vamp-forticheck

vamp-forticheck VampSecure Labs — Security Research Division Scanner di vulnerabilità critiche nei dispositivi FortiOS/FortiGate. Descrizione Strumento di audit di sicurezza per valutare l'esposizione dei dispositivi Fortinet rispetto a quattro vulnerabilità critiche pubblicamente documentate...

Malicious code in bluebook-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38ae875eb7a2571ff079de4af7c26c528a2ba047aad581ffe80fa27bfbe5d0d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-15000 Malicious code in bluebook-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38ae875eb7a2571ff079de4af7c26c528a2ba047aad581ffe80fa27bfbe5d0d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

network-system-penetration-testing-lab

🔐 Network & System Penetration Testing Lab\ =html ...

MSC-2026-11515

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Code injection testing – an attacker checks if...

MSC-2026-11514

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Code injection testing – an attacker checks if...

v8ctf-m150-exploit

v8CTF M150 exploit PoC The single-page proof of concept that...

assertj-core security update

An update is available for assertj-core. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A rich and intuitive set of strongly-typed assertions to use for unit...

CavalryHive

CavalryHive Autonomous web-security assessment toolkit for...

SSTImap 1.4

SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and exploit them, giving access to the operating system itself. This tool was developed to be used as an interactive penetration testing tool for SSTI detection...

Design-and-Evaluation-of-an-MCP-Governed-Pentest-Agent

Design-and-Evaluation-of-an-MCP-Governed-Pentest-Agent Dissert...

Nettacker v0.4.1

OWASP Nettacker DISCLAIMER THIS SOFTWARE WAS CREATED FOR AUTOMATED PENETRATION TESTING AND INFORMATION GATHERING. YOU MUST USE THIS SOFTWARE IN A RESPONSIBLE AND ETHICAL MANNER. DO NOT TARGET SYSTEMS OR APPLICATIONS WITHOUT OBTAINING PERMISSIONS OR CONSENT FROM THE SYSTEM OWNERS OR ADMINISTRATORS...

RHEL 10 : assertj-core (RHSA-2026:59372)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59372 advisory. A rich and intuitive set of strongly-typed assertions to use for unit testing either with JUnit or TestNG. Security Fixes: assertj: AssertJ:...

NeuroSploit v4.0.0

🧠 NeuroSploit v4.0.0 Autonomous, multi-model penetration-testing harness — Rust, CLI-only. by Joas A Santos & Red Team Leaders ⭐ If this is useful, star the repo — it helps a lot. 📖 New here? Read thefull Tutorial & User Guide → — every mode, flag, config and example explained. Version-by-version...

Dark-Moon v1.3.1

The Open-Source AI-Powered Autonomous Penetration Testing Platform The only autonomous AI pentester where the model never sees your real IPs, hostnames or credentials. As featured in Help Net Security · Cyber Security News · SecurityBrief · LinuxLinks · IT Brief · ChannelLife Full Documentation ·...

xss-tools

xss-tools Authorized penetration testing / security researc...

waf-checker v1.1.0

WAF Checker This project helps you check how well your Web Application Firewall WAF protects your product against common web attacks. It can be run as a Cloudflare Worker with a built-in interactive Web UI or as a standalone Node.js CLI tool. Features Core Testing Enter a target URL, pick HTTP...

notevault-vapt-assessment

Black-Box VAPT Assessment — NoteVault A self-contained, repro...

cve-autopsy

CVE Reversing Lab A personal training repo for practicing "N-...

Malicious Package

Overview solidity-testing-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...