kubernetes-goat

Kubernetes Goat ✨ The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🚀 🙌 Refer to https://madhuakula.com/kubernetes-goat for the guide 📖 🧰 Setting up Kubernetes Goat Ensure you have admin access to the Kubernetes cluster...

Quick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload

The Quick Playground plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 1.3.1. The plugin exposes a blueprint REST API endpoint permissioncallback: returntrue that leaks the sync code, and an uploadimage endpoint that accepts file uploads with path...

CSPTPlayground

Playground de Path Traversal no Lado do Cliente !Doyensec Research...

csp-playground

Questo repository non contiene un README...

MASTG-Hacking-Playground

MASTG Hacking Playground Benvenuti nel MASTG Hacking Playground, che fa parte del progetto OWASP Mobile Application Security MAS. Il MASTG Hacking Playground è una raccolta di app mobili educative per iOS e Android, costruite intenzionalmente insicure per fornire una guida pratica a sviluppatori,...

Rusty-Playground

Rusty-Playground 🦀 Una raccolta di programmi Rust che illustra alcune tecniche di sicurezza offensiva e di evasione Tool| Descrizione| Riferimenti ---|---|--- ClipboardMon| Monitora gli appunti per rilevare modifiche e registra il contenuto degli appunti oppure copia file in base alle modifiche...

web-hacking-playground

Web Hacking Playground Descrizione Web Hacking Playground è un ambiente di hacking web controllato. Consiste in vulnerabilità trovate in casi reali, sia in penetration test che in programmi Bug Bounty. L'obiettivo è che gli utenti possano esercitarsi con esse e imparare a rilevarle e sfruttarle...

CVE-2020-24227

CVE-2020-24227 Playground Sessions - Memorizzazione delle credenziali utente in chiaro Playground Sessions v2.5.582 e versioni precedenti per Windows memorizza le credenziali utente in testo semplice, consentendo a chiunque abbia accesso a C:\Users\AppData\Roaming\Playground\Local...

CVE-2025-55315-detection-playground

Aqui estão alguns testes que podem ser realizados contra esses serviços para observar comportamentos diferentes nas rotas GET/POST entre as versões corrigida e não corrigida do Kestrel. GET contra a versão não corrigida envia 200 e o socket permanece aberto root@kitploit: printf 'GET /...

CVE-2025-51865

CVE-2025-51865 Schwachstellenbeschreibung Ai2 ist ein gemeinnütziges KI-Forschungsinstitut mit Sitz in Seattle. Ai2 bietet eine Playground-Webanwendung zum Chatten mit ihrem LLM an, die in ihrer Chat-Komponente anfällig für Insecure Direct Object Reference IDOR ist. Ein Angreifer kann dieses IDOR...

cve-2021-4034-playground

Dieses Repository hat keine README-Datei...

Vulnerability-Playground-CVE-2025-61922

Vulnerability-Playground-CVE-2025-61922 Este playground simula a vulnerabilidade Customer Checkout no PrestaShop...

dissect

dissect Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT part of NCC Group. This project is a meta package, it will install all other Dissect modules wi...

tooling-playground

tooling-playground Una raccolta di piccoli script e strumenti per la deoffuscazione e l'analisi di malware...

Kibana 9.3.x < 9.3.8 / 9.4.x < 9.4.4 Denial of Service (ESA-2026-91)

The version of Kibana installed on the remote host is 9.3.x prior to 9.3.8, or 9.4.x prior to 9.4.4. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-91 advisory. - Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service vi...

sadcloud

Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...

@godscene/playground-electron (1.7.22), @godscene/visualizer (1.7.22) potentially affected by unknown CVE via @godscene/web (1.7.22)

@godscene/web NPM version 1.7.22 is affected by a known vulnerability. The following packages have a transitive dependency on @godscene/web and may be impacted: - @godscene/playground-electron 1.7.22 - @godscene/visualizer 1.7.22 Source cves: unknown CVE Source advisory: SNYK:JS-GODSCENEWEB-18550...

Langflow < 1.9.2 Multiple Vulnerabilities

The version of Langflow installed on the remote host is prior to 1.9.2. It is, therefore, affected by multiple vulnerabilities: - The Shareable Playground feature enables execution of workflows by unauthenticated users. When the route /api/v1/buildpublictmp executes a flow, it allows providing...

GO-2026-5170 OpenFGA: Unauthenticated playground endpoint discloses preshared API key in HTML response in github.com/openfga/openfga

OpenFGA: Unauthenticated playground endpoint discloses preshared API key in HTML response in github.com/openfga/openfga...

PYSEC-2026-243

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, the "Shareable Playground" or "Public Flows" in code contains a critical RCE vulnerability. Shareable Playground feature works by enabling the execution of workflows by unauthenticated users, by accessi...