CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. https://vulners.com/cve/CVE-2016-2098 Usage git clone...

Agentic-SOC-Simulation

🛡️ Agentic SOC Parallel Simulation ASPS: Autonomous Security Operations Parallel Simulation Center Redefining the Future of Security Operations: Full-Stack SOC Parallel Simulation, Multi-Agent Collaboration, and Data-Driven Autonomous Defense 🇨🇳 中文文档 Chinese Version This project is a cutting-edge...

CVE-2020-36708

CVE-2020-36708 – WordPress Epsilon Framework Function Injection PoC Overview CVE-2020-36708 is a vulnerability in the Epsilon Framework for WordPress that allows unauthenticated attackers to invoke arbitrary PHP class methods via the AJAX action epsilonframeworkajaxaction. This issue is categoriz...

Security-101

🌐 Multi-Language Support Supported via GitHub Action Automated & Always Up-to-Date Arabic | Bengali | Bulgarian | Burmese Myanmar | Chinese Simplified | Chinese Traditional, Hong Kong | Chinese Traditional, Macau | Chinese Traditional, Taiwan | Croatian | Czech | Danish | Dutch | Estonian | Finni...

CVE-2026-44011-craftcms-auth-rce

CVE-2026-44011 Craft CMS authenticated RCE PoC For authorized testing only. The Craft CMS advisory lists =4.0.0, =5.0.0, ' -c '' Required arguments: -b, --base-url: Craft URL, including http:// or https://. -u, --username: Control-panel username. -p, --password: Control-panel password. -c,...

check-spelling

@check-spelling/check-spelling GitHub Action Overview Everyone makes typos. This includes people writing documentation and comments, but it also includes programmers naming variables, functions, APIs, classes, and filenames. Often, programmers will use InitialCapitalization, camelCase, ALLCAPS, o...

titus

Titus: High-Performance Secrets Scanner Titus is a high-performance secrets scanner that detects credentials, API keys, and tokens in source code, files, and git history. It ships with 487 detection rules covering hundreds of services and credential types, drawn from NoseyParker and Kingfisher...

nuclei-action

This Nuclei Action makes it easy to orchestrate Nuclei with GitHub Action. Integrate all of your Nuclei Templates into powerful continuous security workflows and make it part of your secure software development life cycle. Nuclei Action Compatibility v3.0.0+ runs on Node.js v24 and adopts a...

windiff

WinDiff About WinDiff is an open-source web-based tool that allows browsing and comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the operating system. The binary database is automatically updated to include information from the latest Windo...

CVE-2023-30212-Lab

CVE-2023-30212-Lab GitHub repository with Dockerfile and files to create a vulnerable environment for CVE-2023-30212, enabling exploration of the exploitability of this security vulnerability. Ideal for research and security enthusiasts to study and understand the impact of the vulnerability in a...

CVE-2019-5418

CVE-2019-5418 - File Content Disclosure on Rails EDIT : this CVE can lead to a Remote Code Execution, more info: https://github.com/mpgn/Rails-doubletap-RCE There is a possible file content disclosure vulnerability in Action View. Specially crafted accept headers in combination with calls to rend...

CVE-2026-109605

A security vulnerability exists in SourceCodester Simple Cafe Billing System 1.0 within the User Management component. Specifically, the Action::save_user function in the admin_class.php file is susceptible to improper authorization when the Type argument is manipulated. This flaw allows for remo...

android712-blueborne

android712-blueborne Android Blueborne RCE CVE-2017-0781 In November 2017 a company called Armis published a proof of concept PoC of a remote code execution vulnerability in Android via Bluetooth CVE-2017-0781, known as BlueBorne. Although BlueBorne refers to a set of 8 vulnerabilities, this PoC ...

run-gemini-cli

run-gemini-cli Overview run-gemini-cli is a GitHub Action that integrates Gemini into your development workflow via the Gemini CLI. It acts both as an autonomous agent for critical routine coding tasks, and an on-demand collaborator you can quickly delegate work to. Use it to perform GitHub pull...

dnsx-action

dnsx Action makes it easy to orchestrate dnsx with GitHub Action. Example Usage GitHub Action runningdnsx on list of hosts - name: 💥 dnsx - DNS Resolver uses: projectdiscovery/dnsx-action@main with: list: hosts.txt GitHub Action runningdnsx with custom resolvers - name: 💥 dnsx - DNS Resolver uses...

naabu-action

Naabu Action makes it easy to orchestrate naabu with GitHub Action. Example Usage GitHub Action running naabu on list of hosts - name: 💥 Naabu - Port Scanner uses: projectdiscovery/naabu-action@main with: host: example.com GitHub Action running naabu with custom port scan - name: 💥 Naabu - Port...

CVE-2023-26035

CVE-2023-26035 Unauthenticated RCE in ZoneMinder Snapshots - PoC Exploit alt img Description ZoneMinder versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution due to missing authorization checks in the snapshot action. Usage git clone...

api-security-audit-action

GitHub Action: 42Crunch REST API Static Security Testing The REST API Static Security Testing action locates REST API contracts that follow the OpenAPI Specification OAS, formerly known as Swagger and runs thorough security checks on them. Both OAS v2 and v3.0.x are supported, in both JSON and YA...

subfinder-action

SubFinder Action makes it easy to orchestrate SubFinder with GitHub Action. Example Usage GitHub Action runningSubFinder for single domain - name: 🔎 SubFinder - DNS Enumeration uses: projectdiscovery/subfinder-action@main with: domain: projectdiscovery.io GitHub Action runningSubFinder for multip...

CVE-2025-13486-POC

CVE-2025-13486 Proof of Concept A Proof of Concept PoC exploit for CVE-2025-13486, a Remote Code Execution vulnerability in the Advanced Custom Fields: Extended ACFE WordPress plugin. Vulnerability Overview This vulnerability exists in ACFE versions 0.9.0.5 through 0.9.1.1, allowing unauthenticat...