CVE-2026-54251

netty-incubator-codec-ohttp implements Oblivious HTTP OHTTP gateway and client functionality using Netty. Prior to 0.0.23.Final, the OHTTP gateway decryption path in codec-ohttp/src/main/java/io/netty/incubator/codec/ohttp/OHttpRequestResponseContext.java allocates a pooled direct ByteBuf for...

ps5-12.40-jailbreak

PS5 12.40 native exploit, work in progress This is the workin...

CVE-2026-54251

netty-incubator-codec-ohttp implements Oblivious HTTP OHTTP gateway and client functionality using Netty. Prior to 0.0.23.Final, the OHTTP gateway decryption path in codec-ohttp/src/main/java/io/netty/incubator/codec/ohttp/OHttpRequestResponseContext.java allocates a pooled direct ByteBuf for...

CVE-2026-54251 netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service

netty-incubator-codec-ohttp implements Oblivious HTTP OHTTP gateway and client functionality using Netty. Prior to 0.0.23.Final, the OHTTP gateway decryption path in codec-ohttp/src/main/java/io/netty/incubator/codec/ohttp/OHttpRequestResponseContext.java allocates a pooled direct ByteBuf for...

CVE-2026-54251 netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service

netty-incubator-codec-ohttp implements Oblivious HTTP OHTTP gateway and client functionality using Netty. Prior to 0.0.23.Final, the OHTTP gateway decryption path in codec-ohttp/src/main/java/io/netty/incubator/codec/ohttp/OHttpRequestResponseContext.java allocates a pooled direct ByteBuf for...

EUVD-2026-78879

netty-incubator-codec-ohttp implements Oblivious HTTP OHTTP gateway and client functionality using Netty. Prior to 0.0.23.Final, the OHTTP gateway decryption path in codec-ohttp/src/main/java/io/netty/incubator/codec/ohttp/OHttpRequestResponseContext.java allocates a pooled direct ByteBuf for...

station4

PS4 Exploit Firmwares: 5.05 6.72 7.XX 8.XX 9.XX 10...

sql_injection_exploit.sh

sqlinjectionexploit.sh Why do we perfrom SQL Injection atta...

Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists

Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say Iran's intelligence service uses to spy on dissidents, journalists, and activists around the world. The malware is controlled via the Telegram messaging app and can...

How to opt out of AI chatbot training

The tech journalists at 404 Media learned that OpenAI is hiring hundreds of contractors to read and review a massive stream of real users’ ChatGPT prompts and responses. “Project Lily” is reportedly a program that asks contractors to score or critique ChatGPT's answers to improve the chatbot's...

CVE-2026-11996

This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...

WordPress Advanced Popups plugin <= 1.2.3 - Authenticated (Author+) Stored Cross-Site Scripting via 'Notification Button Link' Field vulnerability

Authenticated Author+ Stored Cross-Site Scripting via 'Notification Button Link' Field vulnerability discovered by Nguyen Cong Quang in WordPress Plugin Advanced Popups versions = 1.2.3...

jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

A flaw was found in jackson-databind. This vulnerability occurs in the data-binding functionality where properties intended to be ignored are incorrectly restored and become writable again. An attacker could potentially exploit this by providing input that modifies data through these supposedly...

ps5-fw-13.60-jailbreak

PSAITO Experimental research project for educational and...

CVE-2026-85484

A flaw was found in HTML::FormHandler for Perl. This vulnerability allows a remote attacker to inject malicious script into web pages. The component fails to properly escape option group labels and radio button labels when rendering them into HTML. This can lead to Cross-Site Scripting XSS attack...

adlc

ADLC Bug-Fix PoC A proof of concept for an agentic developm...

CVE-2020-12112

CVE-2020-12112 🚨 BigBlueButton バージョン 2.2.4 未満には、機密ファイルへのアクセスを許可する LFI 脆弱性があります。 ストーリー 📜 BigBlueButton インスタンスを使った遠隔授業中、クラスの生徒が先生のスライドプレゼンテーションのリンクを共有したところ、URL にファイル名が含まれていることに気づきました。 root@kitploit: Student: "No need to write notes, I've got the slide." Me: Well, I've got a security report to make....

CVE-2021-44228

Log4jの脆弱性 - CVE-2021-44228 📗 はじめに この脆弱性は2021年12月9日に発見され、CVE-2021-44228 として識別されています。この欠陥はJavaのログパッケージに影響を及ぼし、深刻度スコア（CVSS）は 10点であり、ホストへのリモートアクセス実行を可能にします。この脆弱性はセキュリティコミュニティでは LOG4SHELLとして知られています。 LOG4J脆弱性の影響を受けるソフトウェアベンダーのリストが必要な場合は、以下のリポジトリを確認してください。 GitHub/Log4jAttackSurface 偵察...

zig-pe

zig-pe Zigで書かれたリフレクティブPEローダー。ネイティブおよび.NETのPEファイルをメモリから直接ロードして実行します。 特徴 PEローディングパイプライン DOSヘッダーとNTヘッダー（PE32/PE32+を実行時に判別）をパース セクションを割り当てられたメモリにマッピング インポートの解決（名前および序数、PE32は4バイト、PE32+は8バイトのサンク） ベースリロケーションの適用（HIGHLOW、DIR64、ARMMOV32、THUMBMOV32） 遅延インポートの解決（DataDirectory13、最新RVA形式）...

gOSINT

gOSINT Codacy Badge Go로 작성된 OSINT 스위스 아미 나이프 더 많은 업데이트를 보려면 develop 브랜치를 확인하세요. 소개 gOSINT는 Golang으로 작성된 멀티플랫폼 OSINT 스위스 아미 나이프입니다. 원하신다면 언제든지 기여하시거나 피드백을 남겨주세요! 제 프로젝트가 마음에 드시나요? 기부를 고려해 주세요 : gOSINT가 할 수 있는 일 현재 gOSINT는 다양한 모듈을 제공합니다: 이메일 검색을 위한 git 지원 GitHub API 사용 또는 일반 클론 및 검색 PGP 서버에서 이메일, 별...