Webasyst Shop-Script CMS Code Execution

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system is related to improper code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

Telecom MG Code Execution

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Telecom MG Code Execution

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Telecom MG Code Execution

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Telecom MG Code Execution

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

VibeSec-Skill

VibeSec-Skill Stop vibe coding vulnerabilities into production. An AI skill that brings 5+ years of bug bounty hunting experience directly into your AI coding workflow - so LLM models write secure code from the start. Introduction Vibe coding is fun until your app ends up on social media for all...

oss-fuzz-gen

A Framework for Fuzz Target Generation and Evaluation This framework generates fuzz targets for real-world C/C++/Java/Python projects with various Large Language Models LLM and benchmarks them via the OSS-Fuzz platform. More details available in AI-Powered Fuzzing: Breaking the Bug Hunting Barrie...

ReClass.NET

ReClass.NET This is a port of ReClass to the .NET platform with lots of additional features. Features Support for x86 / x64 File import from ReClass 2007-2016 and ReClass QT Memory Nodes Arrays and Pointers to every other node types Hex 8 / 16 / 32 / 64 Int 8 / 16 / 32 / 64 UInt 8 / 16 / 32 / 64...

DeepGuard

DeepGuard 📖 Project Overview DeepGuard is an innovative secure code generation approach that enhances large language models' capability for secure code generation through multi-layer semantic aggregation techniques. This method effectively identifies and mitigates security vulnerabilities in code...

autoharness

AutoHarness Created by Akshat Parikh What is this tool? AutoHarness is a tool that automatically generates fuzzing harnesses for you. This idea stems from a concurrent problem in fuzzing codebases today: large codebases have thousands of functions and pieces of code that can be embedded fairly de...

wifi-password

wifi-password Quickly fetch your WiFi password and if needed, generate a QR code of your WiFi to allow phones to easily connect. Works on macOS and Linux , Windows Installation Install using pip $ python3 -m pip install --user wifi-password Install using git $ git clone...

Payload_CVE_2013_2186

PayloadCVE20132186 Code generate payload for CVE-2013-2186...

CVE-2026-35194

CVE-2026-35194 — Apache Flink SQL Code Injection Remote code execution on Apache Flink TaskManagers via SQL code generation injection. | ---|--- CVE| CVE-2026-35194 CVSS| 8.1 High CWE| CWE-94 — Code Injection Affected| Flink 1.15.0 – 1.20.3 / 2.0.0 – 2.2.0 Fixed| 1.20.4 / 2.0.2 / 2.1.2 / 2.2.1...

CVE-2026-52614

CVE-2026-52614 - RuoYi v4.8.3 filterKeyword Bypass SQL Injection 中文 | English Authorization required / 仅限授权测试 This repository is intended for security research and authorized testing only. Do not use it against systems without explicit permission. 本仓库仅用于安全研究与已获明确授权的测试。请勿对未授权系统使用。 中文说明 漏洞简介 RuoYi...

CVE-2026-23498

CVE-2026-23498: Shopware Has Improper Control of Generation of Code in Twig rendered views Overview Field| Details ---|--- CVE ID| CVE-2026-23498 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products shopware/shopware versions: = 6.7.0.0, = 6.7.0.0, 6.7.6.1 CWE...

CVE-2026-23947-PoC

Walkthrough: CVE-2026-23947 - Orval Arbitrary Code Execution This walkthrough demonstrates how an untrusted OpenAPI specification can exploit Orval to inject arbitrary code into generated clients via the x-enumDescriptions and x-enumNames fields. Prerequisites Node.js v20 or v22 npm Setup 1. Crea...

CVE-2021-42574

Trojan Source:Invisible Vulnerabilities - Code generator — In simple terms, the vulnerability is that the code looks different from what it will be when compiled : The attack consists of using embedded control characters in comments and strings to reorder source code characters in a way that...

openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

ImpactA malicious OpenAPI document processed by any openapi-python-client prior to 0.29.1 can generate arbitrary Python code. When anyone imports the malicious client, that arbitrary Python code will execute. PatchesVersions starting with 0.29.1 have updated with guardrails to prevent arbitrary...

PYSEC-2026-4245 openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

Impact A malicious OpenAPI document processed by any openapi-python-client prior to 0.29.1 can generate arbitrary Python code. When anyone imports the malicious client, that arbitrary Python code will execute. Patches Versions starting with 0.29.1 have updated with guardrails to prevent arbitrary...

solidity_CVE-2021-42574-POC

solidityCVE-2021-42574-POC Jan 31 2023, Altin tin-z, github.com/tin-z PoC POC of CVE-2021-42574 for solidity and solc compiler. install solc and select 0.8.17 version https://github.com/crytic/solc-select foundry https://github.com/foundry-rs/foundry deploy contract SOLV=0.8.17 foldert=testopen...