Updated2 months ago
CVE-2026-16723 — Updated!
1xpwn/cve-2026-16723A critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83.
Payload GenerationExploitationWeb Application Exploitation+1
Updates
Short editorial updates from published cybersecurity tools.
1xpwn/cve-2026-16723
Updated2 months ago
kcmd — Updated!
aseemjakhar/kcmdKankun Smart Socket Hijacker and Sniffer. The kankun smart socket and its mobile app use a hardcoded AES 256 bit key to encrypt and decrypt…
Packet Sniffing & AnalysisIoT SecurityPassword Attacks+4
Updated2 months ago
CICD-Goat-Vapt-Writeup — Updated!
dheeraj-jayaswal/cicd-goat-vapt-writeupFull VAPT writeup of OWASP CICD-Goat — 9 CTFd flags captured, 4 critical + 5 high findings (incl. CVE-2024-23897) mapped to the OWASP Top 10 CI/CD…
ReconnaissanceVulnerability AnalysisExploitation+5
Updated2 months ago
CVE-2026-8347 — Updated!
aj2108/cve-2026-8347CVE-2026-8347 is an Insecure Direct Object Reference (IDOR) combined with a wrong authorization level vulnerability in Concrete CMS versions 9.5.0…
Authentication & AuthorizationVulnerability AnalysisWeb Application Exploitation+1
Updated2 months ago
QuestStack — Updated!
starseed12345/queststackUnlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.
Android SecurityEmbedded Systems SecurityPrivilege Escalation+5
Updated2 months ago
CVE-2026-34220 — Updated!
eqstlab/cve-2026-34220SQL Injection vulnerability in MikroORM
Vulnerability AnalysisExploitationWeb Application Exploitation+3
Updated2 months ago
VCG — Updated!
nccgroup/vcgVisualCodeGrepper - Code security scanning tool.
Defensive ToolsStatic Code Analysis (SAST)Vulnerability Analysis+4
Updated2 months ago
jmxbf — Updated!
nccgroup/jmxbfA brute force program to test weak accounts configured to access a JMX Registry
Password AttacksPenetration TestingAuthentication
Updated2 months ago
ipmi — Updated!
zenfish/ipmiIPMI stuff from DARPA work
Password CrackingReconnaissanceNetwork Mapping+7
Updated2 months ago
CVE-2026-41940 — Updated!
zildanz/cve-2026-41940Mass authentication bypass exploit for CVE-2026-41940 with single-target and batch scanning modes. Automates password-based bypass testing across…
Vulnerability AnalysisExploitationWeb Application Exploitation+3
Updated2 months ago
CVE-2026-30951 — Updated!
eqstlab/cve-2026-30951Sequelize JSON Cast SQL Injection
Static AnalysisVulnerability AnalysisCode Analysis+3
Updated2 months ago
CVE-2026-0603 — Updated!
eqstlab/cve-2026-0603Hibernate ORM Second-Order SQL Injection
Vulnerability AnalysisExploitationWeb Application Exploitation+3