174 matches found
GitHunt
BHEU Demos This repository contains three demos for Black Hat Europe 2025's The Forensic Trail On GitHub: Hunting For Supply Chain Activity 1. potentialattacksdemo : A Flask web application that shows a demo of identifying and investigating an attack based off the public GH firehose. 2. ghdig : A...
pwndoc
PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...
social-analyzer
Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process. The detection modules utilize a rating mechanism...
commix
English • Ελληνικά • Español • Français • فارسی • Bahasa Indonesia • Türkçe Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command and code injection...
sqlmap
sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...
DevSec-Defense
DevSec-Defense Accompanying PowerShell Modules & Demos for DevSec Defense Presentation DevSec Defense: How DevOps Practices Can Drive Detection Development For Defenders...
CVE_Demo
CVEDemo 안녕하세요, 저는 Muhammad Navaid Zafar Ansari입니다. 이 저장소는 제 CVE 데모를 관리하고, 제가 취약점을 발견한 애플리케이션을 사용하려는 사람들에게 수정 권장 사항을 제공하기 위해 만들었습니다. 면책 조항: 모든 데모는 교육 목적으로만 제작되었습니다. 이러한 취약점은 자신의 시스템에서만 테스트해야 하며, 법 위반이나 개인적 이득을 위해 사용될 수 없습니다. 이 프로젝트의 저자는 자료로 인해 발생할 수 있는 어떠한 피해에 대해서도 책임을 지지 않습니다...
CentOS Linux 7 [TuxCare] Security Update: poppler / poppler-cpp / poppler-cpp-devel / poppler-demos / etc (CENTOS7:CLSA-2026:1786352279)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1786352279 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...
Fixing my tooltip accessibility mistake
I made an accessibility error, and I want you to learn from my mistakes. I've been making short videos recently about web platform features as they land in Firefox, and also about other web standards & development stuff. If you'd prefer to watch a 3-minute video version of this article, pick your...
CVE-2026-56255
Capgo before 12.128.2 contains a denial of service vulnerability in the POST /app/demo endpoint that allows authenticated users with org write permissions to create unlimited demo applications without rate limiting or quota enforcement. Attackers can repeatedly invoke this endpoint to generate...
CVE-2026-56255
Capgo before 12.128.2 contains a denial of service vulnerability in the POST /app/demo endpoint that allows authenticated users with org write permissions to create unlimited demo applications without rate limiting or quota enforcement. Attackers can repeatedly invoke this endpoint to generate...
CVE-2026-56255 Capgo - Denial of Service via Unlimited Demo App Creation
Capgo before 12.128.2 contains a denial of service vulnerability in the POST /app/demo endpoint that allows authenticated users with org write permissions to create unlimited demo applications without rate limiting or quota enforcement. Attackers can repeatedly invoke this endpoint to generate...
EUVD-2026-38365
Capgo before 12.128.2 contains a denial of service vulnerability in the POST /app/demo endpoint that allows authenticated users with org write permissions to create unlimited demo applications without rate limiting or quota enforcement. Attackers can repeatedly invoke this endpoint to generate...
codepoc
Java Goof This is a collection of Java demo apps that are vu...
[SECURITY] Fedora 43 Update: vhs-0.10.0-4.fc43
Write terminal GIFs as code for integration testing and demoing your CLI tool s...
[SECURITY] Fedora 42 Update: vhs-0.9.0-2.fc42
Write terminal GIFs as code for integration testing and demoing your CLI tool s...
Debian: Security Advisory (DSA-6168-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Your complete guide to Microsoft experiences at RSAC™ 2026 Conference
The era of AI is reshaping both opportunity and risk faster than any shift security leaders have seen. Every organization is feeling the momentum; and for security teams, the question is no longer if AI will transform their work, but how to stay ahead of what comes next. At Microsoft, we see this...
GHSA-W54X-R83C-X79Q Pepr Has Overly Permissive RBAC ClusterRole in Admin Mode
Severity: LOW Target: /workspace/pepr/src/lib/assets/rbac.ts Endpoint: Kubernetes RBAC configuration Method: Deployment Response / Rationale Pepr defaults to rbacMode: "admin" because the initial experience is designed to be frictionless for new users. This mode ensures that users can deploy and...