bbrecon

This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...

HawkScan

HawkScan Herramienta de seguridad para Reconocimiento y Recopilación de Información en un sitio web. python 3.x Noticias Instalación Características especiales TAREAS PENDIENTES Uso Ejemplos Agradecimientos Donaciones Herramientas utilizadas Wiki Noticias v2.x root@kitploit: - Agregar función de...

CVE-2025-31337

CVE-2025-31337 Aviso de Seguridad ID de CVE: CVE-2025-31337 Publicado: 2025-03-15 Puntuación CVSS: 9.8 Crítica CWE: CWE-120 Copia de búfer sin verificar el tamaño de la entrada Descripción Se descubrió una vulnerabilidad crítica de desbordamiento de búfer en AIDR ChatBot Framework versión 4.2.0 y...

CVE-2024-48910-PoC

CVE-2024-48910-PoC Overview CVE-2024-48910 DOMPurify, a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG, was found to be vulnerable to prototype pollution CVE-2024-48910. The vulnerability was discovered and fixed in version 2.4.2, with the initial disclosure made on...

CVE-2026-80231

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

DEBIAN-CVE-2026-82209

When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...

DEBIAN-CVE-2026-80230

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

DEBIAN-CVE-2026-19931

A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is done using empty credentials. This can make user B's request get sent over user A's previously authenticated connection...

CVE-2021-21300

CVE-2021-21300...

CVE-2023-38646

CVE-2023-38646...

macOS-Security-and-Privacy-Guide

This guide is a collection of techniques for improving the security and privacy of macOS on Apple silicon Macs. It targets experienced users who want security practices commonly used by organizations, but is also suitable for novice users with an interest in privacy and security. For...

threat-intel

threat-intel This repository contains IoCs related to Volexity public threat intelligence blog posts. Public blog posts related to these IoCs can be found on the Volexity website. In the past this repository was also used to store tools published by Volexity. These tools have now been moved into...

CVE-2026-26114-Patch

CVE-2026-26114-Patch patching N-day of CVE-2026-26114 before microsoft. where microsoft could not patch 100% in many months. but FAC security did it...

CVE-2014-6271

CVE-2014-6271...

awesome-ios-security

Awesome iOS Security A curated list of awesome iOS application security resources. A collection of awesome tools, books, courses, blog posts, and cool stuff about iOS Application Security and Penetration Testing. Contents Tools Reverse Engineering Tools Static Analysis Tools Dynamic Analysis Tool...

CVE-2020-29607

CVE-2020-29607 Exploit para CVE-2020-29607 Uso...

CVE-2023-34362-Defense-Package

Este repositorio no tiene un README...

django-vulnerability-CVE-2025-32873

Django Security Issue on striptags requirements Django 5.2 Django Rate Limit pip install django-ratelimit...

NotQuite0day

NotQuite0day This repository documents real bugs in real software which we reported to vendors but vendors either ignored our emails and the bugs are not fixed after a long long time. The repo is organized by the release date. In each folder you can read about the bugs, versions affected. If...

awesome-security-hardening

awesome-security-hardening A collection of awesome security hardening guides, best practices, checklists, benchmarks, tools and other resources. This is work in progress: please contribute by sending your suggestions. You may do this by creating issue tickets or forking, editing and sending pull...