CISA-KEV

CISA-KEV Executive Summary This repository provides automated tracking and analysis of both CISA's KEV and VulnCheck KEV catalogs, cross-referenced with Nuclei security templates and public proof-of-concept exploits. By integrating VulnCheck KEV, coverage expands from 1,557 to 4,720 total unique...

Nuclei-Templates-Collection

https://github.com/0xSojalSec/templates-nuclei-Oracle-OAM---XSS https://gist.github.com/ResistanceIsUseless/e46848f67706a8aa1205c9d2866bff31 https://github.com/0xElkot/My-Nuclei-Templates https://github.com/0xSojalSec/Nuclei-Templates-API-Linkfinder https://github.com/0xSojalSec/templatesallnucle...

DetectionLabELK

DetectionLabELK DetectionLabELK — это форк DetectionLab от Криса Лонга, использующий стек ELK вместо Splunk. Описание: DetectionLabELK — идеальная лаборатория, если вы хотите научиться эффективно строить системы обнаружения. Она создана с учётом потребностей защитников. Её основная цель — позволи...

bissap

bissap %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%. % % % .: % .===% . :: % :%%=====%%%%%%: % %%%= =====%============%%%-% = % = =====-================ % BBBBBBBBBBBBBBBBB IIIIIIIIII SSSSSSSSSSSSSSS SSSSSSSSSSSSSSS AAA PPPPPPPPPPPPPPPPP = : =====================% + B::::::::::::::::B I::::::::I...

CyberRange

Aperçu : Ce projet CyberRange représente le premier plan de Cyber Range open-source au monde. Ce projet fournit un cadre d'amorçage pour une suite complète d'outils offensifs, défensifs, de rétro-ingénierie et de renseignement de sécurité dans un laboratoire de recherche privé utilisant le cloud...

xioc

xioc Extrait les indicateurs de compromission d'un texte, y compris les versions « échappées » comme hxxp://banana.com, 1.1.1.1 et phish at malicious dot com. Installation Téléchargez un binaire précompilé depuis https://github.com/assafmo/xioc/releases Ou... Utilisez go get : go get -u...

Python

파이썬...

AtlassianPwn

이 저장소에는 README가 없습니다...

pentestforge

PentestForge Combine four heterogeneous security projects i...

vuln_apps

vulnapps 一系列故意存在漏洞的应用，用于将安全工具（crossfyre、Burp、ZAP、nuclei 等）指向目标。此文件夹不包含任何应用源码 ，只有骨架定义和一个小型管理器。每个应用都作为自己独立的容器栈运行，因此不会相互冲突。 这里的一切都是故意有漏洞的。仅供本地测试。 请勿将这些暴露到互联网或不受信任的网络。所有端口都绑定到 127.0.0.1。 工作原理 docker compose up 启动一个容器：vulnappsmanager （控制平面）。它本身不会启动任何漏洞应用。 你通过管理器来驱动整个应用集群。每个应用由 apps// 下的一个骨架文件夹（一个...

GO-2026-6255 vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, kubescape, cloudbeat, kubescape-server-fips, conftest, trivy, podman, kubescape-server, cloudbeat-fips, skaffold, kaniko, skaffold-fips, scorecard, livekit-cli, conftest-fips, trivy-fips, kaniko-fips, zot, docker-fips, guac, podman-fips...

GO-2026-6213 vulnerabilities

Vulnerabilities for packages: zot, pulumi-language-java, k9s, xeol, kargo, kaniko, nuclei, guac, cerbos, trufflehog, witness, gitlab-runner, kots, pulumi-language-dotnet, steampipe, argo-cd, grafana-alloy, dagger, flux-image-automation-controller, gitaly, rancher-fleet, trivy,...

CVE-2025-71339

Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.evallength gadget in pickle reduce methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded by victims who trust Picklescan's safety validation...

CVE-2026-53655

node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...

CVE-2026-53655

node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...

CVE-2026-53655 node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)

node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...

CVE-2026-53655 node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)

node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...

PT-2026-49577

Name of the Vulnerable Software and Affected Versions node-tar versions prior to 7.5.16 Description An interpretation differential exists in how the software parses tar archives. The issue occurs because the library applies a PAX extended header's size= record and other PAX overrides to the next...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: grafana-mimir, git-lfs, gitness, istio, mkcert, s5cmd, envoy-gateway, sonobuoy, nsc, keda, step-ca, authservice, otel-cli, gcsfuse, grafana, emissary, sftpgo-plugin-eventstore, osv-scanner, cert-manager, mattermost, nri-elasticsearch, redka, nri-discovery-kubernetes,...

EUVD-2026-3672

go-tuf is a Go implementation of The Update Framework TUF. Starting in version 2.0.0 and prior to version 2.3.1, a compromised or misconfigured TUF repository can have the configured value of signature thresholds set to 0, which effectively disables signature verification. This can lead to...