161 matches found
DevSec-Defense
DevSec-Defense وحدات باور شيل المصاحبة وعروض توضيحية لعرض DevSec Defense DevSec Defense: كيف يمكن لممارسات DevOps أن تقود تطوير الكشف للمدافعين...
ctf-tools
ctf-tools This is a collection of setup scripts to create an install of various security research tools. Of course, this isn't a hard problem, but it's really nice to have them in one place that's easily deployable to new machines and so forth. The install-scripts for these tools are checked ever...
sqlmap
sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...
CVE_Demo
CVEDemo こんにちは、 Muhammad Navaid Zafar Ansari です。このリポジトリは、私のCVEデモを管理し、脆弱性を発見したこれらのアプリケーションを利用したい人々に修正推奨事項を提供するために作成しました。 免責事項: すべてのデモは教育目的のみで作成されています。これらの脆弱性のテストはご自身のシステムに対してのみ行ってください。法律違反や個人的な利益のために使用することはできません。 このプロジェクトの作者は、教材によって引き起こされる可能性のあるいかなる損害についても責任を負いません。...
pwndoc
PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...
commix
Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command injection vulnerabilities. You can visit the collection of screenshots demonstrating some of the features o...
GitHunt
عروض BHEU يحتوي هذا المستودع على ثلاثة عروض توضيحية لمؤتمر Black Hat Europe 2025 المسار الجنائي على GitHub: صيد نشاط سلسلة التوريد 1. potentialattacksdemo : تطبيق ويب Flask يعرض عرضًا توضيحيًا لتحديد والتحقيق في هجوم بناءً على التدفق العام لـ GH. 2. ghdig : أداة سطر أوامر للتحقيق في نشاط GitHub. ...
CVE-2026-56255
Capgo before 12.128.2 contains a denial of service vulnerability in the POST /app/demo endpoint that allows authenticated users with org write permissions to create unlimited demo applications without rate limiting or quota enforcement. Attackers can repeatedly invoke this endpoint to generate...
CVE-2026-56255
Capgo before 12.128.2 contains a denial of service vulnerability in the POST /app/demo endpoint that allows authenticated users with org write permissions to create unlimited demo applications without rate limiting or quota enforcement. Attackers can repeatedly invoke this endpoint to generate...
CVE-2026-56255 Capgo - Denial of Service via Unlimited Demo App Creation
Capgo before 12.128.2 contains a denial of service vulnerability in the POST /app/demo endpoint that allows authenticated users with org write permissions to create unlimited demo applications without rate limiting or quota enforcement. Attackers can repeatedly invoke this endpoint to generate...
EUVD-2026-38365
Capgo before 12.128.2 contains a denial of service vulnerability in the POST /app/demo endpoint that allows authenticated users with org write permissions to create unlimited demo applications without rate limiting or quota enforcement. Attackers can repeatedly invoke this endpoint to generate...
codepoc
Java Goof This is a collection of Java demo apps that are vu...
[SECURITY] Fedora 43 Update: vhs-0.10.0-4.fc43
Write terminal GIFs as code for integration testing and demoing your CLI tool s...
[SECURITY] Fedora 42 Update: vhs-0.9.0-2.fc42
Write terminal GIFs as code for integration testing and demoing your CLI tool s...
Debian: Security Advisory (DSA-6168-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Your complete guide to Microsoft experiences at RSAC™ 2026 Conference
The era of AI is reshaping both opportunity and risk faster than any shift security leaders have seen. Every organization is feeling the momentum; and for security teams, the question is no longer if AI will transform their work, but how to stay ahead of what comes next. At Microsoft, we see this...
GHSA-W54X-R83C-X79Q Pepr Has Overly Permissive RBAC ClusterRole in Admin Mode
Severity: LOW Target: /workspace/pepr/src/lib/assets/rbac.ts Endpoint: Kubernetes RBAC configuration Method: Deployment Response / Rationale Pepr defaults to rbacMode: "admin" because the initial experience is designed to be frictionless for new users. This mode ensures that users can deploy and...
EUVD-2022-5211
Malicious code in bioql PyPI...
