thc-hydra

H Y D R A c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licensed under AGPLv3 see LICENSE file Please do not use in military or secret service organizations, or for illegal purposes...

Exploits

Windows Exploits A curated archive of complied and tested public Windows exploits...

yararules

yararules Yara rulez; rules too. This is a repository of my own YARA rules grouped together with publicly available YARA rules, collected from open sources, polished and QA tested by me. Contact: craiu at protonmail.ch...

aad-bofs

This repository contains a collection of BOFs for various Azure AD attacks. All the bofs have been battle-tested during engagements. Please also feel free to contribute :...

CVE-PoC-Hub

🔬 CVE-PoC-Hub — Curated Proof-of-Concept Exploits Working, verified PoC scripts for recent CVEs. Tested in lab environments. For security researchers, penetration testers, and CTF players. ⚠️ Disclaimer All PoCs are for educational and authorized testing only. Each exploit has been tested in...

reposaur

Reposaur Reposaur is the open source compliance tool for development platforms. Audit, verify and report on your data and configurations easily with pre-defined and/or custom policies. Supports GitHub. GitLab, BitBucket and Gitea support soon. ⚠️ before 1.0.0 expect some bugs and API changes ⚠️...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: wilc1000 – fixed a potential memory leak in wilcmacxmit The wilcmacxmit function returns NETDEVTXOK without freeing the skb buffer; devkfreeskb was added to address this issue. This fix has been tested only during compilati...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: vmci: Speculation leaks were prevented by sanitizing the eventdata parameter in the eventdeliver function. Coverity identified that the eventmsg is controlled by user-space. The eventmsg-eventdata.event is passed to eventdeliver...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Platform/x86: think-lmi: Fixed reference leak If a duplicate attribute is found using ksetfindobj, a reference to that attribute is returned, and that reference needs to be disposed of using kobjectput. The validation of the...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Platform/x86: dell-sysman: Fixed reference leak issue. If a duplicate attribute is found using ksetfindobj, a reference to that attribute is returned. This means that we need to handle it accordingly. Use kobjectput to dispose of...

EUVD-2026-76195

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the FastExplorationFSM::optTimerCallback in swarmexploration/explorationmanager/src/fastexplorationfsm.cpp...

PT-2026-90039

Name of the Vulnerable Software and Affected Versions Robotics-STAR-Lab SYSU STAR Group RACER Tested version commit abcdef1234567890 Description A flaw allows an attacker to trigger a denial of service. This occurs through the FastExplorationFSM::optTimerCallback function located in swarm...

CVE-2026-71644: Access of Resource Using Incompatible Type

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops publishing swarm trajectories when the drone enters IDLE...

CVE-2026-71644

A vulnerability exists in Robotics-STAR-Lab (SYSU STAR Group) RACER (affected version: commit abcdef1234567890 ) due to a missing default case in the FSM . This flaw prevents the system from stopping the publication of swarm trajectories when a drone enters the IDLE state, which can lead to unsaf...

CVE-2026-71646

The Robotics-STAR-Lab (SYSU STAR Group) RACER software (affected version: commit abcdef1234567890 ) is vulnerable to a denial of service (DoS) . The root cause is located within the FastExplorationFSM::optTimerCallback() function in the file swarm_exploration/exploration_manager/src/fast_explorat...

CVE-2026-71646

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the FastExplorationFSM::optTimerCallback in swarmexploration/explorationmanager/src/fastexplorationfsm.cpp...

CVE-2026-71645

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the exploration state machine...

CVE-2026-71645: Improper Check or Handling of Exceptional Conditions

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the exploration state machine...

CVE-2026-71645

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the exploration state machine...

EUVD-2026-49766

Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. This flaw allows attackers with access to the server file system to retrieve authentication details, potentially leading to privilege escalation. The vendor assessed the likelihood of exploitation as very low and...