69 matches found
kubestriker
A Blazing fast Security Auditing tool for kubernetes!! Overview & Journey of Kubestriker Kubestriker is a platform-agnostic tool designed to tackle Kuberenetes cluster security issues due to misconfigurations and will help strengthen the overall IT infrastructure of any organisation. It performs...
red-detector
Red-Detector Description Scan your EC2 instance to find its vulnerabilities using Vuls https://vuls.io/en/. Audit your EC2 instance to find security misconfigurations using Lynis https://cisofy.com/solutions/lynis. Scan your EC2 instance for signs of a rootkit using Chkrootkit...
Kubernetes Misconfigurations in the Wild: Taxonomy, Evolution, and Automated Repair with Large Language Models
Kubernetes is widely used to orchestrate cloud-native applications, yet its declarative configuration model often introduces security misconfigurations that threaten system reliability. Despite available detection tools, misconfiguration patterns and scalable remediation remain insufficiently...
Red-Team-vs-Blue-Team-Security-Simulation
Red Team vs Blue Team Security Simulation An interactive secu...
Strapi CMS 5.36.1 Security Misconfiguration Detection Scanner
This is a scanner designed to identify potential security misconfigurations in Strapi CMS instances without performing exploitation or data extraction...
CodeAlpha_Bug-Bounties-Tool
CodeAlphaBug-Bounties-Tool A lightweight bug bounty automatio...
PT-2026-34476
Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description A flaw in the ChownExecutor used by chown and chgrp causes these utilities to return an incorrect exit code during recursive operations. The final exit code is determined only by the...
WordPress Vulnerability Scanner
Scans for WordPress-specific vulnerabilities, version information, exposed files, and security misconfigurations !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.http.httpclient import Httpclient import re import urllib.parse class ModuleAuxiliary, Httpclient:...
Drupal Vulnerability Scanner
Scans for Drupal-specific vulnerabilities, version information, exposed files, and security misconfigurations !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.http.httpclient import Httpclient import re import urllib.parse class ModuleAuxiliary, Httpclient: inf...
Exploit for CVE-2025-8489
100-days-challenge-day-21--WP scan WP Scan helped identify co...
Web-Security-Assessment-Suite-based-on-OWASP-Top-10
Web-Security-Assessment-Suite-based-on-OWASP-Top-10 A...
EUVD-2016-4090
Malware in sbrugna...
venus_probe() Function Heap Buffer Overflow
Vulnerability of the venusprobe function in the drivers/media/platform/qcom/venus/core.c module – The Linux kernel’s multimedia device support driver has vulnerabilities related to security configuration errors. Exploiting this vulnerability could allow an attacker to access protected information...
CVE-2022-22447
IBM Disconnected Log Collector 1.0 through 1.8.2 is vulnerable to potential security misconfigurations that could disclose unintended information. IBM X-Force ID: 224648...
Case Study: Are CSRF Tokens Sufficient in Preventing CSRF Attacks?
Explore how relying on CSRF tokens as a security measure against CSRF attacks is a recommended best practice, but in some cases, they are simply not enough. Introduction As per the Open Web Application Security Project OWASP, CSRF vulnerabilities are recognized as a significant threat and are...
Cross-Site Request Forgery (CSRF)
typo3/cms-beuser is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to improper handling of state-changing actions in downstream components, where HTTP GET submissions are incorrectly accepted instead of enforcing the appropriate HTTP method. Misconfigurations, such as...
PHP cgi.force_redirect Bypass
The vulnerability of the cgi.forceredirect script in the PHP programming language is related to security configuration errors. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary commands...
Notes Component Disclosure Sensitive Information
The vulnerability of the Notes component in iPadOS and iOS operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...
ServiceNow Data Exposure: A Wake-Up Call for Companies
Earlier this week, ServiceNow announced on its support site that misconfigurations within the platform could result in "unintended access" to sensitive data. For organizations that use ServiceNow, this security exposure is a critical concern that could have resulted in major data leakage of...
