CVE-2025-29927-Nextjs-Bypass-PoC

PoC: CVE-2025-29927 - Next.js Middleware Bypass This repository contains a Proof of Concept PoC demonstrating how to bypass middleware security checks in Next.js v13.5.6 by exploiting a vulnerability related to internal HTTP headers. Vulnerability Overview: CVE-2025-29927 What is it? CVE-2025-299...

ARES

ARES™ Autonomous Red Team Engagement & Continuous Security Validation Platform The open-core platform empowering enterprise red teams, MSSPs, and security operations centers to execute targeted offensive engagements, discover deterministic attack paths, and continuously validate defensive posture...

zttp

ZTTP: Zero-Trust SSH Bastion Proxy 🔗 Project Mirrors: GitHub | GitLab ZTTP is a hardened, self-hosted Zero-Trust SSH bastion proxy built in Golang with HashiCorp Vault-backed key management, RBAC policy enforcement, full session recording, and an interactive admin TUI — designed for teams who nee...

HydraDragonAV-Mobile

🐉 HydraDragonAV Mobile 高级 Android 杀毒软件，具备威胁防护功能 ⚠️ 项目暂停中。 这个项目没有获得足够的关注，因此我已 将其暂停一段时间。开发工作已转移到 HydraDragonAntivirus 。 Discord 社区服务器：https://discord.gg/7XMCuj5mbP 徽标由名为 1tophbeifong 的 Discord 用户制作 HydraDragonAV Mobile 是一款多层 Android 杀毒与安全套件，结合了静态分析（YARA-X + ClamAV 签名 +...

CVE-2026-33267-PoC

CVE-2026-33267 — Apache Traffic Server 不受信任的 @ 标头 → 内部元数据伪造 CVSS 10.0（严重） · CWE-20 · GHSA-jrh6-9hgv-mqm7 摘要 Apache Traffic Server 保留以 @ 为前缀的标头（@Ats-Internal、@ICAP-Status、@TCPInfo 等）用于内部元数据 ：它们存在于内存中的标头结构里，但绝不会在网络上序列化。在受影响版本（9.2.0–9.2.14、10.1.0–10.1.3）中，来自客户端请求 和源站响应...

Active-Directory-trust-attacks

此存储库没有 README。...

Securekit

Securekit Securekit protects what your models execute—across any AI system. Securekit is a protocol-agnostic security kernel for AI tool execution. It sits between any LLM or agent system and the tools they use, enforcing zero-trust execution, sandbox isolation, and policy-driven control. It is...

csw-slides-2024

2024年开发安全软件 摘要 随着人类对计算机系统的依赖日益加深，对安全可靠的软件的需求变得至关重要。如今，从飞机、火车、汽车到牙刷和炉灶，一切事物都包含大量微型计算机。而每一个这样的系统，又都包含用于告诉这些计算机如何完成工作并将其与其他计算机连接的软件。这些系统中的安全问题，虽然取决于具体情境，但已导致从轻微不便到人员伤亡等各种后果。...

EulerOS Virtualization 2.12.1 : ca-certificates (EulerOS-SA-2026-3578)

According to the versions of the ca-certificates package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying...

Cisco Identity Services Engine (cisco-sa-ISE-ABP-VNSW7Tn5)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in an API of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to bypass authentication. CVE-2026-76460 Please see the included Cisco BIDs and Cisco Security Adviso...

EulerOS 2.0 SP10 : ca-certificates (EulerOS-SA-2026-3731)

According to the versions of the ca-certificates package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity o...

internal-security-detect

Internal Security Detection via Safebase Exposed SafeBase portals serve two audiences at once: prospects who need proof of your security posture, and security researchers blue and red teamers. Each green tick reveals a control that supposedly exists today; every missing tick is an equally loud hi...

CVE-2026-54495

The OpenFeature Operator allows users to expose feature flags to applications. In version 0.9.2 and earlier, a tenant who can create a controller-owned workload can use the openfeature.dev/featureflagsource annotation with NAMESPACE/NAME syntax to reference a FeatureFlagSource or...

CVE-2026-92941

vm2 (Node.js sandboxing library) versions 3.11.3 through 3.11.6 expose the host tls module to NodeVM sandbox code. An attacker with access to the allowed tls and url builtins can use URLSearchParams to construct host-realm arrays and invoke tls.setDefaultCACertificates() , replacing the process-w...

CVE-2026-92941 vm2 3.11.3 before 3.11.7 TLS Trust Store Manipulation

vm2 versions from 3.11.3 before 3.11.7 expose the host tls module to NodeVM sandbox code, allowing attackers to call tls.setDefaultCACertificates and replace process-wide certificate authorities. Attackers with access to allowed tls and url builtins can use URLSearchParams to create host-realm...

EUVD-2026-81591

vm2 versions from 3.11.3 before 3.11.7 expose the host tls module to NodeVM sandbox code, allowing attackers to call tls.setDefaultCACertificates and replace process-wide certificate authorities. Attackers with access to allowed tls and url builtins can use URLSearchParams to create host-realm...

CVE-2026-37432

CVE-2026-37432 Location: Apiutil.java: 107-113 Principle: Directly trusting the X-Forwarded-For request header, which can be forged to manipulate IP addresses. Exploitation method: X-Forwarded-For: 127.0.0.1...

Yellowkey-mitigation

Yellowkey-mitigation.ps1 is a PowerShell script that automates the WinRE mitigation workflow described in CVE-2026-45585, adds verification after every step, and does not execute step 6 reagentc /disable + reagentc /enable if any earlier step fails. It also checks whether the required registry...

CVE-2024-47176

CVE-2024-47176 — Remote Command Execution in CUPS For educational and authorized penetration testing purposes only. Table of Contents Description Affected Systems Related CVEs Prerequisites Setup Usage Disclaimer Description CUPS Common UNIX Printing System is an open-source printing system that...

BIND-9-Cache-Poisoning-PoC---CVE-2025-40778

BIND 9 Cache Poisoning PoC - CVE-2025-40778 Conceptual Overview This vulnerability allows an attacker to corrupt the DNS cache of a BIND Resolver, forcing legitimate users to be redirected to malicious IP addresses without their knowledge. The core logic of the attack: The attack relies on...