CTWall

CTWall - ChainThreatWall GitHub release --- As more teams move to virtualized development environments to reduce software supply-chain risk, one challenge remains: malicious dependencies can still slip through and reach production. CTWall ChainThreatWall platform helps Security, DevOps, and Produ...

cve-2025-55182-checker

CVE-2025-55182 Checker A portable Bash script to detect vulnerable versions of React Server DOM and Next.js packages affected by CVE-2025-55182. Features Recursively scans all package.json files in a project. Detects vulnerable versions of: react-server-dom- 19.0.0, 19.1.0, 19.1.1, 19.2.0 next...

rcekit

RCEKit executed means the target executed the input. negative means the probes reached it. Version 3.0.1 · MIT · Python 3.8+ · zero third-party dependencies RCEKit is an RCE detection & confirmation toolkit for authorised penetration testing, red teaming and security research. Point it at a targe...

cisagov__check-cve-2019-19781.4142e02b

check-cve-2019-19781 🔎🐞 This utility determines if a host appears susceptible to CVE-2019-19781. Requirements Python versions 3.6 and above. Note that Python 2 is not supported. Installation From a release: pip install...

cve-2021-3156-sudo-lab

🐧 CVE-2021-3156 — Sudo Security Lab Educational project developed in Python focusing on the analysis of the vulnerability CVE-2021-3156 Baron Samedit , a critical flaw in sudo that allowed local privilege escalation on Linux systems. 📌 Project Objective This project was created with the goal of...

CVE-2026-19810

Symantec Endpoint Detection and Response SEDR Console, prior to 4.13, may be susceptible to a Cross-Site Scripting XSS vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting i...

CVE-2026-19810 Cross-Site Scripting (XSS) in Symantec Endpoint Detection and Response Console

Symantec Endpoint Detection and Response SEDR Console, prior to 4.13, may be susceptible to a Cross-Site Scripting XSS vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting i...

CVE-2026-19810

The Symantec Endpoint Detection and Response (SEDR) Console , prior to version 4.13 , is vulnerable to a Cross-Site Scripting (XSS) vulnerability. This issue allows an attacker to inject malicious scripts that execute within the context of another user's session. Such exploitation could lead to u...

CVE-2026-74045

Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fimgeneratealert where fulllog is sized from input but written bounded by OSMAXSTR. An enrolled agent can send a crafted FIM syscheck event to corrupt manager heap memory and deterministically crash wazuh-analysisd, causing a...

CVE-2026-74045

Wazuh versions 3.12.0 before 4.14.8 are vulnerable to a heap buffer overflow in the fim_generate_alert() function of the wazuh-analysisd FIM Decoder. The issue occurs because full_log is sized based on the input but written with a boundary of OS_MAXSTR. An enrolled agent can trigger this by sendi...

CVE-2026-30849-PoC

CVE-2026-30849.ts — usage This TypeScript script performs a check and an exploit for MantisBT via SOAP. Prerequisites Node.js installed Dependencies installed: npm install Command ts-node CVE-2026-30849.ts check --url ts-node CVE-2026-30849.ts exploit --url npx ts-node .\CVE-2026-30849.ts check...

CVE-2019-19782

CVE-2019-19781 Supports batch detection Usage: python CVE-2019-19781.py To detect target URLs, create url.txt in the current script directory. url.txt, one per line: http://xxx:port/ https://xxx:port/ Output: Vulnerable links: res.txt Error links: log.txt...

watchTowr-vs-FortiWeb-CVE-2025-25257

watchTowr-vs-FortiWeb-CVE-2025-25257 Detection Artifact Generator for FortiWeb CVE-2025-25257 See our blog post for technical details https://github.com/user-attachments/assets/e59f2b3b-2b9b-469f-b4a8-2b7df2ede194 Detection in Action python watchTowr-vs-FortiWeb-CVE-2025-25257.py --target...

Sigma_rules

Sigmarules Random sigma rules to share with the community All rules are made by me. Research is referenced in the rules...

MyLog4Shell

MyLog4Shell log4j RCE Exploitation Detection You can use these commands and rules to search for exploitation attempts against log4j RCE vulnerability CVE-2021-44228 Grep / Zgrep This command searches for exploitation attempts in uncompressed files in folder /var/log - '/usr/var/log' and all sub...

burp-ResponseClusterer

ResponseClusterer This extension clusters similar responses together, and shows a summary with one request/response per cluster. This allows the tester to get an overview of the tested website's responses from all Burp Suite tools. This is powerful, because it adds an additional vulnerability...

CVE-2026-19810: Improper Neutralization of Input During Web Page Generation

Symantec Endpoint Detection and Response SEDR Console, prior to 4.13, may be susceptible to a Cross-Site Scripting XSS vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting i...

Physical Layer Anomaly Detection Via Adaptive Gaussian Mixture Model

Physical-layer spoofing attacks pose a critical threat to wireless localization systems by manipulating channel state information CSI. Detecting such attacks becomes particularly challenging when the attacker and the legitimate node are spatially proximate, as their CSI characteristics become...

An Initial Study of Physiological Markers for Deepfake Speech Detection

Conventional deepfake speech detectors primarily target synthesis artifacts and often degrade under unseen attacks or recording conditions. Human speech, however, contains physiological markers associated with respiration, phonation, and temporal coordination arising from the speech-production...

PT-2026-113371

Symantec Endpoint Detection and Response SEDR Console, prior to 4.13, may be susceptible to a Cross-Site Scripting XSS vulnerability, which is a type of issue whereby an attacker may attempt to inject malicious script that executes in the context of another user’s session, potentially resulting i...