EUVD-2026-77479

A vulnerability was identified in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Affected is the function RegisterServlet.doPost of the file code/WebContent/register.html of the component Registration Workflow. Such manipulation of the argument level leads to improper...

CVE-2026-90787 Soarkey StudentManagement Registration Workflow register.html RegisterServlet.doPost privileges management

A vulnerability was identified in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Affected is the function RegisterServlet.doPost of the file code/WebContent/register.html of the component Registration Workflow. Such manipulation of the argument level leads to improper...

goblin

libgoblin Documentation https://docs.rs/goblin/ changelog Usage Goblin requires rustc 1.85.0 Rust 2024 edition. Add to your Cargo.toml root@kitploit: dependencies goblin = "0.10" Features awesome crate name zero-copy, cross-platform, endian-aware, ELF64/32 implementation - wow! zero-copy,...

exploit-CVE-2022-24780

iTop RCE via SSTI - CVE-2022-24780 エクスプロイト iTop --debug exploit.rb light --debug exploit.rb -h | --help full: exploit with an emulated browser, execute JavaScript, preserve original user profile information light: just parse HTML and send requests, no JavaScript, DESTRUCTIVE reset user informatio...

skyjack

SkyJack SkyJack is a drone engineered to autonomously seek out, hack, and wirelessly take full control over any other drones within wireless or flying distance, creating an army of zombie drones under your control. Update: Proof of Concept of SkyJack for 3D Robotics drones using the TI CC1111...

acheron

About Acheron is a library inspired by SysWhisper3/FreshyCalls/RecycledGate, with most of the functionality implemented in Go assembly. acheron package can be used to add indirect syscall capabilities to your Golang tradecraft, to bypass AV/EDRs that makes use of usermode hooks and instrumentatio...

ida-pro-mcp

IDA Pro MCP Simple MCP Server to allow vibe reversing in IDA Pro. https://github.com/user-attachments/assets/6ebeaa92-a9db-43fa-b756-eececce2aca0 The binaries and prompt for the video are available in the mcp-reversing-dataset repository. Prerequisites Python 3.11 or higher Use idapyswitch to...

fpicker

fpicker fpicker is a Frida-based fuzzing suite that offers a variety of fuzzing modes for in-process fuzzing, such as an AFL++ mode or a passive tracing mode. It should run on all platforms that are supported by Frida. Installation Instructions Building and Running Creating a Fuzzing Harness Mode...

cve-2025-49844

CVE-2025-49844 Mi prueba de concepto personal para CVE-2025-49844, también conocido como RediShell. Compilaciones de destino compatibles: Linux x86-64, imagen Docker redis:8.2.1-alpine Linux x86-64, imagen Docker redis:8.2.1-bookworm Es un poco torpe, probablemente no tan bueno como el de Wiz...

beagle

Beagle 1. About Beagle 2. Installation 1. Docker 2. Python Package 3. Configuration 3. Web Interface 1. Uploading Data 2. Browsing Existing Graphs 3. Graph Interface 1. Inspecting Nodes and Edges 2. Expanding Neighbours 3. Hiding Nodes 4. Running Mutators 5. Toggling Node and Edge Types 6...

VEN0m-Ransomware

VEN0m ランサムウェア https://github.com/user-attachments/assets/5a1fc9b5-a647-41f6-a152-7b9d97381adc このプロジェクトは、正規で署名されたドライバーを悪用して防御を回避し、実際のサイバー攻撃をシミュレートするランサムウェアを展開する方法を示しています。 🚨 Windows 11 Pro 24H2 でテスト済み。初回リリース日（2026年2月23日）時点では完全に検出されません。 | Evasion| UAC Bypass ---|---|--- BitDefender| ✅| ✅ Kaspersky| ...

frida-scripts

frida-scripts A collection of my Frida.re instrumentation scripts to facilitate reverse engineering of mobile apps and more. !NOTE My iOS and Android scripts might require some tweakings. For a well-maintained project that includes some of my Frida scripts, refer to Brida. Article...

cloudlist

機能 • インストール • 使用方法 • 設定 • cloudlistの実行 • サポート対象プロバイダ • ライブラリ • Discordに参加 Cloudlistは、クラウドプロバイダからアセットを取得するためのマルチクラウドツールです。ブルーチームが攻撃対象領域管理（Attack Surface Management）の取り組みを強化するために、最小限の設定作業で複数のクラウドにわたるアセットの集中管理リストを維持することを目的としています。 機能 複数の設定でクラウドアセットを一覧表示 複数のクラウドプロバイダをサポート キーレス認証のサポート（AWS IRSA /...

cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...

SkillsGuard

開発を支援する SkillsGuardがパイプラインを保護しているなら、継続的な研究と新しい検出ルールを支援することを検討してください。 ETH寄付ウォレット 0x11282eE5726B3370c8B480e321b3B2aA13686582 QRコードをスキャンするか、上記のウォレットアドレスをコピーしてください。 AIエージェントスキルパッケージ向け静的セキュリティスキャナー。 悪意のあるSKILL.mdファイルやバンドルされたスクリプトを実行前に検出します。 "スキルを監査し、何も信頼せず、安全に出荷する。" ⚡ 60秒でインストール＆使用 オプションA —...

hermes-decomp

Descompilador en Rust para bytecode de Hermes .hbc, el motor JS detrás de React Native. Compatible con HBC 40 a 99. Instalación Binarios precompilados Linux / macOS / Windows desde Releases o Actions: Sufijo del asset| Plataforma ---|--- linux-x8664 / linux-arm64| Linux macos-arm64 / macos-x8664|...

krf

KRF KRF is a K ernelspace R andomized F aulter. It currently supports the Linux and FreeBSD kernels. What? Fault injection is a software testing technique that involves inducing failures "faults" in the functions called by a program. If the callee has failed to perform proper error checking and...

CVE-2026-90786 Dvidelabs flatcc Duplicate Symbol semantics.c align_order_members assertion

A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function alignordermembers of the file src/compiler/semantics.c of the component Duplicate Symbol Handler. This manipulation causes reachable assertion. The attack can be initiated remotely. The exploit has been...

CVE-2026-90786

Dvidelabs flatcc (up to version 0.6.3 ) contains a vulnerability in the Duplicate Symbol Handler component, specifically in the align_order_members function within src/compiler/semantics.c. The flaw allows a reachable assertion to be triggered via crafted input. The attack can be initiated remote...

EUVD-2026-77478

A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function alignordermembers of the file src/compiler/semantics.c of the component Duplicate Symbol Handler. This manipulation causes reachable assertion. The attack can be initiated remotely. The exploit has been...