validation, permission checks, checksum verificati...