dradis-ce

Welcome to the Dradis Framework An Automated Pentest Reporting Tool Dradis is an open-source collaboration framework and penetration testing report generator that helps InfoSec teams streamline reporting workflows. With support for importing data from tools like Burp Suite, Nessus, and Nmap, Drad...

docker-bench-security

Docker Bench for Security The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the CIS Docker Benchmark v1.6.0. We are making this available as an open-source utili...

BloodHound-Legacy

BloodHound Legacy Edition v4 Has Been Deprecated This repository is for BloodHound Legacy version 4, which was last updated in 2023 and is no longer maintained. It will be archived in the near future. Please Use the New BloodHound Community Edition BloodHound Legacy has been replaced by the free...

Taipan

Taipan is now a sponsored project. The Community sponsor will receive access to the laset version of Taipan Community Edition. The free version is release after three months from the release date. To know more visit: https://github.com/enkomio-sponsor/info or https://taipansec.com. Latest Communi...

openvas-scanner

OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...

CVE-2022-40317

CVE-2022-40317 Stored XSS in Notes A stored XSS was found in the notes section of the application while we were pentesting a client that was using OpenKM. Basically, when storing notes, somehow normal HTML was allowed and it was rendered as is. As you know, However, we found that using...

payara__Payara_CVE-2022-37422_5-2022-2

Payara Platform Community Edition Créez. Innovez. Élevez. Payara Platform Community Edition propose des environnements d'exécution de serveur open source pour les projets de développement et les applications Jakarta EE et MicroProfile conteneurisées. Payara Server Community est une plateforme...

bugsy

Bugsy Bugsy est un outil en ligne de commande CLI qui propose une correction automatique des vulnérabilités de sécurité dans votre code. Il s'agit de l'édition communautaire de Mobb, le premier outil agnostique de correction automatique des vulnérabilités de sécurité. Bugsy est conçu pour aider l...

RustHound-CE

RustHound-CE is a cross-platform and cross-compiled BloodHound collector tool written in Rust, making it compatible with Linux, Windows, and macOS. It therefore generates all the JSON files that can be analyzed by BloodHound Community Edition. This version is only compatible with BloodHound...

CVE-2023-7028

CVE-2023-7028 ⚠️ Этот эксплойт предназначен для защитных целей и должен использоваться специалистами по кибербезопасности для выявления возможных уязвимых серверов GitLab. Описание CVE-2023-7028 - Захват учетной записи через сброс пароля без взаимодействия с пользователем в GitLab Community Editio...

cent

Community edition шаблонов Nuclei — это простой инструмент, позволяющий собрать в одном месте все шаблоны Nuclei, предлагаемые сообществом. Install go install -v github.com/xm1k3/cent/v2@latest Или скачайте из релизов после установки выполните cent init, чтобы инициализировать cent с файлами...

xlsx

SheetJS La version Community de SheetJS propose des solutions open-source éprouvées pour extraire des données exploitables de presque tous les tableurs complexes et générer de nouvelles feuilles de calcul compatibles avec les logiciels anciens et modernes. SheetJS Pro offre des solutions au-delà ...

CVE-2025-69690-CVE-2025-69691

🔐 CVE-2025-69690 & CVE-2025-69691 Exécution de code à distance authentifiée dans Netgate pfSense Community Edition 📋 Résumé Champ| Détails ---|--- Chercheur| Nelson Adhepeau @privlabs Fournisseur| Netgate Produit| pfSense Community Edition Versions| 2.7.2 et 2.8.0 Type| Exécution de code à distan...

vulhunt

VulHunt Community Edition VulHunt — это фреймворк для поиска уязвимостей, разработанный исследовательской командой Binarly. Он предназначен для помощи исследователям и специалистам по безопасности в выявлении уязвимостей в бинарных файлах программного обеспечения и прошивках UEFI. VulHunt построе...

Open-School 3.0/Community Edition 2.3 - Cross-Site Scripting

Open-School 3.0, and Community Edition 2.3, allows cross-site scripting via the osv/index.php?r=students/guardians/create id parameter. id: CVE-2019-14696 info: name: Open-School 3.0/Community Edition 2.3 - Cross-Site Scripting author: pikpikcu severity: medium description: Open-School 3.0, and...

semgrep-rules

semgrep-rules Добро пожаловать! Этот репозиторий содержит правила Community Edition от Semgrep. В дополнение к правилам в этом репозитории Semgrep Registry предлагает проприетарные Pro-правила, которые обеспечивают дополнительное покрытие языков и открывают возможности межфайлового и глубокого...

CVE-2024-35584

CVE-2024-35584 OpenSIS Injection SQL Authentifiée Description Il existe une vulnérabilité d'injection SQL dans Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php. Cette découverte affecte OpenSis Community Edition 9.1 à 8.0 et possiblement les versions antérieures...

CVE-2026-102626

An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScript-breaking value in the datemin attribute of a Date/Time question. When another user renders the affected question, LimeSurvey inserts the stored value into a single-quoted...

CVE-2026-102626 LimeSurvey Community Edition 7.4.0 - Stored XSS through the Date/Time date_min question attribute

An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScript-breaking value in the datemin attribute of a Date/Time question. When another user renders the affected question, LimeSurvey inserts the stored value into a single-quoted...

CVE-2026-102626 LimeSurvey Community Edition 7.4.0 - Stored XSS through the Date/Time date_min question attribute

An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScript-breaking value in the datemin attribute of a Date/Time question. When another user renders the affected question, LimeSurvey inserts the stored value into a single-quoted...