Vulnerabilities & exploits

Exploit catalogue

Zero-days from our own research and n-days recovered from intrusions. Each write-up gives the class, the impact, how to detect it, and a link to public proof-of-concept.

Exploits
27
20 targets
With a CVE
27
assigned
In CISA KEV
0
known exploited
With full report
1
linked teardown

org.http4s:http4s-scala-xml_2.12 1

io.moquette:moquette-broker 1

lightrag-hku 1

mcp-atlassian 1

lmdeploy 2

org.opencastproject:opencast-engage-paella-player-7 1

@vendure/core 1

djust 1

org.http4s:http4s-ember-core_2.12 1

@zereight/mcp-gitlab 1

yayson 1

morgan 1

open-webui 1

httpx2 3

gitpython 1

nltk 2

vllm 4

@mockoon/commons-server 1

Linux kernel 1

PyYAML 1

Proof of concept & handling

Where a proof-of-concept is already public, the write-up links straight to it. Everything catalogued here is real and some of it is working exploit code, so run any of it in a disposable VM with no route to a network you use. For anything without a public link, email security@kinryu.sh and say who you are and what you need it for.