cve

CVE PoC Casi todos los PoC de CVEs disponibles públicamente. CVEs más populares actualmente...

vuln_test_repo_public_ruby_gemfile_cve-2016-6317

This repository does not have a README...

gitlab-component

gitlab-component Primeros pasos Para facilitarte el inicio con GitLab, aquí tienes una lista de pasos recomendados. ¿Ya eres un profesional? Solo edita este README.md y hazlo tuyo. ¿Quieres hacerlo fácil? Usa la plantilla al final. Añade tus archivos Crear o subir archivos Añadir archivos usando ...

Cyber-Defence

Introduction This repository holds information released publicly by NCC Group's Cyber Incident Response Team. Contact To request further information about anything in this repository please contact the team at [email protected]. To engage with our CIRT team due to a breach please contact...

detection-rules

Reglas de detección Detection Rules es el hogar de las reglas utilizadas por Elastic Security. Este repositorio se utiliza para el desarrollo, mantenimiento, pruebas, validación y publicación de reglas para el Motor de Detección de Elastic Security. Este repositorio se anunció por primera vez en ...

nccfsas

Introducción Este repositorio contiene información publicada públicamente por el equipo de Full Spectrum Attack Simulation FSAS de NCC Group...

public-pentesting-reports

Informes públicos de pruebas de penetración Un repositorio que contiene informes públicos de pruebas de penetración publicados por firmas consultoras y grupos de seguridad académicos. Mantenido por Julio @ Blaze Information Security https://www.blazeinfosec.com. Basado en una lista iniciada en 20...

security-advisories

Threat Lance Security Advisories Public security advisory repository by Threat Lance. CVE| Title ---|---...

semgrep-rules

Trail of Bits public Semgrep rules This repository contains Semgrep rules developed by Trail of Bits and made available to the public. They are part of our ongoing development efforts and are used in our security audits, vulnerability reseach, and internal projects. They will evolve over time as ...

wiz-research-iocs

Wiz Research Public IOC Database This repo contains public indicators of compromise aggregated by Wiz Research...

CVE-2022-36804

CVE-2022-36804 PoC This repo contains a simple proof of concept exploit for the recent BitBucket remote code execution vulnerability CVE-2022-36804. Exploitation of this vulnerability requires access to a repository on the target instance, if you don't have creds, the target will need to have...

exploits

Public Proof-of-Concept Exploits Repository This repository contains public proof-of-concept PoC exploits for various vulnerabilities that I have discovered over time. These PoC exploits are shared for educational purposes and to demonstrate the potential risks associated with the vulnerabilities...

Disclosures

Disclosures This repository contains my vulnerability reports which aren't under an NDA or restricted by VRP terms of service. Contents Fancy Product Designer Microsoft Xfinity...

CVE-2026-45258_1day_LPE_exploit

This repository does not have a README...

PT-2026-55456

Summary 9router uses a publicly known hardcoded string "9router-default-secret-change-me" as the fallback of JWT secret for all Dashboard session JWTs when the JWT SECRET environment variable is not set. Because this secret is committed in the public repository and unchanged across all releases,...

9router's Hardcoded Default fallback JWT Secret Allows Authentication Bypass

9router uses a publicly known hardcoded string "9router-default-secret-change-me" as the fallback of JWT secret for all Dashboard session JWTs when the JWTSECRET environment variable is not set. Because this secret is committed in the public repository and unchanged across all releases, any...

CVE-2026-14340

GitHub Enterprise Server (GitHub ES) suffers an incorrect authorization vulnerability (CVE-2026-14340) where a user-to-server token scoped to a GitHub App installation could perform write operations on public repositories outside the token’s scope. The root cause is an authorization check that on...

PT-2026-51628

Name of the Vulnerable Software and Affected Versions Gogs affected versions not specified Description Gogs contains an authorization bypass in its Git Smart HTTP handler for repository RPCs. The system determines the authorization policy based on the client-supplied service query parameter rathe...

CVE-2026-48243

Open ISES Tickets before 3.44.2 embeds a hardcoded WhitePages reverse-phone API key in wp1.php that is committed to the public source repository. Any actor with read access to the source tree can extract the key and use it to make third-party API calls billed to or rate-limited against the origin...

CVE-2026-48245

Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in tables.php that is committed to the public source repository. The key can be extracted by anyone with read access to the source and used to make Google Maps Platform requests billed against the original owner's Google Cloud...