gstack

gstack gstack turns Claude Code and other coding agents into a virtual engineering team: a CEO who rethinks the product, an eng manager who locks architecture, a designer who catches AI slop, a reviewer who finds production bugs, a QA lead who opens a real browser, a security officer who runs OWA...

VibeSec-Skill

VibeSec-Skill Stop vibe coding vulnerabilities into production. An AI skill that brings 5+ years of bug bounty hunting experience directly into your AI coding workflow - so LLM models write secure code from the start. Introduction Vibe coding is fun until your app ends up on social media for all...

DeepGuard

DeepGuard 📖 Project Overview DeepGuard is an innovative secure code generation approach that enhances large language models' capability for secure code generation through multi-layer semantic aggregation techniques. This method effectively identifies and mitigates security vulnerabilities in code...

oss-fuzz-gen

This repository is no longer being maintained. A Framework for Fuzz Target Generation and Evaluation This framework generates fuzz targets for real-world C/C++/Java/Python projects with various Large Language Models LLM and benchmarks them via the OSS-Fuzz platform. More details available in...

DIAFAN.CMS Code Execution

The vulnerability in the DIAFAN.CMS content management system is related to improper handling of code generation. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

1C:ERP. Holidays Management Code Execution

The developer tool vulnerability “1C:ERP. Holding Management” is related to improper code generation management. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

YouGile Project Management Code Execution

The vulnerability of the YouGile project management service is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Webasyst Shop-Script CMS Code Execution

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system is related to improper code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

Telecom MG Code Execution

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Telecom MG Code Execution

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Telecom MG Code Execution

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Telecom MG Code Execution

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-23947-PoC

Walkthrough: CVE-2026-23947 - Orval Arbitrary Code Execution This walkthrough demonstrates how an untrusted OpenAPI specification can exploit Orval to inject arbitrary code into generated clients via the x-enumDescriptions and x-enumNames fields. Prerequisites Node.js v20 or v22 npm Setup 1. Crea...

ReClass.NET

ReClass.NET This is a port of ReClass to the .NET platform with lots of additional features. Features Support for x86 / x64 File import from ReClass 2007-2016 and ReClass QT Memory Nodes Arrays and Pointers to every other node types Hex 8 / 16 / 32 / 64 Int 8 / 16 / 32 / 64 UInt 8 / 16 / 32 / 64...

autoharness

AutoHarness Created by Akshat Parikh What is this tool? AutoHarness is a tool that automatically generates fuzzing harnesses for you. This idea stems from a concurrent problem in fuzzing codebases today: large codebases have thousands of functions and pieces of code that can be embedded fairly de...

Payload_CVE_2013_2186

PayloadCVE20132186 Code generate payload for CVE-2013-2186...

CVE-2026-35194

CVE-2026-35194 — Apache Flink SQL Code Injection Remote code execution on Apache Flink TaskManagers via SQL code generation injection. | ---|--- CVE| CVE-2026-35194 CVSS| 8.1 High CWE| CWE-94 — Code Injection Affected| Flink 1.15.0 – 1.20.3 / 2.0.0 – 2.2.0 Fixed| 1.20.4 / 2.0.2 / 2.1.2 / 2.2.1...

CVE-2026-124703

In Telerik UI for WPF, versions prior to 2026.4.1110, an improper control of code generation vulnerability exists that allows an attacker to execute unauthorized code in the context of the affected application...

EUVD-2026-124344

In Telerik UI for WPF, versions prior to 2026.4.1110, an improper control of code generation vulnerability exists that allows an attacker to execute unauthorized code in the context of the affected application...

CVE-2026-124703

In Telerik UI for WPF , versions prior to 2026.4.1110 , an improper control of code generation vulnerability exists. This flaw allows an attacker to execute unauthorized code within the context of the affected application. The vulnerability is associated with CWE-94 . No specific exploit details ...