roninforge-hono

roninforge-hono Cursor plugin for Hono v4 TypeScript edge web framework + TypeScript. Pinned to hono ^4.12.19, @hono/zod-validator ^0.8.0, @hono/zod-openapi ^1.4.0 peer zod ^4.x, @hono/node-server ^2.0.3 Node 20+. Teaches the v4 APIs that LLMs trained on pre-2024 data do not know c.json always...

reverse-SynthID

Reverse-Engineering SynthID Discovering, detecting, and surgically removing Google's AI watermark through spectral analysis Visit us on PitchHut This fork adds a drag and drop desktop app for the V3 bypass, no command line needed after setup. See gui/README.md for setup and usage. What the...

CVE-2018-3639-specter-v4-

CVE-2018-3639-specter-v4 spectre v4 : Speculative Store Bypass CVE-2018-3639 proof of concept for Linux build: gcc spectre-v4.cpp -o spectre run: ./spectre result: --------attack-------- low than threshold:155 low than threshold:144 low than threshold:133 low than threshold:0 low than threshold:1...

Apache-Struts-v4

Apache-Struts-v4 The script contains 5 distinct vulnerabilities that exploit RCE vulnerabilities in Apache Struts. For now it only has the ability to create PHP shells. Added CVEs CVE ID| DESCRIPTION ---|--- CVE-2013-2251| Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute...

MaNGOSWebV4 < 4.0.8 - Cross-Site Scripting

paintballrefjosh/MaNGOSWebV4 4.0.8 contains a reflected XSS caused by unsanitized input in install/index.php step parameter, letting attackers execute arbitrary scripts in the victim's browser, exploit requires victim to visit a maliciously crafted URL id: CVE-2017-6478 info: name: MaNGOSWebV4...

cve-2025-5915

CVE-2025-5915 — libarchive RAR v4 heap over-read with on-device iOS 18.5 proof A controlled heap over-read / memory-disclosure in libarchive's RAR v4 filter path copyfromlzsswindow. This repo reproduces it end to end: local ASan, a from-scratch RAR v4 encoder that dials the leak size, and an...

CVE-2026-85706

CVE-2026-85706 GitLab unauthenticated arbitrary file read ★ CVE-2026-85706 GitLab unauthenticated arbitrary file read PoC ★ https://github.com/user-attachments/assets/026749ec-04e9-4dd5-9453-cb7c1f6e823d Overview CVE-2026-85706 is an unauthenticated arbitrary file read in GitLab CE/EE CVSS 10.0,...

EUVD-2026-123811

An internal security review identified a development regression from ThinkSystem v4 XClarity Controller 3 XCC3 versions 2.51 IHX432Y to 2.56 IHX436K which re-introduces the default OpenBMC root password upon performing an XCC Reset to Default operation. An attacker can gain access to enabled...

CVE-2026-81936

An internal security review identified a development regression from ThinkSystem v4 XClarity Controller 3 XCC3 versions 2.51 IHX432Y to 2.56 IHX436K which re-introduces the default OpenBMC root password upon performing an XCC Reset to Default operation. An attacker can gain access to enabled...

CVE-2026-81936 Default OpenBMC Root Credential Reintroduced After Reset to Defaults in ThinkSystem v4 XCC3

An internal security review identified a development regression from ThinkSystem v4 XClarity Controller 3 XCC3 versions 2.51 IHX432Y to 2.56 IHX436K which re-introduces the default OpenBMC root password upon performing an XCC Reset to Default operation. An attacker can gain access to enabled...

CVE-2026-81936

ThinkSystem v4 XClarity Controller 3 (XCC3) versions (2.51) IHX432Y through (2.56) IHX436K are affected by a development regression that re-introduces the default OpenBMC root password when a "Reset to Default" operation is performed. This vulnerability allows an attacker to gain access to enable...

hookmate

hookmate Experimental solidity utilities, libraries, and components for Uniswap v4 Hook development Installation requiresfoundry forge install uniswapfoundation/hookmate Documentation Libraries PoolStateLibrary.sol ⚠️ Not production-ready. Will have breaking changes in the future ⚠️ until v4-core...

Exploit for Integer Overflow or Wraparound in Gitlab

GitLab-Ghost - CVE-2026-110264 !CVEhttps://img.shields.i...

ROOT-APP-GOBINARY-GHSA-F48P-C9V4-H7XV GHSA-f48p-c9v4-h7xv in github.com/labstack/echo/v4 - Patched by Root

Root has patched GHSA-f48p-c9v4-h7xv in the github.com/labstack/echo/v4 package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-GHSA-9969-6676-49H5 GHSA-9969-6676-49h5 in github.com/labstack/echo/v4 - Patched by Root

Root has patched GHSA-9969-6676-49h5 in the github.com/labstack/echo/v4 package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-GHSA-H7WR-284F-5QVC GHSA-h7wr-284f-5qvc in github.com/labstack/echo/v4 - Patched by Root

Root has patched GHSA-h7wr-284f-5qvc in the github.com/labstack/echo/v4 package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-GHSA-CXF3-9H37-7RR8 GHSA-cxf3-9h37-7rr8 in github.com/labstack/echo/v4 - Patched by Root

Root has patched GHSA-cxf3-9h37-7rr8 in the github.com/labstack/echo/v4 package for Root:Go. Multiple fixed versions available...

PT-2026-145481

Name of the Vulnerable Software and Affected Versions ThinkSystem v4 XClarity Controller 3 XCC3 versions 2.51 through 2.56 Description A development regression occurs when performing an XCC Reset to Default operation, which re-introduces the default OpenBMC root password. This allows an attacker ...

Advisory ROSA-SA-2026-3342

Software: Kernel 6.18.56 OS: ROSA-CHROME Affected versions: = kernel-6.18.56 Affected versions: kernel-6.18.56 CVE-ID: CVE-2026-98432 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A vulnerability in the implementation of the IPv4 TCP V4 SYN receive socket function exists in the Linux kernel. It involves...

Advisory ROSA-SA-2026-3341

Software: Kernel 6.12.113 OS: ROSA-CHROME Affected versions: = kernel-6.12.113 Affected versions: kernel-6.12.113 CVE-ID: CVE-2026-98432 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: The vulnerability in the implementation of the IPv4 TCP V4 SYN receive socket function is related to improper memory...