480 matches found
Research-on-CVE-2025-9998
Research-on-CVE-2025-9998 vulnerability in CVE 2025-9998 and solution for those vulnerability with help artificial intelligence...
CVE-2022-46164-poc
CVE-2022-46164-poc Exploit bΓ‘sico de POC para CVE-2022-46164...
Detecting-CVE-2018-15708-Vulnerabilities
Detecting-CVE-2018-15708-Vulnerabilities...
cve-2016-2431
cve-2016-2431 Qualcomm TrustZone kernel privilege escalation...
cve-2022-27666-exploits
cve-2022-27666-exploits Hay 2 mΓ©todos de explotaciΓ³n que explotan CVE-2022-27666. Para mΓ‘s informaciΓ³n sobre cΓ³mo usar estas bases de cΓ³digo, por favor consulta mi blog aquΓ...
CVE-2018-18714
CVE-2018-18714 PoC code for CVE-2018-18714 You can find out more @ https://downwithup.github.io/CVEPosts.html Vulnerable Software Download @: https://www.iobit.com/en/malware-fighter.php...
echteeteepee
Herramientas de Prueba de Vulnerabilidades de Desync HTTP/1 Este repositorio contiene herramientas de seguridad defensiva para detectar vulnerabilidades de contrabando de solicitudes desync HTTP/1 basadas en la innovadora investigaciΓ³n de James Kettle de PortSwigger. AtribuciΓ³n de la InvestigaciΓ³...
CVE-2025-48595
cve-id β‘ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Example usage: root@kitploit: Install dependencies Run the...
CVE-2025-15467
CVE-2025-15467 discovery tool powershell...
CVE-2023-34362-Defense-Package
This repository does not have a README...
IOCs
This repository does not have a README...
YaraRules
YaraRules I share YARA rules in this repo...
Hacking-Tools β Updated!
Hacking Tools A curated list of penetration testing and ethical hacking tools, organized by category. This collection includes Kali Linux tools and other notable utilities. Supporters .png?raw=true .png?raw=true Table of Contents π Information Gathering π Vulnerability Analysis π₯ Exploitation Too...
CVE-2026-16313
A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...
The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes
The Gentlemen ransomware-as-a-service RaaS operation is actively developing and maintaining a suite of endpoint detection and response EDR killers that it hands out to affiliates for impairing system defenses before deploying the encryptor. This mature portfolio of EDR-terminating tools is center...
From Assistive to Agentic: The AI Shift That's Redefining Threat Management
Introduction The average enterprise security team has 40 or more security tools, giving a lot of visibility into internal telemetry and asset data. But often, these tools are working in siloes, generating overlapping alerts and data. And yet, breach dwell times remain stubbornly long 43 days,...
AI is accelerating cyberattacksβhereβs how to stay ahead
In March, we wrote that identity security has become the new pressure point for modern cyberattacks. Since then, AI has only increased that pressure. AI helps cyberattackers move faster across the attack chain: personalizing social engineering at scale, automating reconnaissance, analyzing leaked...
A Bayesian Network Approach for Enhancing Security-Focused Decision Support Systems
The adoption and integration of heterogeneous stacks in most of today's open-source based networks brings clear benefits like interoperability and availability of advanced features. Yet, on the other hand the increasing number of interconnecting components and moving parts requires maintaining an...
Microsoft Build 2026: Securing code, agents, and models across the development lifecycle
In this article 1. Secure your code 2. Secure your agents 3. Trust agents with your data 4. Secure your models 5. Trust starts with security Today, developers and security teams are caught in growing tension. AI is accelerating development and introducing new issues around insecure code, opaque...
Malicious code in wallet-security-checker (npm)
A coordinated supply-chain attack comprising 10 npm packages published by maintainer ddjidd5640 [email protected] within a 48-hour window 2026-05-19T03:55Z β 2026-05-21T04:31Z. All packages masquerade as legitimate Web3/DeFi developer security tools MCP servers while silently exfiltrating...