metasploit-framework

Metasploit Framework Metasploit Frameworkは、BSDスタイルのライセンスでリリースされたオープンソースツールです。詳細なライセンス情報については、COPYINGファイルを参照してください。 最新バージョン Metasploitの最新バージョンは、Nightly Installersページから入手できます。 ドキュメント 使用ガイドを含む包括的なドキュメントは、Metasploit Docsで入手できます。 開発環境 開発環境をセットアップするには、Development Setup Guideを参照してください。 バグと機能リクエスト...

SWE-agent

!warning 我们目前的开发重点已转移至 mini-swe-agent， 它已取代 SWE-agent。其性能与 SWE-agent 相当，但更简单。 关于二者差异的更多详情，请参见 FAQ。 我们通常建议用户改用 mini-SWE-agent 而非 SWE-agent。 SWE-agent 使您选择的语言模型（例如 GPT-4o 或 Claude Sonnet 4）能够自主使用工具， 修复真实 GitHub 仓库中的问题、 发现网络安全漏洞，或 执行任何自定义任务。 ✅ 开源项目在 SWE-bench 上的领先水平 ✅ 自由流动且通用 ：赋予语言模型最大的自主权 ✅ 可配置且文档齐...

maat

About Maat is an open-source Dynamic Symbolic Execution and Binary Analysis framework. It provides various functionalities such as symbolic execution, taint analysis, constraint solving, binary loading, environment simulation, and leverages Ghidra's sleigh library for assembly lifting:...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

metasploit-framework-nu11secur1ty

Metasploit Framework Metasploit Framework 是一个以 BSD 风格许可证发布的开源工具。有关详细的许可信息，请参阅 COPYING 文件。 最新版本 请从每日构建安装包页面获取最新版本的 Metasploit。 文档 完整的文档（包括使用指南）可在 Metasploit 文档 中获取。 开发环境 要搭建开发环境，请访问开发环境搭建指南。 Bug 与功能请求 请通过 GitHub Issues 跟踪器提交 Bug 和功能请求。新的提交可通过 MSF-BUGv1 表单完成。 API 文档 有关编写模块的信息，请参阅 API 文档。 支持与交流...

CVE-2026-15621 mosaxiv clawlet File Tools fs_ops.go edit_file link following

A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function readfile/writefile/editfile of the file tools/fsops.go of the component File Tools. Performing a manipulation results in link following. The attack needs to be approached locally. The reported GitHub issue was...

sigma-audit

Sigma Stack Audit Full-spectrum security audit combining five...

SeBERTis: A Framework for Producing Classifiers of Security-Related Issue Reports

Monitoring issue tracker submissions is a crucial software maintenance activity. A key goal is the prioritization of high risk, security-related bugs. If such bugs can be recognized early, the risk of propagation to dependent products and endangerment of stakeholder benefits can be mitigated. To...

Detecting Vulnerabilities from Issue Reports for Internet-Of-Things

Timely identification of issue reports reflecting software vulnerabilities is crucial, particularly for Internet-of-Things IoT where analysis is slower than non-IoT systems. While Machine Learning ML and Large Language Models LLMs detect vulnerability-indicating issues in non-IoT systems, their I...

VulnerabilityAgent

VulnerabilityAgent 🛡️ An autonomous agent built on the BeeAI...

EUVD-2025-21393

Malicious code in bioql PyPI...

Data-Driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source Npm Packages

The npm Node Package Manager ecosystem is the most important package manager for JavaScript development with millions of users. Consequently, a plethora of earlier work investigated how vulnerability reporting, patch propagation, and in general detection as well as resolution of security issues i...

The vulnerability of the extension for the Microsoft Visual Studio Code editor allows a hacker to execute arbitrary code.

The vulnerability of the editor extension for Microsoft Visual Studio Code’s GitHub Pull Requests and Issues extension is related to errors in processing input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Cacti < 1.2.11 Multiple Vulnerabilities - Windows

Cacti is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cacti:cacti"; ifdescription...

Dow Jones Hammer - Protect The Cloud With The Power Of The cloud(AWS)

Dow Jones Hammer is a multi-account cloud security tool for AWS. It identifies misconfigurations and insecure data exposures within most popular AWS resources, across all regions and accounts. It has near real-time reporting capabilities e.g. JIRA, Slack to provide quick feedback to engineers and...

MODX CMS 2.x < 2.7.1 Multiple XSS Vulnerabilities

MODX CMS is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[Mercury v2.2.0] The Android Assessment Framework

Mercury is a security assessment framework for the Android platform. It allows you to dynamically interact with the Inter-Process Communication IPC endpoints exported by an application installed on a device. Mercury provides similar functionality to a number of static analysis tools, such as aapt...