Updated11 days ago
ghostlock — Updated!
suominen/ghostlockTracking GhostLock (CVE-2026-43499), the rtmutex/futex stack use-after-free
Vulnerability AnalysisThreat IntelligenceCurated Resources
Updates
Short editorial updates from published cybersecurity tools.
suominen/ghostlock
Updated11 days ago
Incident-Analysis-Response-Check-Point-Security-Gateway-CVE-2024-24919-LFI-Exploitation — Updated!
zedocun/incident-analysis-response-check-point-security-gateway-cve-2024-24919-lfi-exploitationIncident Response (IR) case study documenting the investigation of an exploitation attempt targeting CVE-2024-24919 (Arbitrary File Read) on a Check…
Vulnerability AnalysisNetwork ForensicsWeb Security+7
Updated11 days ago
CVE-2026-16723 — Updated!
1xpwn/cve-2026-16723A critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83.
Payload GenerationExploitationWeb Application Exploitation+1
Updated11 days ago
kcmd — Updated!
aseemjakhar/kcmdKankun Smart Socket Hijacker and Sniffer. The kankun smart socket and its mobile app use a hardcoded AES 256 bit key to encrypt and decrypt…
Packet Sniffing & AnalysisIoT SecurityPassword Attacks+4
Updated11 days ago
CICD-Goat-Vapt-Writeup — Updated!
dheeraj-jayaswal/cicd-goat-vapt-writeupFull VAPT writeup of OWASP CICD-Goat — 9 CTFd flags captured, 4 critical + 5 high findings (incl. CVE-2024-23897) mapped to the OWASP Top 10 CI/CD…
ReconnaissanceVulnerability AnalysisExploitation+5
Updated11 days ago
CVE-2026-8347 — Updated!
aj2108/cve-2026-8347CVE-2026-8347 is an Insecure Direct Object Reference (IDOR) combined with a wrong authorization level vulnerability in Concrete CMS versions 9.5.0…
Authentication & AuthorizationVulnerability AnalysisWeb Application Exploitation+1
Updated11 days ago
QuestStack — Updated!
starseed12345/queststackUnlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.
Android SecurityEmbedded Systems SecurityPrivilege Escalation+5
Updated11 days ago
CVE-2026-34220 — Updated!
eqstlab/cve-2026-34220SQL Injection vulnerability in MikroORM
Vulnerability AnalysisExploitationWeb Application Exploitation+3
Updated11 days ago
VCG — Updated!
nccgroup/vcgVisualCodeGrepper - Code security scanning tool.
Defensive ToolsStatic Code Analysis (SAST)Vulnerability Analysis+4
Updated11 days ago
jmxbf — Updated!
nccgroup/jmxbfA brute force program to test weak accounts configured to access a JMX Registry
Password AttacksPenetration TestingAuthentication
Updated11 days ago
ipmi — Updated!
zenfish/ipmiIPMI stuff from DARPA work
Password CrackingReconnaissanceNetwork Mapping+7
Updated11 days ago
Undocumented-RCE-in-PLY — Updated!
bohmiiidd/undocumented-rce-in-plyUndocumented RCE in PLY via `picklefile` Parameter
Payload GenerationVulnerability AnalysisExploitation+2