CVE-2026-101324

The Fluent Forms plugin for WordPress (versions

CVE-2026-104826

CVE-2026-104826 - Traversée de chemin vers RCE dans DropzoneFileExplorer Le gestionnaire d'upload reprenable par morceaux fait confiance au fileName fourni par le client jusqu'à fopen. Fournissez-lui ../../ et vous écrivez en dehors de votre dossier autorisé, hors de la racine de stockage, dans l...

dcsgonefirm

dcsgonefirm Notes As this repo is still being worked on, some things in this Readme are marked with 'Dev:'. Feel free to change this if needed. Building this You need ESP-IDF, any modern version should work. Dev: Change this if you require a more specific version Command-line: idf.py set-target...

scoringengine

Scoring Engine Scoring Engine is an open-source platform for running Red/White/Blue team cybersecurity competitions. It automates service checks each round and provides a web-based scoreboard and configuration interface. Features Automated scheduling and execution of service checks Distributed...

CVE-2026-98320

A flaw was found in the Linux kernel's netfilter subsystem. In the flowtable component, connection tracking reference counts are prematurely released before flow entries are fully removed from memory. An attacker could exploit this timing issue during network flow processing, triggering a...

C0deVari4nt

C0deVari4nt Description C0deVari4nt is a variant analysis and visualisation tool that inspects codebases for similar vulnerabilities. It leverages CodeQL, a semantic code analysis engine, to query code based on user-controlled CodeQL query templates and passes the results to our client interface...

Mi8E5-Unlocker-by-CVE-2026-43499

Mi 8e5 잠금 해제 툴킷 Mi 8e5 시리즈 기기를 위한 자동 부트로더 잠금 해제 도우미, CVE-2026-43499 구현. 이것은 @Kernix의 Windows 전용 원본 릴리스를 영어로 번역하고 macOS/Linux로 포팅한 포크입니다. 원본 저장소: https://github.com/Linuxoid-cn/Mi8E5-Unlocker-by-CVE-2026-43499 @joehquak이가 유지 관리하는 포크 원작자: @Kernix 원본 연락처: [email protected] / Telegram: @CValmont...

ayaFlow

ayaFlow ayaFlow is a Rust + eBPF network traffic analyzer built with Aya. It runs one agent per Linux node, attaches a TC classifier at ingress and egress, and exposes live traffic data, historical SQLite-backed history, and Prometheus metrics. What It Does Captures IPv4, IPv6, TCP, and UDP traff...

exphub

Notice In the end, I still felt that having separate scripts for each vulnerability was very inconvenient, so I integrated all poc and exp scripts into one, enabling one-click scanning + exploitation. Since I've been working on integration recently, Exphub has not been updated for a long time. Th...

My-CVEs

A list of vulnerabilities I found. Some vulnerabilities come with deep technical writeups, exploits or even fuzzing session walkthroughs. Some vulnerabilities don't have CVEs because maintainers ghosted me, or because a maintainer didn't agree it's a security bug, I decided to release those as...

Owasp-top-10-k8s-2025

OWASP Kubernetes Top 10 2025, hands-on A capture-the-flag built on the OWASP Kubernetes Top 10 — 2025. You've been hired to red-team NimbusMart , a fictional e-commerce company whose cluster grew faster than its security. Ten challenges, one per OWASP risk plus a bonus — exploit each weakness,...

pwn2own2020

اختراق نواة macOS عبر Safari من خلال ربط ست ثغرات أمنية نظرة عامة يحتوي هذا المستودع على تفاصيل الاستغلال والتقنية لـإرسالنا الفائز في Pwn2Own 2020 الذي يستهدف Apple Safari مع تصعيد صلاحيات النواة لنظام macOS 10.15.3. لمزيد من المعلومات، يمكنك أيضًا الاطلاع على شرائح Blackhat USA 2020 الخاصة بنا...

kasld

KASLD reconstitue la disposition de la mémoire virtuelle et physique du noyau Linux — principalement la base du texte du noyau — depuis un processus local. Ce qu'il peut reconstituer dépend du point de vue de ce processus : ses privilèges et capacités, la configuration du système et tout...

run-gemini-cli

run-gemini-cli Overview run-gemini-cli is a GitHub Action that integrates Gemini into your development workflow via the Gemini CLI. It acts both as an autonomous agent for critical routine coding tasks, and an on-demand collaborator you can quickly delegate work to. Use it to perform GitHub pull...

vue-template-compiler-patched

vue-template-compiler-patched A security-patched version of vue-template-compiler to fix the prototype pollution vulnerability CVE-2024-6783 and the ReDoS vulnerability CVE-2024-9506. Based on [email protected]. Development and issues live in vue-patched. Related If you use the Vue full buil...

attack-surface-framework

Attack Surface Framework Overview ASF aims to protect organizations acting as an attack surface watchdog, provided an “Object” which might be a: Domain, IP address or CIDR Internal or External, ASF will discover assets/subdomains, enumerate their ports and services, track deltas and serve as a...

wardn

wardn A credential firewall for AI agents. The headline claim is structural, not policy: agents receive placeholder tokens, never real API keys. The real key crosses only one network seam — inside the wardn proxy, on its way to the upstream API — and is stripped from responses before they reach t...

lsarelayx

lsarelayx Introduction lsarelayx is system wide NTLM relay tool designed to relay incoming NTLM based authentication to the host it is running on. lsarelayx will relay any incoming authentication request which includes SMB. Since lsarelayx hooks into existing application authentication flows, the...

CVE-2026-58635-PoC

CVE-2026-58635: Windows Narrator Braille Local Privilege Escalation Proof of concept for CVE-2026-58635 , a command-injection vulnerability in Windows Narrator Braille. A local authenticated user can abuse a writable BrlAPI parameter to make the privileged BRLTTY service execute an arbitrary...

DECAF

DECAF DECAF short for Dynamic Executable Code Analysis Framework is a binary analysis platform based on QEMU. DECAF++ DECAF++, the new version of DECAF, taint analysis is around 2X faster making it the fastest, to the best of our knowledge, whole-system dynamic taint analysis framework. This...