tko-subs

tko-subs This tool allows: To check whether a subdomain can be taken over because it has: a dangling CNAME pointing to a CMS provider Heroku, Github, Shopify, Amazon S3, Amazon CloudFront, etc. that can be taken over. a dangling CNAME pointing to a non-existent domain name one or more wrong/typoe...

thewhitecircle.github.io

TWC Official Website Visit our website...

noinstagram

noinstagram I got rid of my IG account some time ago, but I'd still like to see photos from my wife and our dog. I was just visiting the IG website for each public user I wanted to view, but that was way too much work. So I built this one Sunday. Want your own noinstagram page? fork this repo set...

ps4-11.50.github.io

ps4-11.50.github.io ps4 cve-2008-3531...

gahoole77.github.io

This repository does not have a README...

pedrocruz2202.github.io

This repository does not have a README...

gud425.github.io

This repository does not have a README...

CVE-2025-40536-Analysis

CVE-2025-40536-Analysis victoriaalicex.github.io linearregressiontaxi.ipynb linearregressiontaxi.ipynb...

CVE-2024-4367_test

This project is used to test CVE-2024-4367, POC access address: https://j1nksc.github.io/CVE-2024-4367test/poc.pdf...

sakthivel10q.github.io

This repository does not have a README...

pansyhebephrenic23.github.io

Questo repository non contiene un README...

Hacked-Machines

HTB Writeups A collection of Hack The Box machines, solve...

CLSA-2026-1781830595 TuxCare security update for gh-pages (1 CVE)

TuxCare rebuilt gh-pages to address 1 CVE. Fixed in 0.12.0-tuxcare.1...

How legitimate cloud platforms enable phishers to bypass MFA

Threat actors are increasingly exploiting legitimate cloud services to evade detection and streamline the deployment of their scam infrastructure. Cloud hosting services and decentralized networks have become primary platforms for hosting phishing pages and sites. Throughout 2025 and 2026, we hav...

Github pages config file Detection

Find github pages config file. !/usr/bin/env python3 -- coding: utf-8 -- """Find github pages config file.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Github pages config file Detection', 'description': 'Find...

AVE

AVE Public Repository This directory is used for independentl...

CVE-2026-45617: Inefficient Regular Expression Complexity

LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. In versions 10.25.7 and below, the built-in striphtml filter uses a regex containing four flawed lazy-quantified alternatives, leading to ReDoS via quadratic backtracking. When the input contains many...

CVE-2026-44644: Improper Neutralization of Input During Web Page Generation

LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure JavaScript. Versions 10.25.7 and below are vulnerable to XSS through a flaw in the striphtml filter logic. The striphtml filter is intended to remove HTML tags from a string before rendering, and is widely used as an XS...

UBUNTU-CVE-2026-48501

GitHub CLI gh is GitHub’s official command line tool. Prior to 2.93.0, GitHub CLI incorrectly includes authorization header in API requests to TUF repository mirrors via gh attestation, gh release verify, and gh release verify-asset commands. The CLI uses a shared HTTP client with an authenticati...

GitHub CLI has an incorrect authorization header in API requests to TUF repository mirrors via `gh attestation`, `gh release verify`, and `gh release verify-asset` commands

Summary GitHub CLI incorrectly includes an authorization header in API requests to TUF repository mirrors via gh attestation, gh release verify, and gh release verify-asset commands. Affected users: - Authenticated github.com users who previously ran gh attestation commands, gh release verify, or...