{"uuid": "4a8f84f2-c99c-4f8f-9c3f-4d3d212b0da5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-55182", "type": "seen", "source": "https://t.me/NinjaSecurity/251", "content": "A free, open source, and extensible speech-to-text application that works completely offline.\n\nhttps://github.com/cjpais/Handy\n\n\nLogging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-time alerting, helping small to medium-sized organizations secure their infrastructure. \n\nhttps://github.com/cisagov/LME\n\nLet's fight phishing together\n\nhttps://github.com/Duddu-Hriday/Phish-Blitz\nawesome list of cybersecurity research, RE material, exploitation write-ups, and tools. \n\nhttps://github.com/0xor0ne/awesome-list \n\nModular, guided Linux privilege escalation assistant - smarter than blind enumeration.\n\nhttps://github.com/Null0x-sh/Nullpeas\n\n\ud83d\udc7b Transparent Network Implant | L2 Bridge | WireGuard Tunnel | MAC Cloning | Stealth Persistence | NanoPi R2S | Part of MoMo Ecosystem.\n\nhttps://github.com/M0M0Sec/Momo-GhostBridge\n\nThis is a proof of concept for CVE-2025-38352, a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin mentions that this vulnerability has been used in limited, targeted exploitation in the wild.\n\nhttps://github.com/farazsth98/poc-CVE-2025-38352\n\nNew 0 day vulnerability allowing to leak NTLM hashes from browsers with one click.\n\nhttps://github.com/rubenformation/ms-photos_NTLM_Leak\n\nCyberFind \u2014 a next-generation OSINT reconnaissance tool designed for cybersecurity professionals, penetration testers, and digital investigators. Search for users across 200+ platforms with speed and accuracy.\n\nhttps://github.com/vazor-code/cyber-find\n\nA phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)\n\nhttps://github.com/gommzystudio/device-activity-tracker\n\nCVE-2025-14558\nFreeBSD rtsold DNSSL Command Injection (RCE)\n\nhttps://github.com/JohannesLks/CVE-2025-14558\n\nDiscover and explore a curated list of MCP servers, tools, and resources for AI assistants, enhancing your development and productivity.\n\nhttps://github.com/timunbasah3/awesome-mcp\n\nAutomagically decode DNS Exfiltration queries to convert Blind RCE into proper RCE via Burp Collaborator.\n\nhttps://github.com/LazyTitan33/DNS-Exfilnspector\n\nAnalyze Android APKs with AndroidBeautifest. Extract components and configurations, generating ADB commands for quick security assessment.\n\nhttps://github.com/pacomartinezea/androidBeautifest\n\nMimikatz implementation in pure Python\n\nhttps://github.com/skelsec/pypykatz\n\nContext-aware Nmap reconnaissance framework with traffic intelligence and AD awareness.\n\nhttps://github.com/lLVXX/PARANOID\n\nNext-generation intelligent Web Fuzzer & Directory Scanner written in Go. Features WAF detection, secret scanning, auto-calibration, and smart 403 bypass.\n\nhttps://github.com/hawtsauceTR/capsaicin\n\nA collection of intel and usernames scraped from various cybercrime sources & forums. DarkForums, HackForums, Patched, Cracked, BreachForums, LeakBase, & more.\n\nhttps://github.com/spmedia/Threat-Actor-Usernames-Scrape\n\nA curated list of resources regarding CVE-2025-55182, the critical Remote Code Execution (RCE) vulnerability in React Server Components known as \"React2Shell\".\n\nhttps://github.com/websecuritylabs/React2Shell-Library\n\nPlease Note: All mentioned tools are listed for educational purposes and authorized security testing only. Unauthorized use on systems you do not own or have explicit permission to test is illegal and unethical.\n\n#NinjaSecurity #HackersFactory", "creation_timestamp": "2026-08-19T21:00:03.268486Z"}