693 matches found
Exploit for Improper Handling of Exceptional Conditions in Apache Struts
Web Vulnerability to POC Generator Web Vulnerability to POC G...
Exploit for Expression Language Injection in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4j2-BugMaker CVE-2021-44228 Log4Shell Vulnerability Dem...
XSS-Library
XSS Payloads Library A comprehensive collection of Cross-Si...
primilinary-exploit-searching-dork
primilinary-exploit-searching-dork This file contains an exten...
Towards a Blockchain-Based CI/CD Framework to Enhance Security in Cloud Environments
Security is becoming a pivotal point in cloud platforms. Several divisions, such as business organisations, health care, government, etc., have experienced cyber-attacks on their infrastructures. This research focuses on security issues within Continuous Integration and Deployment CI/CD pipelines...
EUVD-2025-34502
The XStore theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 9.5.4 via theetajaxrequiredpluginspopup function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary .php files on t...
Web-Application-Security-Testing
Web Application Security Testing ā DVWA Lab End-to-end web ap...
Exploit for Improper Authorization in Vercel Next.Js
CVEs ā Exploits/CVE Identifiers Repository A collection of pr...
Exploit for Use After Free in Redis
CVE-2025-49844 RediShell - Lab Environment A practical lab...
EUVD-2006-2094
Malware in sbrugna...
EUVD-2017-2250
Malware in sbrugna...
Remote-Local-Exploitation-Lab-
š Remote & Local Exploitation Lab š Objective Exploit a vu...
EUVD-2024-2358
Malicious code in bioql PyPI...
EUVD-2025-4563
Malicious code in bioql PyPI...
pentest-automation-suite
Penetration Testing Automation Tools š“ Automated Penetratio...
STAF: Leveraging LLMs for Automated Attack Tree-Based Security Test Generation
In modern automotive development, security testing is critical for safeguarding systems against increasingly advanced threats. Attack trees are widely used to systematically represent potential attack vectors, but generating comprehensive test cases from these trees remains a labor-intensive,...
xss.yaml
It is an offensive tool for web application security testing. Th...
Janusec-Application-Gateway
It is an offensive tool for web application security testing. The repository contains a tool for testing web application security, specifically for identifying vulnerabilities in web applications. The tool is designed to test for various types of vulnerabilities, including SQL injection, cross-si...
disable_eval
This is a Ruby gem called "disableeval" that provides a method to protect against eval-related security vulnerabilities. The gem is designed to prevent remote code execution RCE attacks by disabling the eval method and its variants. The gem provides two main components: 1. A Rack middleware that...
marshalsec
It is an offensive tool for Java deserialization vulnerabilities. The repository contains a Java tool called "marshalsec" that exploits Java object deserialization vulnerabilities, allowing for remote code execution. The tool includes payload generators for various Java serialization libraries,...