Exploits

Security Advisory: HTTP Header Injection via Unvalidated CR and LF in Header Values (tiny_http)

Security Advisory: Remote Denial of Service via Reachable Assertion in URL Prefix Handling (rouille)

Security Advisory: HTTP Response Splitting via Unvalidated Response Header Values (rouille)

Security Advisory: HTTP Request Smuggling via Transfer-Encoding Desynchronization (rouille)

Security Advisory: HTTP Request Smuggling Enables Front-End Access Control Bypass (rouille)

Critical authentication bypass exploit for cPanel/WHM CVE-2026-41940. Leverages CRLF injection in cpsrvd daemon to gain root WHM access without credentials. Includes version detection, verbose logging, proxy support, JSON reporting, and post-exploitation account enumeration. For authorized security testing only.

Security Advisory: Unauthenticated Memory Leak Leads To Memory Exhaustion (TinyWeb)

Security Advisory: Unauthenticated NULL Pointer Dereference Crashes the Server (TinyWeb)

Security Advisory: Unauthenticated Path Traversal Allows Arbitrary File Read (TinyWeb)

Security Advisory: Insufficient Access Controls Allow for Unauthorized File Downloads (Let's Chat)

Security Advisory: Insufficient Access Controls Allow for Unauthorized Room Deletion (Let's Chat)

Security Advisory: Unchecked Room Lookup Leads to Server Crash (Let's Chat)

基于内核漏洞的本地提权适配，集成嵌入式 KernelSU 。编译生成`preload.so`；触发成功后会以 `late-load` 模式(越狱模式)启动 KernelSU。支持(xbl_config.img / vendor_boot.img) + boot.img 生成target.h Local privilege escalation adaptation based on a kernel vulnerability, integrating embedded KernelSU. Compiles and generates `preload.so`; , KernelSU will be started in `late-load` mode

A C-based Linux security utility for detecting, safely verifying (Proof of Concept), and mitigating CVE-2026-64600 (RefluXFS). It provides kernel vulnerability assessment, XFS reflink detection, a safe race-condition PoC, and layered mitigation using SystemTap and XFS hardening.

CVE-2026-43499 research port for Galaxy S24 Ultra SM-S928U1 DZF2 (in progress)

Adding --insecure to skip ssl

Exein Pulsar CVE-2026-52504

SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter