TrueVerdict

TrueVerdict -success -brightgreen Deterministic PE Provenance & False-Positive Reduction Engine for Windows DFIR Naive static malware scanners, YARA heuristics, and entropy scripts suffer from extreme False Positive Rates often 40% to 60% on clean endpoints. They routinely misclassify legitimate...

BLE-TPMS

CVE-2024-39081 Link: https://vulners.com/cve/CVE-2024-39081 BLE BASED TREEL TPMS for bikes Here, we performed and explained TPMS data manipulation over bluetooth. we can send false alarm to App user over bluetooth. Detailed vulnerability findings and analysis are stored in the repository. File Na...

shellshock_crawler

Prerequisite 1. sudo pip install shell 2. install google python search. https://github.com/MarioVilas/google Run I use google to search first 1000 sites and try to get the /etc/passwd After tesing, there are many many many host that can be rooted!!!! By the way, this is only a proto, it has false...

MinimalReproducer

After significant efforts, stripped it down to a minimal replicator. This is just an empty project to demonstrate the issue with dependency-check-maven usage I am forced on doing by my company rules. Do check the pom.xml and do verify: mvn org.owasp:dependency-check-maven:RELEASE:aggregate Or if...

CVE-2017-12615-Home-Lab

ENGLISH BELOW CVE-2017-12615 Tomcat: Remote Code Execution via JSP Upload Lab นี้จำลองช่องโหว่ CVE-2017-12615 Tomcat: Remote Code Execution via JSP Upload เกิดจากการตั้งค่า readonly=false ทำให้สามารถอัปโหลดไฟล์ผ่าน HTTP PUT ได้ รวมถึงไฟล์ .jsp ที่สามารถรันคำสั่ง RCE Features Apache Tomcat 7.0.79...

CVE-2026-100589

OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actions despite allowHostControl=false configuration. Attackers with control over sandboxed agent input can select a paired node and perform ho...

CVE-2026-100589 OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node

OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actions despite allowHostControl=false configuration. Attackers with control over sandboxed agent input can select a paired node and perform ho...

CVE-2026-100589 OpenClaw before 2026.7.1 Sandbox Bypass via Browser Node

OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actions despite allowHostControl=false configuration. Attackers with control over sandboxed agent input can select a paired node and perform ho...

ffufPostprocessing

Ffuf: Post processing Unfortunately - despite its "-ac" flag, ffuf tends to produce a lot of irrelevant entries. This is why I've created a post-processing tool to filter out those entries. Additionally, I saw a lot of relevant entries removed when "-ac" was used - especially when ffuf encounters...

EUVD-2026-87322

phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlle...

ESCepcion

🛡️ ESCepcion Active Directory Certificate Services Auditor ESCepcion es una herramienta de código abierto Open Source para la auditoría y evaluación de vulnerabilidades en infraestructuras de Active Directory Certificate Services AD CS. Está diseñada para automatizar la detección de rutas de...

Analysis

Detection Engineering Notes and Analysis This repository documents hands on detection research based on lab testing, log analysis, and real SOC workflows. The focus is on how attacker techniques actually appear in logs, what detection logic works in practice, what fails, and where false positives...

gokart

GoKart - Análisis Estático de Seguridad para Go GoKart es una herramienta de análisis estático para Go que encuentra vulnerabilidades utilizando la forma SSA asignación única estática del código fuente Go. Es capaz de rastrear el origen de variables y argumentos de funciones para determinar si la...

CVE-2026-51302-PoC

CVE-2026-51302: Technical Inconsistencies sorry for the clickbait repo name but this CVE is complete and utter LLM hallucinated slop, honestly sad to see a CNA accept this with how inconsistent the claims are 💔 Conclusion CVE-2026-51302 is not real 😱 The published SQL does not reproduce a...

l4j-fp1

log4shell false positive This is a simple web project with a sanitised log4shell vulnerability. For an unsanitised version, see https://github.com/scabench/l4j-tp1/. The project defines a simple scabench.HelloWorldService get service returning a plain text string hello world. The service does not...

jsonorg-fp3

json.org CVE-2022-45688 false positive The project contains a json.org dependency with CVE-2022-45688. It does invoke the vulnerable class, but the input data is sanitised with a simple method of counting characters, therefore estimating the max depth of the DOM tree to be generated, and enforcin...

jsonorg-fp2

json.org CVE-2022-45688 false positive The project contains a json.org dependency with CVE-2022-45688. It does invoke the vulnerable class, but the input data is hardcoded and not suitable to trigger a DoS attack. The vulnerability can therefore not be exploited for a DoS attack. Both...

jsonorg-fp1

json.org CVE-2022-45688 false positive The project contains a json.org dependency with CVE-2022-45688 but does not invoke the vulnerable class. The vulnerability can therefore not be exploited for a DoS attack. Metadata-based software composition analyses will produce a false positive, while...

jsonorg-fn1

json.org CVE-2022-45688 false negative The project illustrates CVE-2022-45688 in json.org -- there is a simple application XML2JSONConverter to read XML from input, convert it to JSON and pretty-print it to the console. Using malicious input, the application crashes with a stackoverflow. The test...

CVE-2026-93255: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: btrfs: make sure EXTENTBUFFERREADING is cleared under refslock FALSE ALERTS There is a bug report that the warning inside invalidateandcheckbtreefolios got triggered during btrfs/298: BTRFS info device sdd: first mount of...