sandbox-agent

Agents Agent infrastructure from Rivet. Join us on Discord. Projects Project| Directory| Docs ---|---|--- Rivet Agents : run agents such as Pi as durable Rivet Actors @rivet-dev/pi, @rivet-dev/sandbox-adapter| packages/, docs in docs/| rivet.dev/agents/docs Sandbox Agent : run coding agents in...

Plex Media Server < 1.43.3.10861 - SSRF via Transcoder

Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter. id: CVE-2026-96655 info: name: Plex Media Server 1.43.3.10861 - SSRF via Transcoder author: DhiyaneshGeek severity: medium...

toolkit

English | Español Indetectables Toolkit Designed as a Swiss Army knife, this curated toolkit is invaluable for malware analysts, crackers, and cybersecurity experts. It is meticulously crafted to support both novice and experienced users. This toolkit complements the manuals and the numbered...

universal-flutter-ssl-pinning

universal-flutter-ssl-pinning Reverse-engineers libflutter.so with PyGhidra to locate the SSL certificate verification function, then emits ready-to-use bypass scripts for both Frida and Renef. How it works 1. PyGhidra loads libflutter.so headlessly and scans all defined strings for sslclient 2...

CVE-2017-7089

CVE-2017-7089 Impact : Processing maliciously crafted web content may lead to universal cross site scripting Description : A logic issue existed in the handling of the parent-tab. This issue was addressed with improved state management. Safari 10 Local SOP bypass function Pewvar...

Research_Successful_Errors

Successful Errors: New Code Injection and SSTI Techniques !NOTE This is the second version of the whitepaper based on the results I presented before releasing SSTImap version 1.3.1. Further improvements would be adapted for this format as version 1.2 of the research at a later date. Payloads...

CVE-2017-5124

CVE-2017-5124 UXSS with MHTML DEMO: https://bo0om.ru/chromepoc/PoC.php tested on Chrome/61.0.3163.100...

turing-machine

Arbitrary Code Execution in the Universal Turing Machine This is an implementation of the Universal Turing Machine as presented in Minsky, Computation: Finite and infinite machines, 1967, Chapter 7. The default input to the simulated machine is an exploit that achieves arbitrary code execution. R...

Manipulating-Web-Agents

Manipulating Autonomous LLM-based Web Agents with Indirect Prompt Injection Attacks With the ubiquity of LLM-integrated applications, investigating potential security risks is crucial. One of the most significant vulnerabilities in these systems is their susceptibility to adversarial attack via...

CVE-2026-21978

CVE-2026-21978 My CVE in Oracle FLEXCUBE Universal Banking Link: https://www.oracle.com/security-alerts/cpujan2026.html...

CVE-2020-0423

Big thank you to all the other security research people publishing their work, allowing others to learn, and do independent research. Resources: Original exploit article via longterm.io: https://www.longterm.io/cve-2020-0423.html Repo from Github user 20000s, also looking into 2020-0423:...

CVE-2021-43530-UXSS-On-QRcode-Reader-

CVE-2021-43530-UXSS-On-QRcode-Reader- CVE-2021-43530 A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. This bug only affects Firefox for Android. Other operating systems are unaffected.. This...

unhook-bof

This is a Beacon Object File to refresh DLLs and remove their hooks. The code is from Cylance's Universal Unhooking research: https://blogs.blackberry.com/en/2017/02/universal-unhooking-blinding-security-software To use: Load unhook.cna into Cobalt Strike via Cobalt Strike - Script Manager Run...

universal-android-debloater-next-generation

Universal Android Debloater Next Generation !warning DISCLAIMER : Use at your own risk. We're not responsible for anything that could happen to your devices. This is a detached fork of the UAD project. This aims to improve privacy and efficiency energy, speed, memory by removing unnecessary and...

CVE-2026-122984

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-119840

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-119837

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-122358

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-119840

A heap-based buffer overflow vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege escalation . While the documents confirm the vulnerability type and impact, specific exploit details or links are n...

CVE-2026-119837

A heap-based buffer overflow exists in the Windows Universal Disk Format File System Driver (UDFS) , which could allow an authorized attacker to achieve local privilege elevation . While the specific root cause of the overflow is not detailed in the provided documents, the vulnerability is confir...