988938 matches found
stylesmuggler
StyleSmuggler HTTP PoC Приватный исследовательский репозиторий для воспроизведения StyleSmuggler исключительно по HTTP, CVE-2026-75650, против локального лабораторного стенда Magento Open Source. Полное техническое описание читайте в Magento StyleSmuggler RCE: Report Poisoning to Code Execution...
red-clippy
Red Clippy Your agent tests. Red Clippy keeps the record. Open-source pentest management built to be operated by an AI agent. Connect it to Claude Code over MCP and it runs the engagement alongside you: scope and assets, recon observations, methodology coverage, and findings with CVSS and evidenc...
spyder-osint
Spyder🕷 Spyder is a universal open-source intelligence OSINT research tool that performs searches using large global databases. Features 1. Phone number information 2. IP address information 3. SocialsFacebook, Instagram, Telegram, Twitter information 4. Email information & Email bomber 5. Person...
EUVD-2026-92050
LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers to redirect users by supplying an unvalidated redirecturl parameter to EmailTemplateController builder and builderEdit. Attackers can send crafted builder links to logged-in users with email template...
liboqs
liboqs liboqs is an open source C library for quantum-safe cryptographic algorithms. liboqs Overview Status Supported Algorithms Key encapsulation mechanisms Signature schemes Stateful signature schemes Limitations and Security Platform limitations Support limitations Quickstart Linux and Mac...
reapoc
reapoc 오픈소스 PoC 및 취약 대상 저장소. 우리는 다양한 정규화된 PoC와 이를 검증할 취약한 대상을 수집하는 것을 목표로 합니다. 현재 reapoc는 다음 PoC를 지원합니다: pocsploit: 제 새롭고 간단하며 스마트한 PoC 프레임워크입니다. 환영합니다! nuclei: 세계적으로 유명한 yaml 기반 프레임워크 xray: yaml 기반 pocsuite3: python PoC 프레임워크 goby: golang PoC 프레임워크 주제 Log4j CVE 없음, 그러나 중요 No-CVE 통계 전체 CVE|...
CVE-2026-105127
LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password requests, triggering DNS lookups and paid AbstractAPI verification calls. Unauthenticated attackers can submit arbitrary addresses to exhaust the verification quota, making...
CVE-2026-105128
LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers to redirect users by supplying an unvalidated redirecturl parameter to EmailTemplateController builder and builderEdit. Attackers can send crafted builder links to logged-in users with email template...
Characterizing Security Effects of OSS Vulnerabilities in Agent Systems
Software agents increasingly depend on open-source components when executing tools and interacting with external systems. Security flaws in these dependencies may therefore influence more than the software process in which they occur: their consequences can be carried through tool outputs, agent...
CVE-2026-105128: URL Redirection to Untrusted Site
LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers to redirect users by supplying an unvalidated redirecturl parameter to EmailTemplateController builder and builderEdit. Attackers can send crafted builder links to logged-in users with email template...
CVE-2026-105128 LaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_url
LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers to redirect users by supplying an unvalidated redirecturl parameter to EmailTemplateController builder and builderEdit. Attackers can send crafted builder links to logged-in users with email template...
CVE-2026-105128 LaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_url
LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers to redirect users by supplying an unvalidated redirecturl parameter to EmailTemplateController builder and builderEdit. Attackers can send crafted builder links to logged-in users with email template...
CVE-2026-105128
LaraDashboard versions prior to 1.4.8 are vulnerable to an open redirect vulnerability within the EmailTemplateController (specifically the builder and builderEdit functions). The root cause is the processing of an unvalidated redirect_url parameter. Remote attackers can distribute crafted links ...
CVE-2026-105128 LaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_url
LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers to redirect users by supplying an unvalidated redirecturl parameter to EmailTemplateController builder and builderEdit. Attackers can send crafted builder links to logged-in users with email template...
irdoc-app
IRDoc - Платформа документирования реагирования на инциденты Документирование IR с приоритетом временной шкалы, визуальный конструктор отчётов, автосинхронизация с SharePoint и сводки с помощью ИИ. Что такое IRDoc? IRDoc — это платформа документирования реагирования на инциденты с открытым ядром,...
CVE-2025-32433-PoC-Analysis
FAQ - CVE-2025-32433 1. What is Erlang OTP? Erlang is a general-purpose programming language. OTP Open Telecom Platform is a collection of middleware, libraries, and design principles used for fault tolerance using the BEAM VPN. 2. Why is this version of Erlang vulnerable? OTP 26.2.5.10 is...
OFFENSIVE-SECURITY
This repository does not have a README...
ARES
Платформа оркестрации red team-операций под управлением оператора и непрерывной проверки защищённости Открытая платформа, дающая корпоративным red-командам, MSSP и центрам безопасности возможность проводить целевые наступательные операции, обнаруживать детерминированные пути атак и непрерывно...