270838 matches found
kemon
Kemon An Open Source Pre and Post Callback-based Framework for macOS Kernel Monitoring. Breaking News - 08/28/2019 macOS Catalina 10.15 Beta 7 Release Notes https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes Endpoint Security The kauth API has been...
Crypton
Crypton Crypton is an educational library to learn and practice Offensive and Defensive Cryptography. It is basically a collection of explanation and implementation of all the existing vulnerabilities and attacks on various Encryption Systems Symmetric and Asymmetric, Digital Signatures, Message...
nginxpwner
Nginxpwner Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities. Install: cd /opt git clone https://github.com/stark0de/nginxpwner cd nginxpwner chmod +x install.sh ./install.sh Install using Docker git clone https://github.com/stark0de/nginxpwner cd nginxpwn...
jfscan
!CAUTION ⚠️ Project Deprecated This project has been rewritten in Go for better performance and features. Please use the new version here: nullt3r/massmap Description Killing features Unleash the power of Nmap with Masscan for large-scale scans Scan targets using domain names and other formats...
metabadger
Metabadger Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 IMDSv2. Metabadger Purpose and functionality Diagnose and evaluate your current usage of the AWS Instance Metadata Service along with understanding how the service works Prepare you t...
Rocky Linux 9.6 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ciqsa-2026_1641)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261641 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 9.6. It addresses 24 CVEs: CVE-2026-53002, CVE-2026-63919, CVE-2026-74746,...
Debian dsa-6568 : ata-modules-6.12.111+deb13-armmp-di - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6568 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6568-1 [email protected] https://www.debian.org/securit...
Rocky Linux 9.6 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792140497)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792140497 advisory. - Rejected reason: This CVE ID has been rejected as a duplicate. CVE-2026-105398, CVE-2026-105399, CVE-2026-105403, CVE-2026-10540...
kev-data
Welcome to kev-data This repository is home to the data files that make up the Known Exploited Vulnerabilities KEV catalog. The data is originally sourced from https://www.cisa.gov/known-exploited-vulnerabilities-catalog, which is short linked at https://cisa.gov/kev. Interactive dashboard to...
rustproofing-linux
Rustproofing Linux Porting Linux Kernel Bugs to Rust This source code repository is a collection of examples accompanying the blog post at https://research.nccgroup.com/?p=18577. DO NOT USE these examples for anything but following the blog post. They intentionally contain vulnerabilities, and ev...
CVE-2026-28496
CVE-2026-27604 + CVE-2026-28496 — FOSSBilling Pre-Auth RCE Chain Executive Summary This repository contains a local Docker lab for reproducing and validating the FOSSBilling Pre-Auth RCE chain, composed of two chained vulnerabilities: CVE| Type| CVSS v4| GHSA| Description ---|---|---|---|---...
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 5, 2026 to October 11, 2026)
Last week, there were 655 vulnerabilities disclosed in 406 WordPress Plugins and 100 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 236 Vulnerability Researchers that contributed to WordPress Security last week. Review those...
CVE-2026-33453
Apache Camel 4.18.0 — CVE Security Assessment Three critical vulnerabilities in Apache Camel 4.18.0, independently discovered and validated with working proof-of-concept exploits. CVE| Component| Type| CVSS| Verdict ---|---|---|---|--- CVE-2026-33453| camel-coap| Header Injection → RCE| 10.0...
CVE-2025-61319
CVE-2025-61319: Stored XSS in ReNgine 2. After scan completion, open the Vulnerabilities tab in ReNgine and view results. 3. The payload executes in the admin's browser context. Affected versions ReNgine = 2.2.0 Remediation Sanitize and escape user-supplied input before rendering scan results...
Browser-Exploits
Browser-Exploits Some Generic Browser Exploits For Educational Purposes Only...
exploits
exploits Proof-of-concept scripts for several different security vulnerabilities...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: HID: hid-pl: handling probe errors Errors in the init process must be reported back; otherwise, we will follow a NULL pointer the first time FF is used...
CLSA-2026-1792079446 TuxCare security update for org.springframework.security (15 CVEs)
TuxCare rebuilt 18 org.springframework.security packages to address 15 CVEs. Fixed in 6.0.7-tuxcare.1...