CVE-2026-91087 GPAC Compositor media_object.c gf_mo_get_od_id use after free

A flaw has been found in GPAC up to f1219cde. This vulnerability affects the function gfmogetodid of the file compositor/mediaobject.c of the component Compositor. Executing a manipulation can lead to use after free. The attack may be performed from remote. The exploit has been published and may ...

EUVD-2026-78302

A flaw has been found in GPAC up to f1219cde. This vulnerability affects the function gfmogetodid of the file compositor/mediaobject.c of the component Compositor. Executing a manipulation can lead to use after free. The attack may be performed from remote. The exploit has been published and may ...

CVE-2026-91087

GPAC (up to commit f1219cde) contains a use-after-free vulnerability in the function gf_mo_get_od_id within the file compositor/media_object.c of the Compositor component. A remote attacker can trigger the flaw by crafting a malicious input, potentially leading to information disclosure, integrit...

CVE-2026-91087 GPAC Compositor media_object.c gf_mo_get_od_id use after free

A flaw has been found in GPAC up to f1219cde. This vulnerability affects the function gfmogetodid of the file compositor/mediaobject.c of the component Compositor. Executing a manipulation can lead to use after free. The attack may be performed from remote. The exploit has been published and may ...

androidqf

androidqf NOTE: this project is currently not maintained. An independent fork can be found under theMVT Project. androidqf Android Quick Forensics is a portable tool to simplify the acquisition of relevant forensic data from Android devices. Download androidqf Build Executable binaries for Linux,...

xpfarm

XPFarm Una plataforma de seguridad ofensiva aumentada con IA de código abierto que envuelve herramientas de seguridad conocidas detrás de una interfaz web unificada — con escaneo distribuido, informes generados por IA, un planificador de escaneo inteligente, un gráfico de ataque interactivo y un...

youzer

youzer Fake User Generator for Active Directory Environments Introduction The goal of Youzer is to create information rich Active Directory environments. This uses the python3 library 'faker' to generate random accounts. root@kitploit: pip3 install faker You can either supply a wordlist or have t...

FuckJsonp-RCE-CVE-2022-26809-SQL-XSS-FuckJsonp

Este método de rastreo del honeypot apunta a los miembros del equipo rojo que usan hotspots móviles. El honeypot obtiene directamente el número de teléfono del atacante para rastrearlo. Atrapa a uno con precisión. ¡Cuidado, miembros del equipo rojo! Primero, al abrir el sitio web, monitorea si se...

asclepius

Asclepius Asclepius valida la integridad de las copias de seguridad restaurando archivos y probando activamente su recuperabilidad. En lugar de confiar en los metadatos, intenta analizar formatos de archivo reales documentos, imágenes, vídeos, archivos comprimidos, correos electrónicos para...

CVE-2026-46215-exploit-linux-7.0-uaf-stable

CVE-2026-46215 Exploit for Linux 7.0 - More Stable & Reliable c0d3 by : Antonius w1sdom / ev1lut10n / sw0rdm4n - bluedragonsec.com https://github.com/bluedragonsecurity This exploit works in a limited environment, check some requirements below !!! WHAT THE HELL IS THIS ? This is and exploit for...

rizin-notebook

Sonic English | 中文 一个速度奇快的 JSON 序列化/反序列化库，由 JIT （即时编译）和 SIMD （单指令流多数据流）加速。 依赖 Go: 1.181.25 注意：Go1.24.0 由于 issue 不可用，请升级到更高 Go 版本，或添加编译选项 --ldflags="-checklinkname=0" OS: Linux / MacOS / Windows CPU: AMD64 / ARM64, 需要 Go1.20 以上） 接口 详见 go.dev 特色 运行时对象绑定，无需代码生成 完备的 JSON 操作 API 快，更快，还要更快！ 基准测试 对于所有大小...

AzureRedOps

AzureRedOps A Swiss Army tool for Azure / Entra ID red teaming. Author: Mr.Un1k0d3r TrueCyber Inc Version: 0.1 Language: Python 3.12+ Overview AzureRedOps is a offensive security toolkit for assessing the security posture of Microsoft Entra ID and Azure tenants. It wraps the most common red-team...

bfac

BFAC Advanced Backup-File Artifacts Testing for Web-Applications BFAC Backup File Artifacts Checker is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords,...

chronix

Chronix Self-hosted collaborative workspace for pentesters and red team operators. Captures notes, commands, outputs, and operational context during security engagements. Quick Start root@kitploit: Install pipx install git+https://github.com/IceCubeSandwich/chronix Initialize creates account and...

libpcap

LIBPCAP 1.x.y por The Tcpdump Group Para informar sobre un problema de seguridad, envía un correo electrónico a [email protected]. Para informar errores y otros problemas, contribuir con parches, solicitar una funcionalidad, proporcionar comentarios generales, etc., consulta las pautas para...

Uscrapper

Uscrapper Vanta 隆重推出 Uscrapper Vanta，释放开源情报的力量。借助 Uscrapper Vanta，深入探索广阔的网络世界。Vanta 解锁了新一代数据提取能力，支持使用关键词提取模型，精准探索暗网未知领域，发掘隐藏宝藏。Uscrapper Vanta 保留了其前身的核心优势，可从超链接和非超链接来源中收集大量个人信息，包括电子邮件地址、社交媒体链接、作者姓名、地理位置、电话号码和用户名。利用多线程技术和先进的模块来应对反网络爬虫防御，确保您能获取所需数据。Vanta...

transfer.sh

安全警告 通过未认证的 X-Forwarded-For 头欺骗绕过 IP 过滤和 HTTP 认证 transfer.sh 从命令行轻松快速地共享文件。该代码包含服务器和创建您自己实例所需的一切。 Transfer.sh 目前支持 s3（Amazon S3）、gdrive（Google Drive）、storj（Storj）提供商以及本地文件系统（local）。 免责声明 @stefanbenten 恰好是这个仓库的维护者，同时也在仓库中托管了一个知名的公共软件安装实例。 这两个角色是无关的，本仓库不是用来处理任何公共安装实例的请求和问题的。...

Harmonic

Harmonic Suite Comienzo de un conjunto de herramientas linux para gestionar e interactuar con reverse shells el código todavía está en un estado rápido y sucio, con poco manejo de excepciones. Con una fuerte inspiración en la filosofía UNIX, la idea básica es tener un daemon para manejar endpoint...

k8scout

k8scout Beta — Un motor de rutas de ataque de Kubernetes en un solo binario para evaluaciones de seguridad autorizadas. Colóquelo en un pod comprometido, ejecútelo y obtenga un mapa de cada ruta de escalada realista: desde su punto de apoyo actual hasta administrador del clúster, acceso a nodos,...

recog

Recog: A Recognition Framework Recog is a framework for identifying products, services, operating systems, and hardware by matching fingerprints against data returned from various network probes. Recog makes it simple to extract useful information from web server banners, snmp system description...