CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 Skript zur Remote-Befehlsausführung Weitere Skriptdateien siehe: https://github.com/zhzyker/exphub Readme root@kitploit: +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as...

CVE-2021-21300

CVE-2021-21300 il suffit de me cloner ensuite votre machine affichera "PWNED" ref:https://www.openwall.com/lists/oss-security/2021/03/09/3...

CVE-2024-4956

CVE-2024-4956 POC - CVE-2024–4956 - Nexus Repository Manager 3 Nicht authentifizierte Path Traversal Ermöglicht es einem Angreifer potenziell, bestimmte Informationen auf Check Point Security Gateways zu lesen, sobald diese mit dem Internet verbunden und mit Remote Access VPN oder Mobile Access...

oss-fuzz

OSS-Fuzz: Continuous Fuzzing for Open Source Software Fuzz testing is a well-known technique for uncovering programming errors in software. Many of these detectable errors, like buffer overflow, can have serious security implications. Google has found thousands of security vulnerabilities and...

fas-judgement-oss

FAS Judgement Prompt Injection Attack Console Teste die Abwehr deiner KI, bevor es jemand anderes tut. Installation | Spielmodus | Rangliste | Demo-Ziel | Funktionen | Elite | Mitwirken Warum Judgement?...

Tylium

Tylium Pipeline dati primari per rilevamento intrusioni, analisi di sicurezza e threat hunting Questi file contengono configurazioni per produrre dati EDR Endpoint Detection and Response oltre ai log di sistema standard. Queste configurazioni consentono la produzione di questi flussi di dati...

bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

kekeo

kekeo kekeo è una piccola collezione di strumenti che ho iniziato per manipolare Microsoft Kerberos in C e per divertimento Libreria ASN.1 In kekeo, uso una libreria commerciale esterna per gestire le strutture ASN.1 di Kerberos: OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html È...

kekeo

kekeo kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C and for fun ASN.1 library In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html It was the only code...

CVE-2026-9198

CVE-2026-9198 - IBM Langflow RCE sem autenticação via bypass de auto-login PoC educacional Este repositório fornece uma prova de conceito educacional para CVE-2026-9198 que afeta o IBM Langflow OSS. O PoC poc.py demonstra como um atacante não autenticado pode encadear: 1. GET/POST /api/v1/autolog...

LibPNG_OSS-Fuzz

libpng की फजिंग और भेद्यता विश्लेषण समूह सुरक्षा अनुसंधान परियोजना फजिंग के बारे में: फजिंग एक स्वचालित सॉफ्टवेयर परीक्षण तकनीक है जो किसी प्रोग्राम को इनपुट के रूप में अमान्य, अप्रत्याशित या यादृच्छिक डेटा प्रदान करती है ताकि बग और कमजोरियों का पता लगाया जा सके। कवरेज-निर्देशित फजिंग कोड कवरेज...

aurora-demo-lockfile

aurora-demo-lockfile Target demo per AURORA — la sottomissione della sfida UiPath for Coding Agents a mlbrilliance/uipath-for-coding-agents. Questo repository contiene intenzionalmente tre lockfile vulnerabili per permettere al processo Maestro di AURORA OssSupplyChainDefender di rilevare,...

tmux-fuzzing

Laboratorio di Fuzzing: Migliorare il Fuzzing per tmux Software Security @ EPFL, Primavera 2025 Abstract In questo laboratorio, abbiamo potenziato le attività di fuzzing per il multiplexer di terminale tmux nell'infrastruttura OSS-Fuzz di Google. Abbiamo innanzitutto stabilito una baseline...

Grafana - XSS / Open Redirect / SSRF via Client Path Traversal

An open redirect vulnerability in Grafana can be chained with other issues, such as XSS or SSRF, to increase impact. An attacker may exploit the redirect to target internal services or deliver malicious JavaScript, potentially leading to internal data exposure or account takeover. id: CVE-2025-41...

elFinder 2.1.58 - Remote Code Execution

elFinder 2.1.58 is impacted by multiple remote code execution vulnerabilities that could allow an attacker to execute arbitrary code and commands on the server hosting the elFinder PHP connector, even with minimal configuration. id: CVE-2021-32682 info: name: elFinder 2.1.58 - Remote Code Executi...

Security Bulletin: Langflow OSS is affected by server-side request forgery in provider validation and API request functionality

Summary Langflow OSS includes outbound network request functionality for provider validation and API request execution. Weaknesses in request destination validation and enforcement could allow authenticated users to induce requests to unintended internal or external network locations, which may...

Security Bulletin: Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

Summary Langflow OSS supports custom Python components and validation of component code for component development workflows. Weaknesses in custom component execution paths, validation endpoints, and trusted template enforcement could allow authenticated users to execute arbitrary Python code or...

bitcoder-v2-research

BitCoder-v2 Forschung Organisation: Bytepro AI Status: Aktive Forschung — privates Repository Ziel: arXiv Q3 2026 + ARC Prize Paper Track Nov 2026 Forschungsziel Empirisch dokumentieren, dass sich die bei mathematischem Schlussfolgern beobachtete Single-Prompt-Grenze SAIR, arXiv:2504.18897 bei de...

gha-lab-a5c1876997-1

Riguardo KanaDojo | Schermate | UI & Filosofia di Design | Stack Tecnologico | Come Iniziare | Struttura del Progetto | Contribuire | Licenza | Riconoscimenti | Contatti & Collegamenti KanaDojo かな道場 Storico Stelle Una piattaforma esteticamente bella e minimalista per padroneggiare il Giapponese...

CVE-2026-12940-Langflow-Unauth-RCE

CVE-2026-12940 — Langflow OSS ≤ 1.10.1 RCE non autenticata iniezione di variabili d'ambiente MCP stdio Esecuzione remota di codice non autenticata in Langflow OSS fino alla 1.10.1. La blocklist delle variabili d'ambiente che protegge la configurazione dei server MCP stdio DANGEROUSENVVARS omette...