853 matches found
How we keep Opera users and products safe: Inside the role of Head of Security
Security How we keep Opera users and products safe: Inside the role of Head of Security Share May 8th, 2026 We usually think of security only when something goes wrong – whether it’s a suspicious login we noticed, a strange pop-up we got while browsing, or a headline we read about a data breach...
web-app-pentest-playbook
Web Application Pentest Playbook A structured methodology and...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
🛡️ CVE-2026-31431-Linux-Copy-Fail - Execute Custom Shellcode W...
WebPentestKit2
\ 🛡️ WebPentestKit2 \Advanced Web Application Exploitatio...
VAPT-Practice-Labs
🔐 VAPT Practice Labs This repository contains my hands-on Vul...
Benefits of Breach and Attack Simulation in Vulnerability Management
Vulnerability management teams face an overwhelming challenge: tens of thousands of CVEs published annually, limited remediation capacity, and no reliable way to separate genuine threats from background noise. Traditional approaches rely on CVSS scores and scanner output, but these methods lack t...
Exploit for CVE-2026-41940
Usage python 0day.py -f test.txt --external-only --show...
SafeVault
SafeVault - Security and Authentication Capstone Project A pr...
📄 MISP 2.5.27 Workflow Engine Cross Site Scripting
This Metasploit auxiliary module targets a potential stored cross site scripting vulnerability in the MISP Workflow Engine. It is designed to interact with the MISP API, create workflows, and inject malicious payloads into workflow data fields...
EUVD-2026-25160
PySpector is a static analysis security testing SAST Framework engineered for modern Python development workflows. The plugin security validator in PySpector uses AST-based static analysis to prevent dangerous code from being loaded as plugins. Prior to version 0.1.8, the blocklist implemented in...
📄 Eclipse Che WebSocket Machine-Exec Remote Code Execution
This Python script is a WebSocket-based client designed to interact with an Eclipse Che / DevSpaces machine-exec service and test for an unauthenticated remote code execution vulnerability...
DNG File Generator for Security Testing Masked RGB Tables
This Python script is a research-oriented DNG Digital Negative file generator designed to build a specially crafted image file with controlled metadata structures for security testing of DNG processing engines...
DNG File Generator for Security Testing
This C++ program is a complex security research tool CVE-2026-27280 designed to manually construct a DNG Digital Negative image file with fully controlled internal structures TIFF/DNG headers, IFD tables, and metadata tags...
Camaleon CMS 2.9.1 Automated Admin Login, Version Detection, and Profile Update Script
This is a version detection and profile updating script for Camaleon CMS. It does not exploit any issue but can be useful for security testing to see if a vulnerable version is in use...
Exploit for CVE-2026-3462
CVE-2026-3462 Acrobat Reader | Improperly Controlled Modifica...
MetInfo CMS 8.1 XML Endpoint Behavior Analysis Tool
This script is a PHP-based analysis tool designed to interact with MetInfo CMS 8.1 endpoints through an XML-based interface. It uses cURL to send structured requests to a specific MetInfo module endpoint and evaluates the HTTP responses for basic fingerprinting indicators such as known keywords a...
Luban-2040
Luban 2040 v1 Advanced CVE & Exploit Finder Author: m...
Exploit for Special Element Injection in Apache Apisix
CVE-2026-31908 - Apache APISIX Header Injection Exploit !Se...