28274 matches found
AI-Security-Newsletter
AI Security Newsletter - June 2026 A digest of AI security research, insights, reports, upcoming events, and tools & resources. Follow the AISecHub community and our LinkedIn group for additional updates. Also check out our project, Awesome AI Security. Sponsored by InnovGuard.com - Technology...
udpack
UDPack UDPack is an extensible generic UDP packet obfuscator. The purpose of this application is to sit in the path of a UDP data stream, and obfuscate, deobfuscate or otherwise modify the packets. Python 3.4 or above is required, since this script uses the asyncio library. Using the latest Pytho...
CVE-2021-30481
CVE-2021-30481 CVE details: https://nvd.nist.gov/vuln/detail/CVE-2021-30481 Exploit code depends on SteamworksPy...
mininode
Mininode Mininode is a CLI tool to reduce the attack surface of the Node.js applications by using static analysis of source code. It supports two modes of reduction 1 coarse, 2 fine. Mininode constructs the dependency graph modules and functions used of the application starting from main file, i....
combobulator
Dependency Combobulator Dependency Combobulator is an Open-Source, modular and extensible framework to detect and prevent dependency confusion leakage and potential attacks. This facilitates a holistic approach for ensuring secure application releases that can be evaluated against different sourc...
mediator
Mediator is an end-to-end encrypted reverse shell in which the operator and the shell connect to a "mediator" server that bridges the connections. This removes the need for the operator/handler to set up port forwarding in order to listen for the connection. Mediator also allows you to create...
chub-supply-chain-poc
Context Hub Supply Chain PoC Zero-sanitization vulnerability inContext Hub @aisuite/chub v0.1.3 enables silent dependency injection through the MCP documentation pipeline. References: CWE-94 Code Injection | CWE-829 Untrusted Control Sphere | CWE-345 Insufficient Verification of Data Authenticity...
CVE-2021-43616
Repo demonstrating CVE-2021-43616 / https://github.com/npm/cli/issues/2701 Remove the nodemodules folder and run npx npm@8 ci, you can see how npm will install version 2.2.x 2.2.16 at the time of this commit even though package-lock.json requires 2.0.0 cat nodemodules/shortid/package.json I've...
Log4j_CVE-2021-44228
Log4j CVE-2021-44228 Solutions Think about if you actually really require Log4j2 Core. Most likely, your own code or some 3rd-party library you depend on only need Log4j's Logging API façade - but can log to another back-end. You could therefore simply completely exclude the...
MDE-AuditCheck
MDE-AuditCheck Makes sure all audit settings MDE relies on are properly set in the GPO The script relies on the Remote Server Administration Tools RSAT...
PT-2026-116756
In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix NULL current pwq deref in flush dependency check check flush dependency uses current wq worker to determine whether the caller is a workqueue worker and then dereferences worker-current pwq to test whether the...
CS50FinalProject
CS50 Intro to Cybersecurity – Final Project Case Study: XZ Utils Backdoor CVE-2024-3094 This repository supports my 7-10 minute presentation on the XZ Utils backdoor, including a recap of the backdoor, the mechanism for the backdoor via release tarballs, and relevant supply-chain mitigations...
CVE-2024-3094-backdoor-env-container
CVE-2024-3094 SSH Backdoor Container Env This is an environment running CVE-2024-3094 sshd backdoor instance, working with this exploit: https://github.com/amlweems/xzbot. Experiments Test in Docker IT IS NOT a Docker container. I had tried making this vulnerability env with docker but failed: 1...
spring-boot-cve-2022-22965
= Spring Framework version override showcase This repository showcases how you can override the Spring Framework version of a Spring Boot 2.4-based application. Spring Boot 2.4.x is https://spring.io/projects/spring-bootsupportout of OSS support, the latest version is 2.4.13. It uses Spring...
4062-1
Black Duck CoPilot Gradle/Travis CI Example Shows a working setup for using the Black Duck CoPilot integration to analyze the risk of project dependencies Travis CI Setup The .travis.yml file has been modified to upload generated dependency data to Black Duck CoPilot: aftersuccess: - bash curl -s...
CVE-2026-Pending-Django-Summernote-RCE
CVE-2026-XXXXX Pending: django-summernote Arbitrary File Upload RCE This repository contains a Proof of Concept PoC for a Conditional Remote Code Execution RCE vulnerability discovered in django-summernote version 0.8.20.0 and earlier. Vulnerability Details Product : django-summernote Version : =...
MinimalReproducer
After significant efforts, stripped it down to a minimal replicator. This is just an empty project to demonstrate the issue with dependency-check-maven usage I am forced on doing by my company rules. Do check the pom.xml and do verify: mvn org.owasp:dependency-check-maven:RELEASE:aggregate Or if...
kubernetes-client__java_CVE-2020-8570_client-java-parent-9_0_2_fixed
Kubernetes Java Client Java client for the kubernetes API. Client versioning The Java client uses Semantic Versioning. We increment the major version number whenever we regenerate the client for a new Kubernetes release version see table below. Whenever we do this there are new APIs added and...
scanner-for-CVE-2025-55182-vulnerability
🛡️ GitHub Vulnerability Scanner for CVE-2025-55182 React/Next.js RCE This Python script is designed to scan all your public and private GitHub repositories for dependencies that are potentially vulnerable to CVE-2025-55182 a critical Remote Code Execution affecting specific versions of React Serve...