CVE-2026-41651

🔥 CVE-2026-41651 — PackageKit TOCTOU Local Privilege Escalation Pack2TheRoot Local Privilege Escalation exploit targeting the PackageKit daemon. Escalates from an unprivileged local user to root through a TOCTOU race condition vulnerability. 📌 Overview CVE-2026-41651 also known as Pack2TheRoot is...

LogFileParser

Features Decode and dump $LogFile records and transaction entries. Decode NTFS attribute changes. Optionally resolve all datarun list information available in $LogFile. Option: "Reconstruct data runs". Recover transactions from slack space within $LogFile. Choose to reconstruct missing or damaged...

theo

Theo Obsolete, not maintained anymore, don't install it, don't use it, you were warned! Theo aims to be an exploitation framework and a blockchain recon and interaction tool. Features: Automatic smart contract scanning which generates a list of possible exploits. Sending transactions to exploit a...

bitcoin

Bitcoin Core integration/staging tree https://bitcoincore.org For an immediately usable, binary version of the Bitcoin Core software, see https://bitcoincore.org/en/download/. What is Bitcoin Core? Bitcoin Core connects to the Bitcoin peer-to-peer network to download and fully validate blocks and...

polymaster

Whale Watcher NOTE: repo is transitioning to a full featured trading bot, openclaw like agent that you talk in your telegram with power yo deploy a team of agents to perform research before making a decision. A Rust CLI tool that monitors large transactions on Polymarket and Kalshi prediction...

CVE-2026-1337

CVE-2026-1337 - Neo4j - Inyección de logs Un usuario autenticado puede realizar inyección de logs en el query.log de Neo4j cuando Neo4j no está configurado para usar formato json. Resumen Neo4j no escapa los caracteres de control en el campo de metadatos cuando forma parte de una transacción bolt...

Orbit

ＯＲＢＩＴ Blockchain Transactions Investigation Tool 3.2-blue.svg" Introduction Orbit is designed to explore network of a blockchain wallet by recursively crawling through transaction history. The data is rendered as a graph to reveal major sources, sinks and suspicious connections. Note: Orbit only...

Wallet-Transaction-Monitor

Wallet Transaction Monitor This script monitors a Bitcoin wallet address and notifies the user when there are changes in the balance or new transactions. It provides real-time updates on incoming and outgoing transactions, along with the corresponding amounts and timestamps. Additionally, it can...

CVE-2023-49540

CVE-2023-49540 Book Store Management System v1.0 - Cross-site scripting XSS vulnerability in /index.php/history - vulnerable field: "Customer's Name". Description : Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/history. T...

KTM_POCS

KTMPOCS This repo contains reports for CVE 2024-43570 and CVE 2024-43535, two vulnerabilities I found in the Windows Kernel Transaction Manager driver tm.sys. This repo also contains exploit code I used for the demos in the OffensiveCon25 Presentation: Hunting for Overlooked Cookies in Windows 11...

Dumpy

Description This tool dynamically calls MiniDumpWriteDump to dump lsass memory content. This process is done without opening a new process handle to lsass and using DInvokers to make it harder to detect its malicious behaviour. In order to obtain a valid process handle without calling OpenProcess...

CVE-2015-6620-POC

CVE-2015-6620-POC-1 POC para un bug en CVE-2015-6620-1 ANDROIDID-24123723, escritura arbitraria al deserializar AMessage. Los dos bugs están fusionados en un solo CVE, y aquí está el POC para uno de ellos. Explicación root@kitploit: 533 sp AMessage::FromParcelconst Parcel &parcel 534 int32t what ...

EUVD-2026-42683

@Mockoon/commons-server: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft...

regipy

regipy ⚠️ Breaking Changes in v6.0.0 Version 6.0.0 includes significant modernization changes: Python 3.9+ required - Dropped support for Python 3.6, 3.7, and 3.8 attrs library removed - Data classes now use Python's built-in dataclasses module If your code imports internal classes Cell,...

Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.

Summary Multiple vulnerabilities were identified in third-party components used by CICS Transaction Gateway for Multiplatforms, including IBM WebSphere Application Server, IBM WebSphere Application Server Liberty, Apache Tomcat Embed, Logback, Log4j, Jackson Databind, and various operating system...

CVE-2026-73316 XenForo < 2.3.13 Payment Replay via PayPal REST Payment Provider

XenForo before 2.3.13 contains a payment replay vulnerability in the PayPal REST payment provider that allows attackers to process the same webhook payload multiple times by exploiting a missing duplicate transaction ID check. Attackers can replay a valid webhook payload to trigger duplicate...

CVE-2026-73316

XenForo before 2.3.13 is affected by a payment replay vulnerability in the PayPal REST payment provider . The root cause is a missing duplicate transaction ID check , which allows an attacker to replay a valid webhook payload multiple times. This triggers duplicate payment events , resulting in r...

EUVD-2026-72753

XenForo before 2.3.13 contains a payment replay vulnerability in the PayPal REST payment provider that allows attackers to process the same webhook payload multiple times by exploiting a missing duplicate transaction ID check. Attackers can replay a valid webhook payload to trigger duplicate...

CVE-2026-41651

CVE-2026-41651 root@kitploit: CVSS 3.x : 7.8 HIGH CWE : CWE-367 Time-of-Check Time-of-Use Fix : PackageKit 1.3.5+ Affects : PackageKit 1.0.2 – 1.3.4 Local privilege escalation via TOCTOU race condition in PackageKit's D-Bus transaction handler. Any unprivileged local user can install arbitrary...

CVE-2026-23111

🐧 CVE-2026-23111 - Linux Kernel nftables Use-After-Free Vulnerability ⚠️ Use-After-Free in Linux Kernel nftables 📖 Overview CVE-2026-23111 is a high-severity Use-After-Free UAF vulnerability affecting the Linux kernel's netfilter/nftables subsystem. The flaw originates from incorrect handling of...