CVE-2022-31691

CVE-2022-31691 A write-up of my so far inconclusive look into CVE-2022-31691. Background I'm a frequent user of the Spring Tool Suite STS for Eclipse, and tend to rely on it to initialise new Spring Boot projects. This vulnerability see https://tanzu.vmware.com/security/cve-2022-31691 is an RCE...

CYBERDUDEBIVASH-5G-Core-Key-Rotation-Ghost-Admin-Auditor

CYBERDUDEBIVASH 5G Core Key Rotation & Ghost Admin Auditor v1.1 © 2026 CYBERDUDEBIVASH – All Rights Reserved Global Authority in Zero-Trust 5G & Private Network Security Bhubaneswar, Odisha, India Production-grade tool for detecting & remediating CVE-2026-0622 Ghost Admin privilege escalation &...

canTot

canTot canTot is a python-based cli framework based on sploitkit and is easy to use because it is similar to working with Metasploit. This similar to an exploit framework but focused on known CAN Bus vulnerabilities or fun CAN Bus hacks. It can also be used as a guide for pentesting vehicles and...

apidetector

APIDetector is a powerful and efficient tool designed for testing exposed Swagger endpoints in various subdomains with unique smart capabilities to detect false-positives. It's particularly useful for security professionals and developers who are engaged in API testing and vulnerability scanning...

apidetector

APIDetector es una herramienta potente y eficiente diseñada para probar endpoints Swagger expuestos en varios subdominios con capacidades inteligentes únicas para detectar falsos positivos. Es particularmente útil para profesionales de la seguridad y desarrolladores que realizan pruebas de API y...

CVE-2018-10933

libSSH-Authentication-Bypass Accede a una shell sin credenciales utilizando CVE-2018-10933 Exploit-DB : https://www.exploit-db.com/exploits/45638 Información sobre CVE-2018-10933 por libSSH : https://www.libssh.org/security/advisories/CVE-2018-10933.txt Versión de corrección de errores por libSSH...

CGA-PMPQ-C5JP-8332

Bulletin has no description...

CGA-226C-RMFJ-77F7

Bulletin has no description...

CGA-JC86-XRPQ-PPV4

Bulletin has no description...

CGA-HGV6-28C3-98P3

Bulletin has no description...

POC-CVE-2025-29927

CVE-2025-29927: Next.js Middleware Bypass PoC Overview This PoC demonstrates CVE-2025-29927, a vulnerability in Next.js middleware that allows attackers to bypass authentication, authorization, and CSP mechanisms using the x-middleware-subrequest header. Affected Versions Next.js versions 11.1.4 ...

CGA-FM5G-9X5V-H7JM

Bulletin has no description...

CGA-2G3P-F67H-89WQ

Bulletin has no description...

CGA-MMVQ-3PV2-5HM8

Bulletin has no description...

LAMMA-beta

LAMMA BETA Vulnerability Assessment Framework for all the Crypto Implimentations. An Open Source Initiative by - SECURITY MONX Lamma Framework Documentation beta root@kitploit: File Name : README Author : @ajithatti Org : Security Monx Version : 0.0.1 Purpose : Gives introduction of Lamma Framewo...

CGA-FG28-GR7M-7CP6

Bulletin has no description...

CGA-P9VC-F6F3-4HWC

Bulletin has no description...

CGA-M7XC-3W34-R522

Bulletin has no description...

CGA-42MW-8GVH-349H

Bulletin has no description...

publications

Publications from Calif MAD Bugs: Month of AI-Discovered Bugs Apple Internals A series reverse-engineering Apple's internals. Security Research A Race Within A Race: Exploiting CVE-2025-38617 in Linux Packet Sockets Security Audits Shamir39 Security Audit, commissioned by an unnamed client. Mbed...