Tools

getkern/kern

Rootless container runtime and sandbox that launches kernel-enforced OCI images in milliseconds with no daemon, featuring resource profiles, seccomp…

uziii2208/cve-2026-88899

Knowns 0.30.0: Unauthenticated Header Injection Grants AI Agent Unrestricted Access to Host Filesystem

openvpn/openvpn

Secure tunneling daemon implementing VPN protocols with TLS encryption, certificate authentication, and routing/firewall configuration for private…

peterlinccl/vulnerability-dlink-cve-2025-14659

Static analysis (Ghidra) and custom packet-crafting (Scapy) demonstrating a root-level DHCP command injection vulnerability (CVE-2025-14659) in…

santhreal/keyhog

Open-source secret scanner in Rust

fail2ban/fail2ban

Daemon to ban hosts that cause multiple authentication errors

nlnetlabs/nsd

High-performance authoritative DNS server with DNSSEC support, delivering RFC-compliant name resolution for secure and reliable production…

radicle-dev/heartwood

Peer-to-peer code collaboration and publishing stack with a secure, decentralized protocol, CLI tool, and network daemon for sovereign code forges.

thinkst/opencanary

Low-resource honeypot that emulates common network services to detect post-breach attacker activity, with extensible protocol modules and…

andrd3v/cve-2026-43783

Proof-of-concept and technical writeup for CVE-2026-43783, a macOS local privilege escalation via DesktopServicesHelper XPC arbitrary chown to gain…

jun41ds2709/vsftpd-2.3.4-exploit

Python exploit for the vsFTPd 2.3.4 backdoor (CVE-2011-2523).

cisco-talos/clamav

Open-source antivirus engine for detecting trojans, viruses, and malware via signature-based scanning; includes a daemon, on-demand CLI, and…

soralis0912/cve-2026-43499-pmg110-root

Android LPE exploit for CVE-2026-43499 targeting OPPO PMG110 (kernel 6.6). Uses futex PI UAF to gain root and install a su daemon via LD_PRELOAD.

cerberusmrxi/cpanel-whm-cve-2026-41940-auth-bypass-exploit

Critical authentication bypass exploit for cPanel/WHM CVE-2026-41940. Leverages CRLF injection in cpsrvd daemon to gain root WHM access without…

cduram/notcve-2026-0010

Unauthenticated IPC Local Privilege Escalation to SYSTEM via Debauchee Barrier Daemon TCP Port 24801

danthegoodman1/netfence

Like Envoy xDS, but for eBPF filters

oguz-kagan-akar/cve-2026-41940-analysis

Technical analysis of the cPanel/WHM auth bypass