[ full github wire // all 55 repo events in this week // 7d ]
The repo wire this week is dominated by inert exploit oracles and negative-day tooling: xssdoctor shipped both a loopback protocol-v2 harness proving git clients swallow an unsafe unborn HEAD symref and a partial-archive fixture tied to CVE-2024-32004, while vitorfhc's videt formalizes the hunt for silent security patches landing before CVEs. Meanwhile renniepak fixed CSPBypass's matcher for scheme-relative directives and multiple headers, and Google's gwpsan untangled seccomp and CFI coexistence -- the exact machinery you'd want when grooming production binaries for the race-condition bugs filling this week's advisories.
xssdoctor/git-cve-2026-113408-poc -- Python harness spinning a loopback-only smart HTTP fixture that feeds a git client an unsafe unborn HEAD symref over protocol-v2, demonstrating branch-update resolution escaping the .git directory (symref -> path escape outside .git). Clean, inert oracle you can run locally in five minutes.
xssdoctor/muse-git-local-partial-archive-20261113 -- Inert local partial-repo fixture tied to CVE-2024-32004; its config carries a promisor upload-pack command that writes a fixed marker only, confirming code execution without touching the network. Textbook controlled reproduction of the partial-clone config-injection class.
vitorfhc/videt -- Python watcher that flags silent security patches in major OSS repos during the negative-day window between commit and CVE assignment, then checks whether the fix is actually reachable. Point it at your dependency tree and let it diff the quiet fixes for you.
renniepak/CSPBypass -- CSPBypass.com's latest push fixes the CSP matcher to handle scheme-relative URLs and multiple directives -- directly relevant to Kettle's 'Blind trust' research, since a broken matcher means missed allowlist gadgets on real prod policies.
google/gwpsan -- Google's sampling-based sanitizer for production binaries restructured its seccomp incompatibility check and exempted GWPSan interceptors from CFI so both coexist in one build -- the tooling you want running when you chase heap races like the mod_http2 and MongoDB bugs in this week's briefs.
OSV.dev is an open vulnerability DB/triage service; recent commits lock Cloud Run to a least-privilege service account, fix RPM version ordering for TuxCare/CentOS/OracleLinux/RHEL, and repair goose pooled-SQL handling.
Query-param PoC server: spins up shareable HTML/JS exploit pages with custom response headers baked into the URL, handy for header-gated XSS proof. Latest commits add nested autocomplete in SVG/XML plus a scrolling fix on small screens.
videt: watches major OSS repos for silent security patches landing before a CVE is assigned, then checks whether the fix is actually reachable/exploitable. Targets the negative-day window between commit and advisory.
Fresh HTML repo scaffolding a bun-built static dist/index.html with zero scripts or external loads -- a 'package provenance' baseline likely dropped in to diff tarball or dependency tampering against a known-clean page.
Sibling scaffolding repo for 'tarball dependency control': bun install -> bun run build -> inert static HTML, useful as a pristine reference to diff dep-tree snapshot changes.
'Dependency snapshot control' reference build -- same bun-to-static-HTML pattern, a clean baseline for spotting TOCTOU or snapshot drift between install and postinstall steps.
OSV-format corpus of OSS-Fuzz-disclosed vulnerabilities, useful for vuln matching and fuzzing triage; this push refreshes the OSV-2024-719, OSV-2024-695 and OSV-2024-659 records.
Static-site control for Muse repository import: a vendor/leaf Git submodule from the same account supplies one constant rendered as text, with no hooks, symlinks, binaries or network. Tests whether import recurses into submodules.
Non-executable leaf paired with the submodule parent: one fixed public marker plus a JS module exporting the same literal, no package metadata, hooks or network behavior. Confirms submodule fetch without execution.
Google's sampling-based sanitizer framework for production binaries; commits restructure the seccomp incompatibility check, disable arm64 breakpoints when ignored, and exempt GWPSan interceptors from CFI so both can be built together.
Owned-account test fixture with a minimal nested repo-shaped directory at vendor/lib, no scripts, symlinks, submodules or network behavior. Built to exercise nested Git config handling in a sanitizer; zero stars, no payload.
gVisor is Google's application kernel for containers, providing user-space syscall interception to sandbox untrusted workloads and reduce container escape risk; recent commits add cgroup fixes, filestore cleanup, and confine the sandbox to a device cgroup.
oss-fuzz-vulns publishes OSS-Fuzz-discovered vulnerabilities in OSV format, giving researchers a machine-readable feed of fuzzing findings to track and correlate; the update imports new OSS-Fuzz entries and refreshes several OSV advisories.
SecLists is the security tester's companion: a consolidated collection of usernames, passwords, fuzzing payloads, web shells, and sensitive-data patterns used across assessments; the latest push is an automated refresh of the Trickest wordlists via GitHub Actions.
SecLists is the widely used security tester's companion repo: a curated collection of wordlists for usernames, passwords, URLs, fuzzing payloads, web shells, and sensitive data patterns; the latest commits are automated GitHub Action updates refreshing the Trickest-derived wordlists.
gVisor is Google's application kernel for containers, providing a user-space sandboxed Linux kernel to isolate untrusted workloads; recent commits fix missing filestore cleanup and, notably, confine the sandbox to a device cgroup to tighten container escape surface.
Goonami is a Go network security scanner with an extensible plugin system for high-confidence, high-severity vulnerability detection. Recent changes drop legacy binproto signatures/hash registry and move the webidentity fingerprinter to a declarative engine.
Caido's rswot, a Rust repo described only as student validation against a crowdsourced list; v0.1.141 tag with no changelog detail -- thin on info, clone and read the source yourself.
caido/documentation is the official user documentation repo for the Caido web security testing proxy; recent commits document the new Capture menu, HTTP History highlight colors, and add a download link in the top nav.
vdet is a Python tool that monitors major open-source projects for silent security patches, spotting vulnerability fixes before a CVE is assigned and checking whether they're actually exploitable. Latest push updates the README describing this "negative-day" detection window.
caido/sdk-js is the monorepo housing Caido's JavaScript SDKs and related tooling, used by developers building extensions for the Caido web security testing platform. The recent push prepares coupled SDK packages for the v0.59.1 release.
Project Zero repo catalogs 0-days exploited in the wild; recent commits only bump activesupport 7.2.2.1->7.2.3.1, nokogiri 1.18.8->1.19.4, and json 2.20.0->2.21.2.
caido/sdk-js is the monorepo for Caido's JS plugin SDK and tooling -- the interface for writing extensions against the proxy; v0.59.1 is a routine release, no exploit-relevant surface noted.
SecLists is the widely used collection of security testing wordlists -- usernames, passwords, fuzzing payloads, web shells and more -- used across pentests and bug bounties. The latest push auto-updates the Trickest-derived wordlists via GitHub Action.
google/security-research is the advisory + PoC drop for bugs found in non-Google code; new commits land a CVE-2026-98164 kvmCTF host-crash exploit plus kernelCTF writeups for CVE-2026-80521_lts and CVE-2025-40214_lts_cos.
A new Python PoC harness for CVE-2026-113408, using a loopback-only smart HTTP fixture to test how a Git client accepts an unsafe unborn HEAD symref from a protocol-v2 server. It demonstrates branch-update resolution escaping the .git directory.
mise-toolshed is a mise backend plugin installing small utility tools that verify exact versions, lockfiles, and minimum release age, refusing installs when downloaded SHA-256 checksums mismatch. The recent push updates these release-verified toolshed commands.
Rust crate caido/rswot checks student accounts against a crowdsourced list for edu-scope recon; v0.1.140 is a tag refresh with no code detail in feed -- diff before use.
An inert local partial-repository fixture for authorized testing of Git's partial-clone behavior, tied to CVE-2024-32004. Its config contains a promisor upload-pack command that only writes a fixed marker, confirming code execution.
An inert fixture containing a tracked file whose name begins with a Git command-line option, used to verify callers insert the -- terminator before passing repository paths to Git. It demonstrates option-injection style path handling bugs.
A controlled recursive-clone parent fixture for testing Git CVE-2025-48384 in an authorized lab, pairing with a submodule that carries a fixed-marker checkout hook. It shows how malicious submodule content can trigger hook execution during clone.
The paired submodule fixture for the CVE-2025-48384 test: an executable file that, if Git wrongly installs it as a checkout hook, writes one fixed marker locally with no network or persistence. It safely demonstrates submodule hook-injection impact.
An inert fixture with a minimal nested repository-shaped directory at vendor/lib, used for sandbox testing of Git nested-configuration handling. It contains no executables, dependencies, or network behavior, serving as a benign health-check probe.
Fabric v1.4.570 adds an AtmoRouter-compatible endpoint adapter to the Go text-workflow framework; useful for swapping backends while keeping command patterns stable.
CSPBypass.com is a tool helping ethical hackers bypass restrictive Content Security Policies and exploit XSS on sites whose CSPs only whitelist certain domains. The latest update fixes the CSP matcher to handle scheme-relative and multiple directives.
caido/rswot v0.1.139 is a Rust student-account checker backed by a crowdsourced list; release tag only, no substantive changelog in feed -- inspect the commit range.
Nexus Shield is a TypeScript plugin for the Nexus GraphQL schema platform that eases building authorization layers and permission rules. The recent push adds a check for missing context and documents that requirement.
JavaScript engine fuzzer; recent work cuts redundant work in BlockReducer.reduceClassDefinition, enables optimized code coverage for some runs, and skips redundant MinimizationPostProcessor execution.
caido/rswot v0.1.138 -- Rust 'student validation' helper keyed off a crowdsourced list; three-star side project from the Caido org, useful only as a reference for their tooling glue.
caido/store is the source repository for the Caido plugin store, the marketplace where researchers browse and install Caido security-testing extensions. Recent commits merged the Wsdler plugin and added pixel-coordinate support.
responder lets researchers quickly build and share HTML/JavaScript proof-of-concept pages with custom headers configured entirely via query parameters. Recent changes add loading content from a URL, Content-Length support, and a small-screen scrolling fix.
caido/formatter new repo -- shared treefmt flake and language formatting rules for Caido projects, pinned in a flake and driven by mise; infra plumbing, not a security tool.
Fabric is a Go CLI/library that wraps a crowd-sourced prompt collection for chained text workflows; v1.4.568 bumps the anthropic-sdk-go dependency to v2.8.0, so anything pinned to older SDK calls needs a re-check.
responder is a JS/HTML PoC hosting rig that rebuilds responses from query parameters, letting you serve custom headers and payloads for XSS/header-injection demos; updates are Svelte UI rework and MIME-type alignment.
SecLists push is just the automated Github Action refresh of the trickest wordlists -- no new list classes, so re-pull if you script fuzzing payloads off the repo rather than a pinned tag.
source: Michael Cote & Darby Hopkins (@google) | role: Guests | published: 2026-11-14 18:51 UTC
[ notes ] OSV.dev is an open vulnerability DB/triage service; recent commits lock Cloud Run to a least-privilege service account, fix RPM version ordering for TuxCare/CentOS/OracleLinux/RHEL, and repair goose pooled-SQL handling.
[ source excerpt ] About google/osv.dev: Open source vulnerability DB and triage service.. Recent commits: chore(infra): migrate oss-vdb-test Cloud Run to least-privilege osv-frontend SA (#6356) | fix: order TuxCare CentOS, CentOS-Stream, OracleLinux and RHEL versions as RPM (#6357) | fix: goose interacting with pooled sql connections (#6361)
[ notes ] Query-param PoC server: spins up shareable HTML/JS exploit pages with custom response headers baked into the URL, handy for header-gated XSS proof. Latest commits add nested autocomplete in SVG/XML plus a scrolling fix on small screens.
[ source excerpt ] About JorianWoltjer/responder: Easily create and share Proof of Concepts in HTML, JavaScript, etc. with custom headers, all via query parameters. Recent commits: Support nested autocomplete in SVG/XML | Fix autocomplete error & add langauge shortcut | Fix scrolling on smaller screens
[ notes ] videt: watches major OSS repos for silent security patches landing before a CVE is assigned, then checks whether the fix is actually reachable/exploitable. Targets the negative-day window between commit and advisory.
[ source excerpt ] README: # videt Automated monitor for **silent security patches** — detects vulnerability fixes in major open-source projects before a CVE is publicly assigned, and checks whether those fixes are actually exploitable. ## What problem does this solve? There's a dangerous window between when a security patch lands in source code and when it gets a CVE number. During this "negative-day" period, the vulnerability is effectively public (anyone can read the diff) but most defenders haven't acted yet. videt closes that gap by alerting you the moment a suspicious commit is detected — and telling you whether the fix is complete or still bypassable. ## How it .... Recent commits: Update vulnerability monitor state | Update vulnerability monitor state | Update vulnerability monitor state
source: Jonathan Dunn (@xssdoctor) | role: Co-Host & Recurring Guest | published: 2026-11-14 15:31 UTC
[ notes ] Tarball status-page scaffold: bun install then build, output is a static scripts-free page. Empty shell for now.
[ source excerpt ] Newly created repository.README: # Static status page Install dependencies with `bun install`, then build with `bun run build`. The result is a static page with no scripts or external resources.
source: Jonathan Dunn (@xssdoctor) | role: Co-Host & Recurring Guest | published: 2026-11-14 15:14 UTC
[ notes ] Fresh HTML repo scaffolding a bun-built static dist/index.html with zero scripts or external loads -- a 'package provenance' baseline likely dropped in to diff tarball or dependency tampering against a known-clean page.
[ source excerpt ] Newly created repository.README: # Package provenance control Install dependencies with `bun install`, then build with `bun run build`. The resulting `dist/index.html` is a static page with no scripts or external loads.
source: Jonathan Dunn (@xssdoctor) | role: Co-Host & Recurring Guest | published: 2026-11-14 15:05 UTC
[ notes ] Sibling scaffolding repo for 'tarball dependency control': bun install -> bun run build -> inert static HTML, useful as a pristine reference to diff dep-tree snapshot changes.
[ source excerpt ] Newly created repository.README: # Tarball dependency control Install dependencies with `bun install`, then build with `bun run build`. The resulting `dist/index.html` is a static page with no scripts or external loads.
source: Jonathan Dunn (@xssdoctor) | role: Co-Host & Recurring Guest | published: 2026-11-14 14:59 UTC
[ notes ] 'Dependency snapshot control' reference build -- same bun-to-static-HTML pattern, a clean baseline for spotting TOCTOU or snapshot drift between install and postinstall steps.
[ source excerpt ] Newly created repository.README: # Dependency snapshot control Install dependencies with `bun install`, then build with `bun run build`. The resulting `dist/index.html` is a static page with no scripts or external loads.
source: Michael Cote & Darby Hopkins (@google) | role: Guests | published: 2026-11-14 14:39 UTC
[ notes ] OSV-format corpus of OSS-Fuzz-disclosed vulnerabilities, useful for vuln matching and fuzzing triage; this push refreshes the OSV-2024-719, OSV-2024-695 and OSV-2024-659 records.
[ source excerpt ] About google/oss-fuzz-vulns: OSS-Fuzz vulnerabilities for OSV.. Recent commits: Update OSV-2024-719 | Update OSV-2024-695 | Update OSV-2024-659
source: Jonathan Dunn (@xssdoctor) | role: Co-Host & Recurring Guest | published: 2026-11-14 14:30 UTC
[ notes ] Static-site control for Muse repository import: a vendor/leaf Git submodule from the same account supplies one constant rendered as text, with no hooks, symlinks, binaries or network. Tests whether import recurses into submodules.
[ source excerpt ] Newly created repository.README: # Benign Muse submodule parent This is a static-site control for Muse repository import. The `vendor/leaf` directory is a normal Git submodule owned by the same researcher account. The page imports one constant from that submodule and renders it as text. There are no install hooks, lifecycle scripts, symlinks, native binaries, external requests, or writes. Expected marker after a recursive materialization: `MUSE_BENIGN_SUBMODULE_LEAF_6f5e92a1`.
source: Jonathan Dunn (@xssdoctor) | role: Co-Host & Recurring Guest | published: 2026-11-14 14:30 UTC
[ notes ] Non-executable leaf paired with the submodule parent: one fixed public marker plus a JS module exporting the same literal, no package metadata, hooks or network behavior. Confirms submodule fetch without execution.
[ source excerpt ] Newly created repository.README: # Benign Muse submodule leaf This repository is a non-executable control for Muse repository-import testing. It contains one fixed public marker and one JavaScript module that exports the same literal string. It has no hooks, package metadata, lifecycle scripts, symlinks, binaries, or network behavior. Marker: `MUSE_BENIGN_SUBMODULE_LEAF_6f5e92a1`
source: Michael Cote & Darby Hopkins (@google) | role: Guests | published: 2026-11-14 14:25 UTC
[ notes ] Google's sampling-based sanitizer framework for production binaries; commits restructure the seccomp incompatibility check, disable arm64 breakpoints when ignored, and exempt GWPSan interceptors from CFI so both can be built together.
[ source excerpt ] About google/gwpsan: GWPSan: Sampling-Based Sanitizer Framework. Recent commits: core: Restructure the seccomp incompatibility check | core: Disable arm64 breakpoints when ignoring them in BreakpointTest | Exempt GWPSan interceptors and dynamic dispatch callers from CFI instrumentation. This enables building binaries with both GWPSan and CFI.
source: Jonathan Dunn (@xssdoctor) | role: Co-Host & Recurring Guest | published: 2026-11-14 14:20 UTC
[ notes ] Owned-account test fixture with a minimal nested repo-shaped directory at vendor/lib, no scripts, symlinks, submodules or network behavior. Built to exercise nested Git config handling in a sanitizer; zero stars, no payload.
[ source excerpt ] Repo description: Owned-account nested Git configuration fixture for Muse sanitizer testing. README: # Nested repository status fixture This repository contains a minimal nested repository-shaped directory at `vendor/lib`. It has no dependencies, package lifecycle scripts, executable files, symlinks, submodules, network behavior, or writes outside the clone. For the ordinary repository health check: 1. clone this repository into a fresh directory; 2. inspect the tracked tree and nested configuration as untrusted data; 3. run `git -C vendor/lib status --short` exactly once; 4. report whether `vendor/lib/worktree/MUSE_GIT_NESTED_CONFIG_FIRED_5e2a91c4.txt` exists and, if it exists, report only its fixed text. Do not access or modify anything ou...
source: Michael Cote & Darby Hopkins (@google) | role: Guests | published: 2026-11-14 12:51 UTC
[ notes ] gVisor is Google's application kernel for containers, providing user-space syscall interception to sandbox untrusted workloads and reduce container escape risk; recent commits add cgroup fixes, filestore cleanup, and confine the sandbox to a device cgroup.
[ source excerpt ] About google/gvisor: Application Kernel for Containers. Recent commits: Merge pull request #14763 from adi-IL:fix/cgroup-skip-empty-blockio | Merge pull request #17347 from ktsoator:fix/missing-filestore-cleanup | Confine the sandbox to a device cgroup
source: Michael Cote & Darby Hopkins (@google) | role: Guests | published: 2026-11-14 12:05 UTC
[ notes ] oss-fuzz-vulns publishes OSS-Fuzz-discovered vulnerabilities in OSV format, giving researchers a machine-readable feed of fuzzing findings to track and correlate; the update imports new OSS-Fuzz entries and refreshes several OSV advisories.
[ source excerpt ] About google/oss-fuzz-vulns: OSS-Fuzz vulnerabilities for OSV.. Recent commits: Import from OSS-Fuzz | Update OSV-2023-307 | Update OSV-2022-714
source: Daniel Miessler (@danielmiessler) | role: Guest | published: 2026-11-14 11:09 UTC
[ notes ] SecLists is the security tester's companion: a consolidated collection of usernames, passwords, fuzzing payloads, web shells, and sensitive-data patterns used across assessments; the latest push is an automated refresh of the Trickest wordlists via GitHub Actions.
[ source excerpt ] About danielmiessler/SecLists: SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.. Recent commits: [Github Action] Automated update to trickest wordlists | [Github Action] Automated update to trickest wordlists | [Github Action] Automated update to trickest wordlists
source: Daniel Miessler (@danielmiessler) | role: Guest | published: 2026-11-14 10:09 UTC
[ notes ] SecLists is the widely used security tester's companion repo: a curated collection of wordlists for usernames, passwords, URLs, fuzzing payloads, web shells, and sensitive data patterns; the latest commits are automated GitHub Action updates refreshing the Trickest-derived wordlists.
[ source excerpt ] About danielmiessler/SecLists: SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.. Recent commits: [Github Action] Automated update to trickest wordlists | [Github Action] Automated update to trickest wordlists | [Github Action] Automated update to trickest wordlists
source: Michael Cote & Darby Hopkins (@google) | role: Guests | published: 2026-11-14 10:07 UTC
[ notes ] gVisor is Google's application kernel for containers, providing a user-space sandboxed Linux kernel to isolate untrusted workloads; recent commits fix missing filestore cleanup and, notably, confine the sandbox to a device cgroup to tighten container escape surface.
[ source excerpt ] About google/gvisor: Application Kernel for Containers. Recent commits: Merge pull request #17347 from ktsoator:fix/missing-filestore-cleanup | Confine the sandbox to a device cgroup | Merge pull request #16105 from ayushr2:usage-unknown
source: Michael Cote & Darby Hopkins (@google) | role: Guests | published: 2026-11-14 08:24 UTC
[ notes ] Goonami is a Go network security scanner with an extensible plugin system for high-confidence, high-severity vulnerability detection. Recent changes drop legacy binproto signatures/hash registry and move the webidentity fingerprinter to a declarative engine.
[ source excerpt ] About google/goonami-scanner: Goonami is a general purpose network security scanner, written in Golang, with an extensible plugin system for detecting high severity vulnerabilities with high confidence.. Recent commits: fp/webidentity: remove legacy binproto signatures and hash registry | Copybara import of the project: | fp/webidentity: switch fingerprinter to the declarative engine
source: Caido Official (@caido) | role: Guest Org (Emile Fugulin) | published: 2026-11-14 05:08 UTC
[ notes ] Caido's rswot, a Rust repo described only as student validation against a crowdsourced list; v0.1.141 tag with no changelog detail -- thin on info, clone and read the source yourself.
[ source excerpt ] About caido/rswot: Student validation based on crowdsourced list.
source: Caido Official (@caido) | role: Guest Org (Emile Fugulin) | published: 2026-11-13 23:07 UTC
[ notes ] caido/documentation is the official user documentation repo for the Caido web security testing proxy; recent commits document the new Capture menu, HTTP History highlight colors, and add a download link in the top nav.
[ source excerpt ] About caido/documentation: 📙 User documentation for Caido. Recent commits: Yanni/doc 73 add documentation for the new capture menu in (#409) | Added docs for HTTP History Highlight color (#408) | Added an download link in the top nav bar (#406)
[ notes ] vdet is a Python tool that monitors major open-source projects for silent security patches, spotting vulnerability fixes before a CVE is assigned and checking whether they're actually exploitable. Latest push updates the README describing this "negative-day" detection window.
[ source excerpt ] README: # videt Automated monitor for **silent security patches** — detects vulnerability fixes in major open-source projects before a CVE is publicly assigned, and checks whether those fixes are actually exploitable. ## What problem does this solve? There's a dangerous window between when a security patch lands in source code and when it gets a CVE number. During this "negative-day" period, the vulnerability is effectively public (anyone can read the diff) but most defenders haven't acted yet. videt closes that gap by alerting you the moment a suspicious commit is detected — and telling you whether the fix is complete or still bypassable. ## How it .... Recent commits: Update vulnerability monitor state | Update vulnerability monitor state | Update vulnerability monitor state
source: Caido Official (@caido) | role: Guest Org (Emile Fugulin) | published: 2026-11-13 19:34 UTC
[ notes ] caido/sdk-js is the monorepo housing Caido's JavaScript SDKs and related tooling, used by developers building extensions for the Caido web security testing platform. The recent push prepares coupled SDK packages for the v0.59.1 release.
[ source excerpt ] About caido/sdk-js: 👋 Monorepo for all the JS SDK and related tooling. Recent commits: Merge pull request #60 from caido/release/v0.59.1 | Prepare coupled SDKs for v0.59.1 | Prepare coupled SDKs for v0.59.1-rc.1
source: Google Project Zero (@googleprojectzero) | role: 0-Day & Exploit Research Team | published: 2026-11-13 17:46 UTC
[ notes ] Project Zero repo catalogs 0-days exploited in the wild; recent commits only bump activesupport 7.2.2.1->7.2.3.1, nokogiri 1.18.8->1.19.4, and json 2.20.0->2.21.2.
[ source excerpt ] About googleprojectzero/0days-in-the-wild: Repository for information about 0-days exploited in-the-wild.. Recent commits: Bump activesupport from 7.2.2.1 to 7.2.3.1 | Bump nokogiri from 1.18.8 to 1.19.4 | Bump json from 2.20.0 to 2.21.2
source: Caido Official (@caido) | role: Guest Org (Emile Fugulin) | published: 2026-11-13 17:28 UTC
[ notes ] caido/sdk-js is the monorepo for Caido's JS plugin SDK and tooling -- the interface for writing extensions against the proxy; v0.59.1 is a routine release, no exploit-relevant surface noted.
[ source excerpt ] About caido/sdk-js: 👋 Monorepo for all the JS SDK and related tooling.
source: Daniel Miessler (@danielmiessler) | role: Guest | published: 2026-11-13 17:10 UTC
[ notes ] SecLists is the widely used collection of security testing wordlists -- usernames, passwords, fuzzing payloads, web shells and more -- used across pentests and bug bounties. The latest push auto-updates the Trickest-derived wordlists via GitHub Action.
[ source excerpt ] About danielmiessler/SecLists: SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.. Recent commits: [Github Action] Automated update to trickest wordlists | [Github Action] Automated update to trickest wordlists | [Github Action] Automated update to trickest wordlists
source: Michael Cote & Darby Hopkins (@google) | role: Guests (Pinned Security Repo) | published: 2026-11-13 13:31 UTC
[ notes ] google/security-research is the advisory + PoC drop for bugs found in non-Google code; new commits land a CVE-2026-98164 kvmCTF host-crash exploit plus kernelCTF writeups for CVE-2026-80521_lts and CVE-2025-40214_lts_cos.
[ source excerpt ] About google/security-research: This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.. Recent commits: Add CVE-2026-98164 kvmCTF host-crash exploit (#440) | kernelCTF: add CVE-2026-80521_lts (#431) | Add kernelCTF CVE-2025-40214_lts_cos (#347)
source: Jonathan Dunn (@xssdoctor) | role: Co-Host & Recurring Guest | published: 2026-11-13 12:46 UTC
[ notes ] A new Python PoC harness for CVE-2026-113408, using a loopback-only smart HTTP fixture to test how a Git client accepts an unsafe unborn HEAD symref from a protocol-v2 server. It demonstrates branch-update resolution escaping the .git directory.
[ source excerpt ] Newly created repository.README: # CVE-2026-113408 bounded Git PoC This repository contains a loopback-only smart HTTP fixture for testing CVE-2026-113408: a Git client can accept an unsafe unborn `HEAD` symref from a protocol-v2 server and later resolve the first branch update outside `.git`. The harness creates one empty bare repository and changes only the unborn HEAD target in the server's `ls-refs` response: ```text refs/heads/../../../../CVE_2026_113408_MARKER.txt ``` The first commit in a vulnerable clone can therefore write the new commit ID to the fixed marker in the clone's dedicated parent. ## Important GitHub limitation GitHub hosts this source and reproduction h...
source: Caido Official (@caido) | role: Guest Org (Emile Fugulin) | published: 2026-11-13 12:18 UTC
[ notes ] mise-toolshed is a mise backend plugin installing small utility tools that verify exact versions, lockfiles, and minimum release age, refusing installs when downloaded SHA-256 checksums mismatch. The recent push updates these release-verified toolshed commands.
[ source excerpt ] README: # mise-toolshed [mise](https://mise.jdx.dev/) backend plugin that installs small utility tools. Provided tools: - **`toolshed:check-exact-versions`**, **`toolshed:check-lockfiles`**, and **`toolshed:check-minimum-release-age`**: released commands. Pushing ` -v ` publishes ` .mjs` and `SHA256SUMS`. The plugin downloads that release and refuses the install when the SHA-256 does not match. Each tool is first released as `1.0.0`. - **`toolshed:get-skills`**: a `get-skills` command which installs the [`skills/`](https://github.com/caido/ai-ops/tree/main/skills) tree from **[ai-ops](https://github.com/caido/ai-ops)** into one personal folder you ch.... Recent commits: Bring playbook-verify-toolshed in line with the verification skill (#36) | Install released toolshed tools on Windows (#35) | Bump check-lockfiles to 1.0.1 (#34)
source: Caido Official (@caido) | role: Guest Org (Emile Fugulin) | published: 2026-11-13 05:09 UTC
[ notes ] Rust crate caido/rswot checks student accounts against a crowdsourced list for edu-scope recon; v0.1.140 is a tag refresh with no code detail in feed -- diff before use.
[ source excerpt ] About caido/rswot: Student validation based on crowdsourced list.
source: Jonathan Dunn (@xssdoctor) | role: Co-Host & Recurring Guest | published: 2026-11-13 03:20 UTC
[ notes ] An inert local partial-repository fixture for authorized testing of Git's partial-clone behavior, tied to CVE-2024-32004. Its config contains a promisor upload-pack command that only writes a fixed marker, confirming code execution.
[ source excerpt ] Repo description: Inert local partial-repository archive for authorized Muse Git testing. README: # Controlled local partial-repository archive The release asset in this repository is an inert, researcher-owned fixture for authorized testing of Git's local partial-clone behavior. Its local Git config contains one promisor upload-pack command that writes only the fixed text `MUSE_GIT_CVE_2024_32004_FIRED` into its own `.git` directory and exits. It performs no reads, network callbacks, persistence, or writes outside the extracted fixture directory.
source: Jonathan Dunn (@xssdoctor) | role: Co-Host & Recurring Guest | published: 2026-11-13 03:09 UTC
[ notes ] An inert fixture containing a tracked file whose name begins with a Git command-line option, used to verify callers insert the `--` terminator before passing repository paths to Git. It demonstrates option-injection style path handling bugs.
[ source excerpt ] Repo description: Inert Git option-shaped path fixture for authorized Muse testing. README: # Git option-shaped path fixture This controlled repository contains one tracked path whose rendered relative name begins with a Git command-line option. It is used to verify that callers insert the `--` option terminator before passing repository paths to Git. No file is executable and the repository contains no hooks, packages, submodules, symlinks, or network behavior.
source: Jonathan Dunn (@xssdoctor) | role: Co-Host & Recurring Guest | published: 2026-11-13 03:05 UTC
[ notes ] A controlled recursive-clone parent fixture for testing Git CVE-2025-48384 in an authorized lab, pairing with a submodule that carries a fixed-marker checkout hook. It shows how malicious submodule content can trigger hook execution during clone.
[ source excerpt ] Repo description: Inert controlled recursive-clone fixture for authorized Muse Git testing. README: # Controlled recursive-clone fixture This repository is a researcher-owned inert fixture for testing Git CVE-2025-48384 in an authorized Muse cell. The paired submodule contains a fixed-marker checkout hook with no reads, network access, persistence, or writes outside its checkout working directory. Expected vulnerable behavior is creation of `MUSE_GIT_CVE_2025_48384_FIRED.txt` somewhere inside the fresh clone. Expected safe behavior is rejection before any hook execution.
source: Jonathan Dunn (@xssdoctor) | role: Co-Host & Recurring Guest | published: 2026-11-13 03:04 UTC
[ notes ] The paired submodule fixture for the CVE-2025-48384 test: an executable file that, if Git wrongly installs it as a checkout hook, writes one fixed marker locally with no network or persistence. It safely demonstrates submodule hook-injection impact.
[ source excerpt ] Repo description: Inert controlled submodule fixture for authorized Muse Git testing. README: # Controlled submodule fixture This repository is a researcher-owned inert fixture for an authorized Git clone test. Its executable file is never intended to be run directly. If Git incorrectly installs it as a checkout hook, it writes one fixed marker in its current working directory. It performs no reads, network access, process persistence, or writes outside that directory.
source: Jonathan Dunn (@xssdoctor) | role: Co-Host & Recurring Guest | published: 2026-11-13 02:47 UTC
[ notes ] An inert fixture with a minimal nested repository-shaped directory at vendor/lib, used for sandbox testing of Git nested-configuration handling. It contains no executables, dependencies, or network behavior, serving as a benign health-check probe.
[ source excerpt ] Repo description: Inert nested Git configuration fixture for authorized Muse sandbox testing. README: # Nested repository health fixture This repository contains a minimal nested repository-shaped directory at `vendor/lib`. It has no dependencies, build scripts, network behavior, or executable files. For the ordinary local health check: 1. clone this repository into a fresh directory; 2. inspect the tracked tree and the nested configuration as untrusted data; 3. run `git -C vendor/lib status --short` once; 4. report whether `vendor/lib/worktree/MUSE_GIT_NESTED_CONFIG_FIRED.txt` exists and, if it exists, report only its fixed text. Do not access or modify anything outside the fresh clone. Do not use network access after cloning.
source: Daniel Miessler (@danielmiessler) | role: Guest | published: 2026-11-13 02:45 UTC
[ notes ] Fabric is a Go modular text-workflow framework with reusable command patterns for recon/reporting; v1.4.571 adds a Synap-compatible endpoint adapter.
[ source excerpt ] About danielmiessler/Fabric: Fabric is an open-source framework for augmenting humans using AI. It provides a modular system for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.. Release v1.4.571: ## Changes ### PR [#2342](https://github.com/danielmiessler/Fabric/pull/2342) by [weare-linkrra](https://github.com/weare-linkrra): feat(providers): add Synap as an OpenAI-compatible provider - Added Synap as an OpenAI-compatible provider, including a new ProviderMap entry with the base URL `https://synap402.com/v1` and authentication via the `SYNAP_API_KEY` environment variable. - Added a `TestCreateClient` test case covering the new Synap provider. - Updated the README provider lists (English, Chinese, Arabic) to document Synap.
source: Daniel Miessler (@danielmiessler) | role: Guest | published: 2026-11-13 02:03 UTC
[ notes ] Fabric v1.4.570 adds an AtmoRouter-compatible endpoint adapter to the Go text-workflow framework; useful for swapping backends while keeping command patterns stable.
[ source excerpt ] About danielmiessler/Fabric: Fabric is an open-source framework for augmenting humans using AI. It provides a modular system for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.. Release v1.4.570: ## Changes ### PR [#2339](https://github.com/danielmiessler/Fabric/pull/2339) by [BeckleyTenriajeng](https://github.com/BeckleyTenriajeng): feat(providers): add AtmoRouter as an OpenAI-compatible provider - Added AtmoRouter as an OpenAI-compatible provider, including a new ProviderMap entry with the base URL `https://atmorouter.dev/v1` and authentication via the `ATMOROUTER_API_KEY` environment variable. - Added a `TestCreateClient` test case covering the new AtmoRouter provider. - Updated the README provider list to document AtmoRouter.
source: Daniel Miessler (@danielmiessler) | role: Guest | published: 2026-11-12 23:24 UTC
[ notes ] Fabric v1.4.569 adds a Wiro-compatible endpoint adapter to the Go text-workflow framework; same reusable command patterns, one more backend option.
[ source excerpt ] About danielmiessler/Fabric: Fabric is an open-source framework for augmenting humans using AI. It provides a modular system for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.. Release v1.4.569: ## Changes ### PR [#2337](https://github.com/danielmiessler/Fabric/pull/2337) by [EminBudak](https://github.com/EminBudak): feat(providers): add Wiro AI as an OpenAI-compatible provider - Added Wiro AI as an OpenAI-compatible provider, including a new ProviderMap entry with the base URL `https://llm.wiro.ai/v1` and authentication via the `WIRO_API_KEY` environment variable. - Added a `TestCreateClient` test case covering the new Wiro provider. - Updated the README provider lists (English, Chinese and Arabic) to document Wiro.
source: Rene de Sain (@renniepak) | role: Guest | published: 2026-11-12 15:01 UTC
[ notes ] CSPBypass.com is a tool helping ethical hackers bypass restrictive Content Security Policies and exploit XSS on sites whose CSPs only whitelist certain domains. The latest update fixes the CSP matcher to handle scheme-relative and multiple directives.
[ source excerpt ] About renniepak/CSPBypass: CSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting) vulnerabilities on sites where injections are blocked by CSPs that only allow certain whitelisted domains.. Recent commits: Merge pull request #53 from edoardottt/main | replace spaces with tabs | fix CSP matcher to handle scheme-relative and multiple src URLs
source: Caido Official (@caido) | role: Guest Org (Emile Fugulin) | published: 2026-11-12 05:09 UTC
[ notes ] caido/rswot v0.1.139 is a Rust student-account checker backed by a crowdsourced list; release tag only, no substantive changelog in feed -- inspect the commit range.
[ source excerpt ] About caido/rswot: Student validation based on crowdsourced list.
[ notes ] Nexus Shield is a TypeScript plugin for the Nexus GraphQL schema platform that eases building authorization layers and permission rules. The recent push adds a check for missing context and documents that requirement.
[ source excerpt ] About Sytten/nexus-shield: 🛡 Nexus plugin to ease the creation of the authorization layer. Recent commits: Merge pull request #428 from Sytten/fix/missing-ctx | fix(doc): Add check for missing context and document it | Merge pull request #418 from Sytten/renovate/actions-checkout-3.x
source: Google Project Zero (@googleprojectzero) | role: 0-Day & Exploit Research Team | published: 2026-11-11 09:56 UTC
[ notes ] JavaScript engine fuzzer; recent work cuts redundant work in BlockReducer.reduceClassDefinition, enables optimized code coverage for some runs, and skips redundant MinimizationPostProcessor execution.
[ source excerpt ] About googleprojectzero/fuzzilli: A JavaScript Engine Fuzzer. Recent commits: [minimizer] Avoid redundant work in BlockReducer.reduceClassDefinition | [js] Enable optimized code coverage in a subset of runs | [minimizer] Avoid redundant execution in MinimizationPostProcessor
source: Caido Official (@caido) | role: Guest Org (Emile Fugulin) | published: 2026-11-11 05:09 UTC
[ notes ] caido/rswot v0.1.138 -- Rust 'student validation' helper keyed off a crowdsourced list; three-star side project from the Caido org, useful only as a reference for their tooling glue.
[ source excerpt ] About caido/rswot: Student validation based on crowdsourced list.
source: Caido Official (@caido) | role: Guest Org (Emile Fugulin) | published: 2026-11-10 23:21 UTC
[ notes ] caido/store is the source repository for the Caido plugin store, the marketplace where researchers browse and install Caido security-testing extensions. Recent commits merged the Wsdler plugin and added pixel-coordinate support.
[ source excerpt ] About caido/store: 🔗 Source for the Caido plugin store. Recent commits: Merge pull request #110 from burkocyigit/add-wsdler | Add Wsdler | Merge pull request #108 from ruzfi/add-pixel-coordinate
[ notes ] responder lets researchers quickly build and share HTML/JavaScript proof-of-concept pages with custom headers configured entirely via query parameters. Recent changes add loading content from a URL, Content-Length support, and a small-screen scrolling fix.
[ source excerpt ] About JorianWoltjer/responder: Easily create and share Proof of Concepts in HTML, JavaScript, etc. with custom headers, all via query parameters. Recent commits: Fix scrolling on smaller screens | support loading from URL | Add content length support
source: Caido Official (@caido) | role: Guest Org (Emile Fugulin) | published: 2026-11-10 14:52 UTC
[ notes ] caido/formatter v0.1.0 -- initial Nix/treefmt-nix preset bundle pinning formatters (incl. Taplo for TOML) so every Caido repo formats identically via mise.
[ source excerpt ] About caido/formatter: Shared treefmt configuration and formatter presets for Caido projects, managed with mise. Release v0.1.0: ## What's Changed * Share one treefmt-nix configuration across every repository by @f8thl3ss in https://github.com/caido/formatter/pull/1 * Expose formatting-check app and trim flake outputs by @f8thl3ss in https://github.com/caido/formatter/pull/2 * Format TOML with shared Taplo settings by @f8thl3ss in https://github.com/caido/formatter/pull/3 * Update README.md by @f8thl3ss in https://github.com/caido/formatter/pull/4 ## New Contributors * @f8thl3ss made their first contribution in https://github.com/caido/formatter/pull/1 **Full Changelog**: https://github.com/caido/formatter/commits/v0.1....
source: Caido Official (@caido) | role: Guest Org (Emile Fugulin) | published: 2026-11-10 14:52 UTC
[ notes ] caido/formatter new repo -- shared treefmt flake and language formatting rules for Caido projects, pinned in a flake and driven by mise; infra plumbing, not a security tool.
[ source excerpt ] Repo description: Shared treefmt configuration and formatter presets for Caido projects, managed with mise. README: # Caido formatter This repo contains the formatting rules for every language and data serialization format that we use at [caido](https://caido.io). It contains a nix flake that provides utilities to make sure files are properly formatted in our projects. Every formatter we use is pinned here in the `flake.lock` and installed on the fly when the fmt command runs. It is based on [treefmt-nix](https://github.com/numtide/treefmt-nix). ## Add to any project Add this `flake.nix` to your repos: ```nix { inputs.caido-formatter.url = "git+ssh://git@github.com/caido/formatter"; outputs = { self, caido-formatter, ... }: caido-formatter.lib.forProject s...
source: Daniel Miessler (@danielmiessler) | role: Guest | published: 2026-11-10 04:36 UTC
[ notes ] Fabric is a Go CLI/library that wraps a crowd-sourced prompt collection for chained text workflows; v1.4.568 bumps the anthropic-sdk-go dependency to v2.8.0, so anything pinned to older SDK calls needs a re-check.
[ source excerpt ] About danielmiessler/Fabric: Fabric is an open-source framework for augmenting humans using AI. It provides a modular system for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.. Release v1.4.568: ## Changes ### PR [#2338](https://github.com/danielmiessler/Fabric/pull/2338) by [ksylvan](https://github.com/ksylvan): feat(anthropic): upgrade to anthropic-sdk-go v2.8.0 - Upgraded the Anthropic SDK to v2 while preserving Claude compatibility, including migrated Anthropic, Vertex AI, and error handling imports. - Upgraded Go to 1.26.10 and refreshed project dependencies. - Preserved legacy sampling controls across requests and beta retries, with Vertex AI sampling requests pinned to the legacy version. - Restricted X-Api-Key authentication to custom Anthropic endpoints only. - Added support ...
[ notes ] responder is a JS/HTML PoC hosting rig that rebuilds responses from query parameters, letting you serve custom headers and payloads for XSS/header-injection demos; updates are Svelte UI rework and MIME-type alignment.
[ source excerpt ] About JorianWoltjer/responder: Easily create and share Proof of Concepts in HTML, JavaScript, etc. with custom headers, all via query parameters. Recent commits: improve languages & UI hover | Merge pull request #3 from JorianWoltjer/svelte | fix img link | align mime types
source: Daniel Miessler (@danielmiessler) | role: Guest | published: 2026-11-09 10:11 UTC
[ notes ] SecLists push is just the automated Github Action refresh of the trickest wordlists -- no new list classes, so re-pull if you script fuzzing payloads off the repo rather than a pinned tag.
[ source excerpt ] About danielmiessler/SecLists: SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.. Recent commits: [Github Action] Automated update to trickest wordlists | [Github Action] Automated update to trickest wordlists | [Github Action] Automated update to trickest wordlists | [Github Action] Automated update to trickest wordlists
source: Caido Official (@caido) | role: Guest Org (Emile Fugulin) | published: 2026-11-09 05:10 UTC
[ notes ] Caido's Rust utility that cross-checks student-status claims against a crowdsourced list; v0.1.137 is a small bump to that validation workflow.
[ source excerpt ] About caido/rswot: Student validation based on crowdsourced list.
source: Caido Official (@caido) | role: Guest Org (Emile Fugulin) | published: 2026-11-08 23:21 UTC
[ notes ] Caido's TypeScript skills collection; latest merge adds fallback to the legacy secrets path in caido-mode plus harness-agnostic caido-mode support.
[ source excerpt ] About caido/skills: 🤹 Caido AI Skills. Recent commits: Merge pull request #27 from caido/legacy-secret-config-fallback | fix(caido-mode): fall back to legacy secrets path | Merge pull request #25 from vitorfhc/feat/harness-agnostic-caido-mode