POC-CVE-2026-65971

CVE-2026-65971 — Inyección SQL en Livewire PowerGrid mediante sortDirection Prueba de concepto e informe técnico completo para CVE-2026-65971 / GHSA-7fgc-3h6c-698r , una inyección SQL en power-components/livewire-powergrid accesible a través de la propiedad pública sortDirection de Livewire. |...

prowler v5.41.0

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

Cisco-Unified-Communications-Manager-Server-Side-Forgery-Request-Vulnerability-CVE-2026-20230

CVE-2026-20230 Cisco Unified Communications Manager SSRF Arbitrary File Write to RCE PoC Derivation Process and Reflection Scope: This content is intended solely for local test environments, authorized reproduction environments, vulnerability verification, and protection rule analysis. Do not use...

CVE-2026-64640

CVE-2026-64640 — Apache Polaris: credential vending before location validation in register A self-contained, one-command reproducer for CVE-2026-64640 : the Iceberg REST register endpoints in Apache Polaris mint cloud storage credentials for a caller-supplied path and read that path server-side...

hate_crack v2.36.1

root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...

CVE-2026-47423-dompurify-xss-detector

DOMPurify 的重新克隆逻辑缺陷。 该工具不依赖容易被剥离的源码注释或版本变量，而是通过逻辑指纹识别技术分析压缩的生产环境 JavaScript 包，识别未修补的允许标签配置。 漏洞概要 在 DOMPurify 版本 3.4.4 及之前， 元素默认被允许。这引入了一个逻辑缺陷：Chromium/WebKit 浏览器会在 DOMPurify 完成消毒处理后，刷新并重新克隆 子树，导致当负载被注入实时 DOM 时，发生绝对 XSS 绕过。 功能特性 框架无关（适用于 React、Vue、Angular 或原生 JS 包结构） 从根路径自动解析动态 JS 资源...

thm-ice-icecast-rce-privesc

TryHackMe — Ice: Icecast 2.0.1 RCE y escalada de privilegios en Windows Plataforma: TryHackMe Sistema operativo objetivo: Windows 7 / Windows Server 2008 R2 Dificultad: Fácil Categoría: Desbordamiento de búfer RCE, escalada local de privilegios Resumen Este informe documenta el compromiso complet...

LavaDome

LavaDome 🌋️ 一个新的LavaMoat 工具，用于对 DOM 节点进行安全的 E ncapsulation（封装） ⚠️ 实验性 WIP - 使用风险自负（了解更多） 演示 试试LavaDome - 访问演示应用，打开控制台，尽你所能从 LavaDome 实例中窃取秘密（报告你的成功） 预览 （点击展开） 动机 在当今的 Web 标准下，还没有一种成熟的方法能够以安全的方式 选择性地隔离 DOM 子树。换句话说，如果各方共享同一个 JavaScript 执行环境，我们无法通过向某些方授予访问权限、同时阻止其他方访问，来控制对 DOM 各部分的访问。...

radar

Radar Radar is a small but efficient network scanner written in Rust heavily inspired by masscan. These are the main features: Userspace TCP, UDP, DHCP and ARP implementations, thanks to pnet Being asynchronous Randomized IP/ports scanning with no pre-allocation/shuffling Rate limiting Monitor mo...

WHS4_CVE-2021-4034

CVE-2021-4034 PwnKit - Local Privilege Escalation PoC 🔗 Original Project : berdav/CVE-2021-4034 This project is an educational analysis and modification based on the original. MIT License Compliant | White Hat School Training Task 📋 Overview CVE-2021-4034 is a local privilege escalation...

CVE-2026-76925

A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy function. An attacker c...

CVE-2024-51996

⚠️ CVE-2024-51996 - Symfony RememberMe Auth Bypass Exploit Exploit for the critical vulnerability CVE-2024-51996 , which allows authentication bypass in Symfony applications that use the Remember Me mechanism. 🧠 Impact : Impersonation of privileged users such as admin without the need for valid...

WindowsProtocolTestSuites v4.26.9.0

Windows Protocol Test Suites Windows Protocol Test Suites provide interoperability testing against the implementation of Windows open specifications including File Services, Identity Management, Remote Desktop and etc. Originally developed for in-house testing of the Microsoft Open Specifications...

Project-01-Cybersecurity-Home-Lab

Project 1 — Cybersecurity Home Lab Project Overview This...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation for Multiplatforms

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, Version 8 used by IBM Tivoli System Automation for Multiplatforms. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the...

CVE-2026-85408

A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file /enc-fwk-data/api/v3/conversations//events of the component Conversation Handler. This manipulation of the argument createdBy causes dynamically-determined object attributes. The attack ...

CVE-2026-85409

A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service. Such manipulation of the argument filename leads to path traversal. The attack may be performed from remote. The...

CVE-2026-85407

A vulnerability was found in Eleveo Quality Management 9.7.0. This issue affects some unknown processing of the file /enc-fwk-data/api/v3/conversations//events of the component Conversation Handler. The manipulation of the argument labels results in denial of service. The attack can be executed...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

LSB-Steganography

LSB-Steganography Python program based on stegonographical methods to hide files in images using the Least Significant Bit technique. I used the most basic method which is the least significant bit. A colour pixel is composed of red, green and blue, encoded on one byte. The idea is to store...