ezviz_lan_rce

ezvizlanrce This repository contains the slides and PoC videos for the talk SADProtocol goes to Hollywood which was presented at DEF CON 31 Hardware Hacking Village. You can also find the docker image to build binaries that run on the camera and the proof of concept exploits for CVE-2023-34551 an...

Oracle Linux 9 : webkit2gtk3 (ELSA-2026-84583)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-84583 advisory. 2.54.1-1 - Update to 2.54.1 - Add patch to update ANGLE even further Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 9 : xorg-x11-server (ELSA-2026-84574)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-84574 advisory. 1.20.11-34.5 - CVE fix for: CVE-2026-93516, CVE-2026-93517, CVE-2026-93518, CVE-2026-93519, CVE-2026-93520 Resolves:...

CVE-Disclosures

Security Research & CVE Disclosures🔥 A repository documenting security vulnerabilities discovered in Free and Open Source Software FOSS by VETTRIVEL U There are only two types of companies: those that have been breached and know it, and those that have been breached and don’t know it yet. – ed...

graphql-threat-matrix

GraphQL Threat Matrix Why graphql-threat-matrix? graphql-threat-matrix was built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities across multiple GraphQL implementations. The differences in how GraphQL implementations interpret and conform to the...

nimbostratus-target

Nimbostratus target This repository holds a target infrastructure you can use for testing nimbostratus. This code deploys an Amazon AWS infrastructure which has various vulnerabilities and weak configuration settings which can be exploited using nimbostratus. If you're not sure what this is all...

fast-security-scanners

Fast security scanners/checks A small contribution to community : We use all these tools in security assessments and in our vulnerability monitoring service Check your domain for DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover Cach...

cve-2019-7192-check

QNAP Pre-Auth Root RCE CVE-2019-7192 CVE-2019-7195 Checker Usage: pip install requests ./CheckerforQNAPRCEcve2019719295.py /path/to/ip-port.txt Example file input: 1.2.3.4 8080 2.3.4.5 443 This tool takes a list of QNAP NASes' IPs and ports, and it tells if each device is vulnerable to the...

prithvi

Prithvi A Report Generation Tool for Security Assessment Usage This project of ours could be used for report generation and its very easy to use. It includes following features 1. We can add Owasp Types and recommendation with details. 2. We can add Multiple Projects and work on it separately. 3...

vulns

vulnerability reports HN Security's advisories. https://hnsecurity.it/ Solaris HNS-2022-01-dtprintinfo. Multiple vulnerabilities in Solaris dtprintinfo and libXm/libXpm CVE-2022-46285, CVE-2023-24039, CVE-2023-24040. Zyxel HNS-2022-02-zyxel-zysh. Multiple vulnerabilities in Zyxel zysh...

crlfmap

CRLFMap CRLFMap is a tool to find HTTP Splitting vulnerabilities Why? I wanted to write a tool in Golang for concurrency I wanted to be able to fuzz both parameters and paths Installation go get github.com/ryandamour/crlfmap Help Available Commands: help Help about any command scan A scanner for...

contrast

CodeSec by Contrast Security CodeSec delivers: The fastest and most accurate SAST scanner. Immediate and actionable results — scan code and serverless environments. A frictionless and seamless sign-in process with GitHub or Google Account. From start to finish in minutes. By running a scan on you...

retire.js

Retire.js Retire Status What you require you must also retire There are a plethora of JavaScript libraries for use on the Web and in Node.JS apps out there. This greatly simplifies development, but we need to stay up-to-date on security fixes. "Using Components with Known Vulnerabilities" is now ...

wsvuls

WSVuls Website vulnerability scanner detect issues outdated server software and insecure HTTP headers. What's WSVuls? WSVuls is a simple and powerful command line tool for Linux, Windows and macOS. It's designed for developers/testers and for those workers in IT who want to test vulnerabilities a...

capture-the-flag

Capture The Flag! Remaster Linux Live CD images for the purpose of creating ready to use security wargames with pre-installed vulnerabilities to exploit. Requirements You will need the following in order to build the Live CD using the scripts in this project: Linux, with root access using sudo gi...

mole

Mole A framework for identifying and exploiting out-of-band OOB vulnerabilities. Installation & Setup Mole Install Python = 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive Set an API key in...

SpringVulScan

SpringVulScan If you like it, give the author a star SpringVulScan -- Burp Suite Plugin Updates 1.1 1. Added custom root path scanning. 2. Right-click to send to SpringVulScan, custom dictionaries, etc. 3. Optimized detection logic. 4. Custom selection can be used not only for detecting route...

iac-scan-runner

IaC Scan Runner Service that scans your Infrastructure as Code for common vulnerabilities. Aspect| Information ---|--- Tool name| IaC Scan Runner Docker image| xscanner/runner PyPI package| iac-scan-runner Documentation| docs Contact us| [email protected] Table of Contents Description Runnin...

PrestaShop-CVE-2018-19126

PrestaShop Back Office Remote Code Execution CVE-2018-19126 This is the PoC for CVE-2018-19126, chaining multiple vulnerabilities in PrestaShop Back Office to trigger deserialization via phar to achieve remote code execution. Prerequisite: PrestaShop 1.6.x before 1.6.1.23 or 1.7.x before 1.7.4.4...

sylkie

sylkie A command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol. Getting Started Note: This project is still in the early phases of development. If you run into any problems, please consider...