owasp-istg

OWASP IoT Security Testing Guide The OWASP IoT Security Testing Guide provides a comprehensive methodology for penetration tests in the IoT field offering flexibility to adapt innovations and developments on the IoT market while still ensuring comparability of test results. The guide provides an...

port-scan-automation

LazyMap - Auto NMAP Scanning Script Automate NMAP scans and custom Nessus polices. Developed by Daniel Compton https://github.com/commonexploits/port-scan-automation.git Released under AGPL see LICENSE for more information Installing git clone...

ecs-mapping

Corelight ECS Ingest Pipeline The repository is compromised of Ingest Pipeline files required to be used with the installer script in the repository https://github.com/corelight/ecs-templates The installer in that repository will download the files from this repository therefore using this...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

DEBIAN-CVE-2026-46571

In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfsfixfilename in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file...

CVE-2024-52302

CVE-2024-52302: Unrestricted File Upload Vulnerability in Common-User-Management Overview I discovered a critical security vulnerability in common-user-management , a robust Spring Boot application featuring user management services designed to control user access dynamically. This vulnerability...

xmlrpc-common-deserialization

xmlrpc-common deserialization vulnerability This note is a technical note to detail the root cause and the associated exploit. You can find the initial disclosure here. The associated CVE is CVE-2019-17570. Description xmlrpc-common forms a shared code base between xmlrpc-client and xmlrpc-server...

CVE-2022-42899

CVE-2022-42899 Apache Common Text starting from version 1.5 to 1.9 has Remote code execution vulnerability CVE-2022-42899. final StringSubstitutor interpolator = StringSubstitutor.createInterpolator; interpolator.replace"$script:javascript:java.lang.Runtime.getRuntime.exec'"; // Here you will pas...

warcannon

WARCannon - Traitement parallèle de WARC catastrophiquement puissant WARCannon a été conçu pour simplifier et réduire le coût du processus de 'grep sur Internet'. Avec WARCannon, vous pouvez : Construire et tester des motifs d'expressions régulières sur des données réelles de Common Crawl Charger...

warcannon

WARCannon - Catastrophically powerful parallel WARC processing WARCannon was built to simplify and cheapify the process of 'grepping the internet'. With WARCannon, you can: Build and test regex patterns against real Common Crawl data Easily load Common Crawl datasets for parallel processing Scale...

robustbench

RobustBench: a standardized adversarial robustness benchmark Francesco Croce University of Tübingen, Maksym Andriushchenko EPFL, Vikash Sehwag Princeton University, Edoardo Debenedetti EPFL, Nicolas Flammarion EPFL, Mung Chiang Purdue University, Prateek Mittal Princeton University, Matthias Hein...

paskto

Paskto - Scanner Web Passif Paskto scanne passivement le web en utilisant l'index Internet Common Crawl, soit en téléchargeant les index sur demande, soit en analysant les données de votre système local. Les URL sont ensuite traitées via Nikto et des listes d'URL connues pour identifier du conten...

gau

getallurls gau getallurls gau récupère les URLs connues depuis l'Open Threat Exchange d'AlienVault, la Wayback Machine, Common Crawl et URLScan pour tout domaine donné. Inspiré par waybackurls de Tomnomnom. Ressources Usage Installation ohmyzsh note Utilisation : Exemples : $ printf example.com |...

CentOS Linux 8 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1791395301)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1791395301 advisory. - The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes fo...

CVE-2021-25641

CVE-2021-25641 A Exploit Tool For CVE-2021-25641. All dependencies was packed,You don't care the dependencies problem If you have dependencies you can just donwload the CVE-2021-25641.jar to run. Used for: Basic dubbo-common =2.7.3 Dubbo 2.7.0 to 2.7.8 Dubbo 2.6.0 to 2.6.9 Dubbo all 2.5.x version...

ROOT-APP-MAVEN-AIKIDO-2026-371771 AIKIDO-2026-371771 in org.springdoc:springdoc-openapi-starter-common - Patched by Root

Root has patched AIKIDO-2026-371771 in the org.springdoc:springdoc-openapi-starter-common package for Root:Maven. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44792 CVE-2026-44792 in n8n - Patched by Root

Root has patched CVE-2026-44792 in the n8n package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-54306 CVE-2026-54306 in n8n - Patched by Root

Root has patched CVE-2026-54306 in the n8n package for Root:npm. Multiple fixed versions available...

copyfail-rs

copyfail-rs Multi-vector PoC + paired detection for CVE-2026-31431 CopyFail. Includes a novel PAM auth-bypass vector that no other public PoC ships. Detection mode catches what AIDE / Wazuh / OSSEC / Tripwire structurally cannot. Single static binary. 108 KB. nostd musl. Demo noot@host:$...

[SECURITY] Fedora 45 Update: emacs-common-tuareg-3.0.1-17.fc45

Tuareg is an OCaml mode for GNU Emacs. It handles automatic indentation of Objective Caml and Caml Light code. Key parts of the code are highlighted using Font-Lock. Support to run an interactive Caml toplevel and debbuger is provided. This package contains the common files. Install emacs-tuareg ...