8255 matches found
wesng
Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...
jadx-magic-strings
JADX Magic Strings Plugin Плагин JADX, который извлекает информацию из строковых констант. Возможности Плагин извлекает и анализирует строковые константы из декомпилированного кода, чтобы найти: 1. Ссылки на исходные файлы : Обнаруживает ссылки на исходные файлы Java/Kotlin .java, .kt, .kts,...
VulFi
VulFi v3.0 Введение Инструмент VulFi Vulnerability Finder представляет собой плагин для IDA Pro, который можно использовать для помощи в поиске уязвимостей в бинарных файлах. Его основная цель — предоставить единое представление со всеми перекрёстными ссылками на наиболее интересные функции такие...
cve-2026-24688
CVE-2026-24688 - pypdf - Vulnérabilité DoS par référence circulaire Ce dépôt contient un code de preuve de concept pour déclencher CVE-2026-24688. Résumé Vulnérabilité critique de déni de service dans la logique d'analyse des contours signets de pypdf. Lors du traitement d'un PDF avec des...
Cheatsheets
Cheat sheet Cheat sheet di Penetration Testing/Sicurezza che ho raccolto negli anni...
0l4bs
0l4bs Cross-site scripting labs for web application security enthusiasts List of Chall : root@kitploit: Chall 1 | URL Chall 2 | Form Chall 3 | User-Agent Chall 4 | Referrer Chall 5 | Cookie Chall 6 | LocalStorage Chall 7 | Login Page Chall 8 | File Upload Chall 9 | Base64 Encoding Chall 10 |...
Galaxy-Bugbounty-Checklist
Note Prova a creare la migliore checklist per Bug Bounty. Tutte le checklist includono riferimenti. Sentiti libero di contattarmi a maximus0xday at gmail se hai domande. Lista delle cose da fare: Account Takeover CSRF Bypass Http Request Smuggling OSINT OAuth...
linux-malware
linux-malware Vista scorrevole degli aggiornamenti degli ultimi 7 giorni da questo repository Proposte? Stampa/accademia https://en.wikipedia.org/wiki/Linuxmalware 17 - Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Lateral Movement,...
atomic-red-team
Atomic Red Team Atomic Red Team™ is a library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments. Get started You can execute atomic tests directly from the command line, no installation required. S...
Android-Forensics-References
Riferimenti di Android Forensics Ultimo aggiornamento: 22 settembre 2025 Partizione USERDATA Cartella "/log" /log/wifi/iwc/iwcdump.txt Cellebrite CTF 2023 Riepilogo: Risposte sull'Android di Sharon https://cellebrite.com/en/cellebrite-ctf-2023-recap-sharons-android/ /log/netstats /log/batterystat...
CVE-2025-55182-poc
CVE-2025-55182 Vulnerabilità del protocollo React Flight che consente l'attraversamento della catena dei prototipi tramite riferimenti a chunk. Test eseguito contro bullshit-react-project. Rilevamento Questo è leggermente obsoleto dato che il vero PoC è stato ora rivelato. Vite RSC : bash...
CVE-2026-75931 fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
fast-uri is a URI parser for Node.js. It canonicalizes a host to its ASCII form only when the input carries an explicit scheme, so a scheme-relative reference such as a host preceded by two slashes is returned with its host verbatim and no error set. As a result fast-uri's own entry points disagr...
hacker-roadmap
Questa repository offre una panoramica di ciò che serve per imparare il penetration testing e una raccolta di strumenti, risorse e riferimenti per praticare l'hacking etico. La maggior parte degli strumenti sono compatibili con UNIX, gratuiti e open source. Stato Questo progetto è stato chiuso e...
CVE-2026-40345 deepmerge-ts: Stack exhaustion when merging recursive object graphs
deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. Prior to 8.0.0, the deepmerge, deepmergeCustom, deepmergeInto, and deepmergeIntoCustom APIs do not track visited objects or object pairs when recursively merging records. When two input values...
CVE-2026-18544
IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...
EUVD-2026-62851
IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement due to improper authorization of pod owner references...
GO-2026-6115 WITHDRAWN: Multiple denial of service vulnerabilities in rsc.io/pdf and forks
This report has been withdrawn with reason: "Report mistakenly added without having CVE / GHSA associated". The PDF parser in rsc.io/pdf and its downstream forks github.com/ledongthuc/pdf and github.com/dslipak/pdf contains multiple defects when parsing untrusted input: - Unchecked /Size, /Index,...
