Short editorial updates from published cybersecurity tools.
blacksnufkin/axhunterPoCs for Wellbia XIGNCODE3 anti-cheat xhunter driver family - xhunter1.sys v2023.12.7.78 and xhunter2.sys v2026.6.1.192 (CVE-2026-15430,…
m1kb0k/cve-2022-25012-dvr4-weak-password-encryptionDecrypts weak encrypted passwords from Argus Surveillance DVR systems via CVE-2022-25012, reconstructing plaintext credentials from DVRParams.ini…
abdugafforov-bobur/cve-2026-67620-pocCVE-2026-67620 - Flowise SSRF via incomplete cloud-metadata deny-list (Oracle OCI 192.0.0.192 + Alibaba 100.100.100.200 bypass the DEFAULT_DENY_LIST)
themalwareguardian/cve-2026-25250Analysis and exploit for CVE-2026-25250, a Secure Boot bypass in Horizon DataSys Reboot Restore where shdloader.efi loads Shield.efi without…
themalwareguardian/cve-2025-4275Analysis and exploitation of CVE-2025-4275 (Hydr0ph0bia), a Secure Boot trust-chain weakness where firmware variables are used to introduce…
themalwareguardian/cve-2025-3052Research on CVE-2025-3052, an Insyde firmware vulnerability that exposes an arbitrary write primitive capable of modifying security-critical pointers.
xiaoqimikko/pac4j-checkOffline scanner for CVE-2026-29000 (CVSS 10.0) in org.pac4j:pac4j-jwt. Inspects jars/fat-jars directly, so it works where mvn dependency:tree cannot.…
bohops/ultimatewdacbypasslistA centralized resource for previously documented WDAC bypass techniques
sn0x-sharma/cve-2026-18718Found a 0-Day in Ghidra: Shared Project File Became a Code Execution Vector
cellebrite-labs/ida_kcppAn IDAPython module for enhancing c++ support on top of ida_kernelcache
jasonbernier/cve-2026-39987Simple POC for CVE-2026-39987
far00t01/cve-2026-59941Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps
