162 matches found
GitHunt
Demos BHEU Este repositorio contiene tres demostraciones para la Ruta Forense en GitHub: Cazando Actividad en la Cadena de Suministro de Black Hat Europe 2025 1. potentialattacksdemo : Una aplicación web Flask que muestra una demo de identificación e investigación de un ataque basado en el flujo...
sqlmap
sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...
social-analyzer
Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process. The detection modules utilize a rating mechanism...
pwndoc
PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...
commix
Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command injection vulnerabilities. You can visit the collection of screenshots demonstrating some of the features o...
DevSec-Defense
DevSec-Defense Módulos de PowerShell y demos complementarios para la presentación de DevSec Defense DevSec Defense: Cómo las prácticas de DevOps pueden impulsar el desarrollo de detección para defensores...
CVE_Demo
CVEDemo 你好， 我是 Muhammad Navaid Zafar Ansari，我创建了这个仓库来维护我的 CVE 演示，并为那些想要使用这些被我发现了漏洞的应用程序的人提供修复建议。 免责声明： 所有演示仅用于教育目的，请仅针对您自己的系统测试这些漏洞，不得将其用于违反法律或谋取私利。 本项目的作者对材料可能造成的任何损害不承担任何责任。...
Fixing my tooltip accessibility mistake
I made an accessibility error, and I want you to learn from my mistakes. I've been making short videos recently about web platform features as they land in Firefox, and also about other web standards & development stuff. If you'd prefer to watch a 3-minute video version of this article, pick your...
CVE-2026-56255
Capgo before 12.128.2 contains a denial of service vulnerability in the POST /app/demo endpoint that allows authenticated users with org write permissions to create unlimited demo applications without rate limiting or quota enforcement. Attackers can repeatedly invoke this endpoint to generate...
CVE-2026-56255
Capgo before 12.128.2 contains a denial of service vulnerability in the POST /app/demo endpoint that allows authenticated users with org write permissions to create unlimited demo applications without rate limiting or quota enforcement. Attackers can repeatedly invoke this endpoint to generate...
CVE-2026-56255 Capgo - Denial of Service via Unlimited Demo App Creation
Capgo before 12.128.2 contains a denial of service vulnerability in the POST /app/demo endpoint that allows authenticated users with org write permissions to create unlimited demo applications without rate limiting or quota enforcement. Attackers can repeatedly invoke this endpoint to generate...
EUVD-2026-38365
Capgo before 12.128.2 contains a denial of service vulnerability in the POST /app/demo endpoint that allows authenticated users with org write permissions to create unlimited demo applications without rate limiting or quota enforcement. Attackers can repeatedly invoke this endpoint to generate...
codepoc
Java Goof This is a collection of Java demo apps that are vu...
[SECURITY] Fedora 43 Update: vhs-0.10.0-4.fc43
Write terminal GIFs as code for integration testing and demoing your CLI tool s...
[SECURITY] Fedora 42 Update: vhs-0.9.0-2.fc42
Write terminal GIFs as code for integration testing and demoing your CLI tool s...
Debian: Security Advisory (DSA-6168-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Your complete guide to Microsoft experiences at RSAC™ 2026 Conference
The era of AI is reshaping both opportunity and risk faster than any shift security leaders have seen. Every organization is feeling the momentum; and for security teams, the question is no longer if AI will transform their work, but how to stay ahead of what comes next. At Microsoft, we see this...
GHSA-W54X-R83C-X79Q Pepr Has Overly Permissive RBAC ClusterRole in Admin Mode
Severity: LOW Target: /workspace/pepr/src/lib/assets/rbac.ts Endpoint: Kubernetes RBAC configuration Method: Deployment Response / Rationale Pepr defaults to rbacMode: "admin" because the initial experience is designed to be frictionless for new users. This mode ensures that users can deploy and...
