ctf-tools

ctf-tools This is a collection of setup scripts to create an install of various security research tools. Of course, this isn't a hard problem, but it's really nice to have them in one place that's easily deployable to new machines and so forth. The install-scripts for these tools are checked ever...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

commix

Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command injection vulnerabilities. You can visit the collection of screenshots demonstrating some of the features o...

CVE-2026-56255

Capgo before 12.128.2 contains a denial of service vulnerability in the POST /app/demo endpoint that allows authenticated users with org write permissions to create unlimited demo applications without rate limiting or quota enforcement. Attackers can repeatedly invoke this endpoint to generate...

CVE-2026-56255

Capgo before 12.128.2 contains a denial of service vulnerability in the POST /app/demo endpoint that allows authenticated users with org write permissions to create unlimited demo applications without rate limiting or quota enforcement. Attackers can repeatedly invoke this endpoint to generate...

CVE-2026-56255 Capgo - Denial of Service via Unlimited Demo App Creation

Capgo before 12.128.2 contains a denial of service vulnerability in the POST /app/demo endpoint that allows authenticated users with org write permissions to create unlimited demo applications without rate limiting or quota enforcement. Attackers can repeatedly invoke this endpoint to generate...

EUVD-2026-38365

Capgo before 12.128.2 contains a denial of service vulnerability in the POST /app/demo endpoint that allows authenticated users with org write permissions to create unlimited demo applications without rate limiting or quota enforcement. Attackers can repeatedly invoke this endpoint to generate...

codepoc

Java Goof This is a collection of Java demo apps that are vu...

[SECURITY] Fedora 43 Update: vhs-0.10.0-4.fc43

Write terminal GIFs as code for integration testing and demoing your CLI tool s...

[SECURITY] Fedora 42 Update: vhs-0.9.0-2.fc42

Write terminal GIFs as code for integration testing and demoing your CLI tool s...

Debian: Security Advisory (DSA-6168-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Your complete guide to Microsoft experiences at RSAC™ 2026 Conference

The era of AI is reshaping both opportunity and risk faster than any shift security leaders have seen. Every organization is feeling the momentum; and for security teams, the question is no longer if AI will transform their work, but how to stay ahead of what comes next. At Microsoft, we see this...

GHSA-W54X-R83C-X79Q Pepr Has Overly Permissive RBAC ClusterRole in Admin Mode

Severity: LOW Target: /workspace/pepr/src/lib/assets/rbac.ts Endpoint: Kubernetes RBAC configuration Method: Deployment Response / Rationale Pepr defaults to rbacMode: "admin" because the initial experience is designed to be frictionless for new users. This mode ensures that users can deploy and...

EUVD-2022-5211

Malicious code in bioql PyPI...

Malicious code in @malware-test-laugh-demos-cooee-gamme/test-mlw3-laugh-demos-cooee-gamme (npm)

The package @malware-test-laugh-demos-cooee-gamme/test-mlw3-laugh-demos-cooee-gamme was found to contain malicious code...

MAL-2025-8755 Malicious code in @malware-test-laugh-demos-cooee-gamme/test-mlw3-laugh-demos-cooee-gamme (npm)

The package @malware-test-laugh-demos-cooee-gamme/test-mlw3-laugh-demos-cooee-gamme was found to contain malicious code...

Malicious code in @zalastax/nolb-demos (npm)

The package @zalastax/nolb-demos was found to contain malicious code...

MAL-2025-11139 Malicious code in @zalastax/nolb-demos (npm)

The package @zalastax/nolb-demos was found to contain malicious code...

Malicious code in public-tools-and-demos (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd27fc8de7de95d23d7ed38ad3f45570fbd5a74a2f07b0e570f5240adafda3ce Any computer that has this package installed or running should be considered...