CVE-2026-20637-AppleSEPKeyStore-UAF

CVE-2026-20637: AppleSEPKeyStore Use-After-Free CVE-2026-20637 | Author: Johnny Franks @zeroxjf Component: AppleKeyStore Impact: An app may be able to cause unexpected system termination Description: A use after free issue was addressed with improved memory management. —Apple Security Content, iO...

pickle_exploit

PickleExploit Demonstrating Remote Code Execution Vulnerability via Pickle Serialization in ClearML 🖥️ This script was developed by h3x0v3rl0rd. This proof of concept PoC demonstrates a potential security vulnerability involving the serialization and deserialization of Python objects using the...

susvibes-jupyter-server-cve-2026-35397

SusVibes Benchmark Task: Jupyter Server Contents Path Resolution This repository contains one complete SusVibes-style benchmark task built from a real upstream Python security fix in Jupyter Server. The task is designed to evaluate whether an agent can reimplement masked contents path-resolution...

n8n-cve-2025-68613-thm

CVE-2025-68613 – n8n Critical RCE Exploitation Overview This repository documents a hands-on exploitation of CVE-2025-68613 CVSS 9.9 , a critical Remote Code Execution vulnerability affecting the n8n workflow automation platform versions 0.211.0 through 1.120.3. This exploitation was performed...

CVE-2026-32743-PX4-Autopilot-MavlinkLogHandler-Stack-Buffer-Overflow-DoS-

CVE-2026-32743 - PX4 Autopilot MavlinkLogHandler Stack Buffer Overflow DoS -orange -blue 📜 Description CVE-2026-32743 is a stack‑based buffer overflow in the MavlinkLogHandler of PX4 Autopilot versions ≤1.17.0-rc2. The LogEntry.filepath buffer is only 60 bytes , but sscanf parses log directory...

yellowkey-bitlocker

🔑 yellowkey-bitlocker - Unlock your BitLocker encrypted computer files 📁 Project Overview The yellowkey-bitlocker tool provides a way to regain access to your Windows storage drives. Many users encounter issues with BitLocker drive encryption, which can lock files during updates or hardware...

dynmx

Prototipo de dynmx dynmx pronunciado dynamics es un enfoque de detección basado en firmas para características de comportamiento de malware basado en secuencias de llamadas a la API de Windows. De manera simplificada, puede pensar en dynmx como una especie de YARA para trazas de llamadas a la API...

RedRoot

🔴 RedRoot Lite – Mark X Offensive Security Framework Lite Edition | CLI-Based “Less power. Same discipline.” RedRoot Lite is the restricted edition of RedRoot , designed to provide core red teaming functionality while keeping advanced modules locked. It uses the same architecture, same CLI style,...

attack-attention

Attacking Attention of Foundation Models Effectively Disrupts Downstream Tasks Official PyTorch implementation of the paper "Attacking Attention of Foundation Models Effectively Disrupts Downstream Tasks" , accepted in the Adversarial Machine Learning on Computer Vision: Foundation Models + X ADV...

CVE-2022-2588

CVE-2022-2588 The fix The bug is fixed in Linux v5.19 by this commit. The bug The bug was introduced in Linux v3.17 by this commit back to 2014. It requires User Namespaces to trigger. This bug is very similar to CVE-2021-3715, which was caused by improper operation on the route4filter's linked...

AtlasReaper

AtlasReaper AtlasReaper es una herramienta de línea de comandos desarrollada para fines de seguridad ofensiva, centrada principalmente en el reconocimiento de Confluence y Jira. También proporciona varias características que pueden ser útiles para tareas como la recolección de credenciales y la...

codeql

CodeQL This open source repository contains the standard CodeQL libraries and queries that power GitHub Advanced Security and the other application security products that GitHub makes available to its customers worldwide. How do I learn CodeQL and run queries? There is extensive documentation abo...

CVE_2025_24257----NOT-MINE

🔧 CVE202524257----NOT-MINE - Run the Windows PoC Safely 🧾 Overview CVE202524257----NOT-MINE is a Windows proof of concept that shows a kernel memory bug in IOGPUFamily. It is based on a bitmapmask underflow that can lead to a kernel heap out-of-bounds write. This project is the first public PoC...

AdaptixC2

AdaptixC2 v1.2 FEB, 28: What has changed in version v1.2? Adaptix is an extensible post-exploitation and adversarial emulation framework made for authorized penetration testing. The Adaptix server is written in Golang and to allow operator flexibility. The GUI Client is written in C++ QT, allowin...

InfoHound

InfoHound - Herramienta OSINT para perfilado de dominios Durante la fase de reconocimiento, un atacante busca cualquier información sobre su objetivo para crear un perfil que luego le ayudará a identificar posibles vías de entrada en una organización. InfoHound realiza técnicas de análisis pasivo...

cerbos

What is Cerbos? Cerbos is an authorization layer that evolves with your product. It enables you to define powerful, context-aware access control rules for your application resources in simple, intuitive YAML policies; managed and deployed via your Git-ops infrastructure. It provides highly...

rsfiles-CVE-2026-57827

CVE-2026-57827 — RSFiles! Unauthenticated File Upload → RCE Disclaimer — authorized use only. This is a proof-of-concept for security research and defensive testing. You are responsible for using it only on systems you own or have explicit written permission to test. Misuse against third parties...

UnjailMe

UnjailMe A sandbox escape based on: the proof-of-concept CVE-2018-4087 by Rani Idan Zimperium @cheesecakeufo's securityd overflow proof-of-concept zeroday, no CVE known, thank you Abraham! About the ZIMPERIUM PoC Rani used sbtool from Jonathan Levine to find out what services were accessible for...

CVE-2021-4034

Pwnkit Vulnerability - CVE-2021-4034 📗 Introduction Discovered in 2021 but announced and disclosed in January 2022, CVE-2021-4034 was affectionately named Pwnkit, however, it is available in all versions of the Policy Toolkit - Polkit package in practically all OS - Linux distributions. In short,...

CVE-Factory

CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability CVE-Factory is a Multi-Agent system for fully automated, end-to-end CVE reproduction. Given CVE records, the system automatically researches details, generates test cases, builds Docker environments, and validates tha...