CVE-2024-38077-POC

CVE-2024-38077-POC...

cumulus

Logiciel de surveillance des faiblesses d'applications Qu'est-ce que Cumulus Cumulus est un service qui vous aide à surveiller et corriger les faiblesses de sécurité en temps réel. Les problèmes sont signalés sur un tableau de bord web. C'est très simple et puissant...

wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...

vcenter-log4j

VMware vCenter log4j обходное решение Скрипт для обхода уязвимости log4j в VMware vCenter CVE-2021-44228, в соответствии со статьёй VMware KB. 2021-12-13 02:09 UTC — Добавлены службы Secure Token и Identity Management 2021-12-13 12:46 UTC — Добавлен PSC Client для 6.5 — см. ниже VMware выпустила...

Log4JHunt

Log4JHunt Un scanner automatisé et fiable pour la vulnérabilité Log4Shell CVE-2021-44228. Démo vidéo : Utilisation Voici l'aide d'utilisation : root@kitploit: $ python3 log4jhunt.py +--------------+ Log4JHunt +--------------+ + Log4jHunt by RedHunt Labs - A Modern Attack Surface ASM Management...

SecuSphere

SecuSphere Votre Solution DevSecOps Complète Bienvenue sur SecuSphere, votre solution unique pour tous vos besoins DevSecOps. Notre plateforme centralisée est conçue avec expertise pour gérer et optimiser votre gestion des vulnérabilités, l'intégration des pipelines CI/CD, les évaluations de...

kube-alien

Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...

CVE-2023-46604-ActiveMQ-RCE-pseudoshell

CVE-2023-46604 RCE псевдооболочка Этот скрипт использует CVE-2023046604 Apache ActiveMQ для создания псевдооболочки. Уязвимость позволяет выполнять удалённый код из-за небезопасной десериализации в протоколе OpenWire. Описание CVE-2023-46604 — это уязвимость десериализации, существующая в протоко...

bug-bounty-library

Bug Bounty / Original Findings Library Folders are numbered in the order a hunter actually works - first to last. Start at 00-hunt/00-INDEX. Run the hunt from 00-hunt/ALPHA. This README is only the map. Authorization only. Safe harbor, VDP, GitHub PVR, or coordinated disclosure. No other-customer...

CVE-2023-38408

CVE-2023-38408 OpenSSH バージョン 9.3p2 に影響する最近の重大な脆弱性に対するPoC この脆弱性を扱うTryHackMeの無料アクセスラボ環境とシームレスに動作するよう設計されています。 https://tryhackme.com/room/cve202338408 注記： これはTHMラボ環境の外では動作しません 。 https://github.com/kali-mx/CVE-2023-38498/assets/76034874/21382c5b-9468-494d-93c7-ff2b996a4be5...

CVE-2015-3636

В этом репозитории нет README...

nvd

nvd NVD미국 국가 취약점 데이터베이스 피드에서 CVE를 가져오기 위한 빠르고 간단한 Go 라이브러리입니다. 설치 root@kitploit: go get github.com/daehee/nvd 사용법 nvd 패키지는 공식 NVD 피드에서 CVE를 가져오기 위한 Client를 제공합니다: root@kitploit: // nvd client with ./tmp working dir client, err := NewClient"tmp" // Fetch single CVE cve, err :=...

0day-Rubbish

0day Rubbish 0day vulnerabilities have become rubbish in the AI era...

android-security-awesome

android-security-awesome Une collection de ressources liées à la sécurité Android. 1. Outils 2. Académique/Recherche/Publications/Livres 3. Exploits/Vulnérabilités/Bugs Outils Analyseurs en ligne 1. Appknox - payant 2. Virustotal 3. NowSecure Lab Automated - Outil d'entreprise pour les tests de...

ship-safe

Находите рискованный код, уязвимости ИИ-агентов и проблемы цепочки поставок до того, как они попадут в продакшн. Веб-сайт · Документация · Безопасность и потоки данных · Бенчмарки · Цены · Блог · Участие...

Anthropic-Credited-CVEs

ANTHROPIC CVE TRACKER Overview Tracking vulnerabilities that credit the Anthropic research team and are possibly discovered by Project Glasswing. CURRENT CVE COUNT: 149 Initial Research Tracking CVEs Attributed to Anthropic Researchers and Project Glasswing Add a Vulnerability If you find an...

Awesome-LLMs-for-Vulnerability-Detection

Awesome Large Language Models for Vulnerability Detection A curated list of papers, projects, and agent skills on using LLMs for vulnerability detection and discovery. 📄 Papers Only showing 2025 and later. For earlier work, see Papers Archive 2024 and earlier...

missing-cve-nuclei-templates

Weekly updated list of missing CVEs in nuclei templates official repository Note This repository is 100% automated so there can be errors, but in general is pretty accurate. Go to section "How it works" to understand how data is collected. Stats 📊 CVEs analyzed : 167758 CVEs missing : 66838...

awesome-list

Awesome Cybersecurity List My personal collection of awesome blog posts, write-ups, and papers focusing on cybersecurity. For a deeper dive into cybersecurity-related tools, check out the dedicated Cybersecurity Tools list. Outline 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2014 2011...

CVE-2026-16723

CVE-2026-16723 Exploit A standalone C++17 implementation for CVE-2026-16723 , a critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83. Requirements Linux or WSL on Windows C++17 compatible compiler GCC 7+ or Clang 5+ CMake 3.10 or newer System packages: libzip-dev...