138 matches found
wordpress-hacking
WordPress Hacking 워드프레스와 그 플러그인 및 테마 해킹에 유용한 리소스입니다. 버그 바운티 워드프레스 취약점을 찾고 보고하는 일에 열정이 있다면, 다음 버그 바운티 프로그램에 참여해 보세요: Wordfence 및 Patchstack. 제 Wordfence 링크를 통해 가입하시면 취약점 5개를 보고할 때 저에게 소액의 보너스가 지급되어, 제가 커뮤니티를 위한 도구와 리소스 작업을 지원하는 데 도움이 됩니다. 감사합니다! 플러그인 워드프레스 플러그인 및 테마의 동적 분석과 해킹을 돕기 위해 설계된 플러그인을...
purify
Purify 취약점 보고서 관리를 위한 올인원 도구 🎮 데모 📃 문서 📹 빠른 Vimeo 설명 Purify의 목표는 다양한 사용자 정의 포함 도구에서 전달된 취약점을 관리하는 워크플로우를 간소화하는 사용하기 쉽고 효율적인 도구가 되는 것입니다. Purify는 도구에 구애받지 않는 애플리케이션을 지향합니다. 도구 독립성을 통해 모든 도구 세트의 결과/발견/보고서를 분석할 수 있습니다. 기술적으로 업로드하려는 보고서는 다음 중 하나여야 합니다: JSON 파일 XML 파일 JSON 객체 대부분의 웹훅은 별도의 JSON 객체로 이벤트...
security-advisories
security-advisories Me Chidubem ChukwuTerminal Venom이 게시한 공개 보안 권고로, 오픈소스 및 타사 소프트웨어에 대한 CVE 공개 및 취약점 보고서를 포함합니다...
reports
이 폴더에는 제가 시간이 지나면서 공개한 일부 취약점 보고서가 포함되어 있습니다. Barracuda Networks Load Balancer ADC - 다중 취약점 CVE-2014-8426, CVE-2014-8428 Aruba ClearPass Policy Manager - 저장형 XSS CVE-2015-1389 Network Solution WebMail - 다중 취약점 책임 공개 Tuleap - SQL 인젝션 CVE-2018-7538 Telecom Italia 버그 바운티 프로그램 - Ngeener Web - SQLi 및 ...
envizon
envizon - by evait security EOL https://github.com/evait-security/envizon/issues/130 We evait security moved to https://gitlab.com/invuls/pentest-projects/pcf for internal project documentation. network visualization & pentest reporting Version 5.0 This tool is designed, developed and supported b...
vulnerability_advisories
Onapsis 보안 권고 이 저장소는 Onapsis Research Labs 팀이 보고한 취약점에 대한 보안 권고Security Advisories를 포함합니다. 권고 요약 다음 표는 이 저장소에 설명된 취약점들에 대한 요약입니다: 공급업체| CVE| CVSS| 설명| 보고서 링크 ---|---|---|---|--- SAP| CVE-2022-27657| 2.7| SAP Focused Run의 디렉터리 트래버설Directory Traversal 취약점 Simple Diagnostics Agent 1.0|...
Inside the Advisory Database and what happens when vulnerability volume breaks records
In May 2026, the GitHub Advisory Database published 1,560 reviewed advisories --more than five times our typical monthly output and the highest in its history. And it still wasn't enough to keep up. Over the past few months, the vulnerability ecosystem has shifted in a fundamental way. Input acro...
Vulnerability Reports Are Not Special Anymore
A requirement for staying sane while working in public as an open source maintainer is realizing that every issue, PR, and piece of feedback is a present, not an obligation. You can accept it, ignore it, and use it partially or not at all. Except… For years, as lead of the Go Security team at the...
Smart_Contract_Researcher_POC
Smart Contract Security Research Portfolio hailthelord...
Wordfence Intelligence Weekly WordPress Vulnerability Report (May 25, 2026 to May 31, 2026)
Last week, there were 277 vulnerabilities disclosed in 184 WordPress Plugins and 70 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 93 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...
IMVU-Exploits
IMVU Exploits IMVU Classic Client v3.6.15 - Complete exploita...
The Fault in Our Drafts: Vulnerabilities in RPKI Specification and Software
The Resource Public Key Infrastructure RPKI secures the Internet's routing system by defining a complex trust and validation framework for certificates, Route Origin Authorizations ROAs, manifests, and Certificate Revocation Lists CRLs. These mechanisms are specified across dozens of RFCs. This...
Demystifying the Mythos or Disrupting Bugonomics? from Zero-Day Asymmetry to Defender Remediation Throughput
Recent demonstrations of large language models producing candidate and confirmed vulnerabilities in production software have renewed the narrative that AI will reshape offensive and defensive security. Headlines emphasize capability; they rarely interrogate costs and incentives. This paper examin...
Web-Application-Vulnerability-Scanner
Web-Application-Vulnerability-Scanner Developed a Python-...
cnnvd-cve-report-generator
No d...
RAVEN: Retrieval-Augmented Vulnerability Exploration Network for Memory Corruption Analysis in User Code and Binary Programs
Large Language Models LLMs have demonstrated remarkable capabilities across various cybersecurity tasks, including vulnerability classification, detection, and patching. However, their potential in automated vulnerability report documentation and analysis remains underexplored. We present RAVEN...
Gitlab -- vulnerabilities
Gitlab reports: Improper Handling of Parameters issue in Jira Connect installations impacts GitLab CE/EE Cross-Site Request Forgery issue in GLQL API impacts GitLab CE/EE HTML Injection in vulnerability report impacts GitLab EE Denial of Service issue in GraphQL API impacts GitLab CE/EE Improper...