Preproduce-CVE-2021-41773

Preproduce CVE 2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 CVE-2021-41773 POC $ docker compose up Confirm it works $ curl -I http://localhost HTTP/1.1 200 OK Date: Wed, 06 Oct 2021 13:25:18 GMT Server: Apache/2.4.49 Unix Last-Modified: Mon, 11 Jun 2007...

CVE-2026-8389

CVE-2026-8389 This vulnerability was intended to be used at Pwn2Own 2026 Berlin, but was patched in version 150.0.3. SpiderMonkey BaselineJIT pcOffset bitfield truncation on the eager off-thread baseline-compile path, leading to a wrong-but-in-bounds bytecode pc during exception unwinding and a...

ship-safe

The independent security agent for AI-written software. It finds issues, investigates whether they are real, and shows you the evidence. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute Ship Safe CLI Ship Safe runs locally in your repo and works in two layers. A...

strix

Strix The open-source AI pentesting tool. Autonomous AI hackers that find and fix your app’s vulnerabilities. !TIP New! Strix integrates seamlessly with GitHub Actions and CI/CD pipelines. Automatically scan for vulnerabilities on every pull request and block insecure cod...

cso-vibecheck

cso-vibecheck ██████╗███████╗ ██████╗ ██╗ ██╗██╗██████╗ ███████╗ ██╔════╝██╔════╝██╔═══██╗ ██║ ██║██║██╔══██╗██╔════╝ ██║ ███████╗██║ ██║ ██║ ██║██║██████╔╝█████╗ ██║ ╚════██║██║ ██║ ╚██╗ ██╔╝██║██╔══██╗██╔══╝ ╚██████╗███████║╚██████╔╝ ╚████╔╝ ██║██████╔╝███████╗ ╚═════╝╚══════╝ ╚═════╝ ╚═══╝...

Oracle-WebLogic-CVE-2017-10271-master

WebLogic Wls-wsat XMLDecoder Vulnerability Description mitre:https://vulners.com/cve/CVE-2017-3506 Earlier, hackers exploited the WebLogic WLS component vulnerability to launch large-scale remote attacks on enterprise servers. Many enterprise servers were compromised, and the number of attacked...

CVE-2024-3656

Keycloak 24.0.5 is vulnerable to Broken Access Control vulnerability, where the attacker can use any authenticated user to perform some api action such as : Test LDAP connections via the testLDAPConnection endpoint. Retrieve unmanaged attributes of any user via the getUnmanagedAttributes endpoint...

CVE-2021-27289

🐝 CVE-2021-27289: Playback Protection Bypass on Ksix Zigbee devices 📑 Table of Contents Before We Get Serious The Story Behind This CVE Vulnerability Affected Devices Technical Details Attack Scenario Impact Proof of Concept Demo Videos Original Blog Post Researcher Zigbee Basics Background and...

CVE-2025-30065

CVE-2025-30065 Research Notes This repository is kept intentionally small and readable. It is intended for authorized security research, local validation, and defensive study of CVE-2025-30065 in Apache Parquet / Avro schema handling. The README focuses on repository hygiene, build reproducibilit...

Bug-Bounty-Arsenal-v.3

BugBounty Arsenal A free, full-stack security scanning platform for bug bounty hunters and security researchers — 50+ detectors, continuous monitoring, and CI/CD gating from a single dashboard. ▶ Live app:bugbounty-arsenal.net — free, no credit card. If this is useful, please ⭐ the repo — it...

proxmox-lxc-docker-fix

Proxmox LXC AppArmor Fix for Docker/Containers Workaround for CVE-2025-52881 : Fixes Docker, Podman, and container runtime breakage in Proxmox LXC containers caused by AppArmor incompatibility with runc 1.2.7+/1.3.2+ 🚨 The Problem Recent security updates to runc versions 1.2.7+ and 1.3.2+ and...

CVE-2024-28752

Apache CXF CVE-2024-28752 Reproduction Environment Vulnerability Advisory: https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt Environment Startup samples/javafirstjaxwsfactorybean IDEA Start the webservice service via ServerStarter.java Build Use JDK8 mvn clean package java -jar...

CVE-2016-8863

Targets pupnp release-1.6.18 ... ... running on i386 Ubuntu 16.04. Fix commit 9c099c2923ab "Fix out-of-bound access in createurllist CVE-2016-8863"...

CVE-2026-61500

CVE-2026-61500: Rejetto HFS session forgery to RCE CVE-2026-61500 is an unauthenticated session-forgery vulnerability in Rejetto HFS 3.0.0 through 3.2.0. HFS generated its Koa session-cookie signing key with JavaScript Math.random and exposed outputs from the same V8 PRNG in the unauthenticated S...

Kittysploit-framework

KittySploit Framework The Next-Gen Exploitation Engine for Modern Red Teams Website • Wiki • Usage Guide • Marketplace Modular • Extensible • AI-Powered Why KittySploit? While traditional tools struggle with modern web architectures and automated defense, KittySploit redefines the offensive...

magento2-session-reaper-patch

Magento 2 Session Reaper Patch for CVE-2025-54236 Patch for CVE-2025-54236a.k.a Session Reaper which allows customer account takeover and RCE under certain conditions. This patch is actually a Magento 2 extension and universal compatible for Magento 2.3 & 2.4. If you cannot upgrade Magento or...

CVE-2021-36934

CVE-2021-36934 CVE-2021-36934 HiveNightmare vulnerability checker and workaround Flow The script has the following flow: Requires it to run with Administrator privileges Check Windows 10 version is affected by the vulnerability. IF affected by vulnerability: Show Windows version may be affected b...

dasel-melange-apko

dasel v3.3.1 — Melange + apko build, patched for CVE-2026-33320 This repo packages the dasel CLI v3.3.1 as an APK with Melange , builds a minimal container image with apko , and applies a fix for CVE-2026-33320 while staying on the v3.3.1 codebase a patch, not a version bump. The result is a 4 MB...

CVE-2026-55200

CVE-2026-55200 - Critical libssh2 Remote Code Execution Vulnerability Critical Pre-Authentication Memory Corruption Vulnerability in libssh2 Overview Field| Detail ---|--- CVE| CVE-2026-55200 CVSS| 9.2 Critical Type| Out-of-Bounds Write Component| libssh2 Affected Versions| = 1.11.1 Attack Vector...

CVE-2024-2876

CVE-2024-2876 - SQL Injection Vulnerability in Email Subscribers by Icegram Express Overview CVE-2024-2876 is a critical security vulnerability found in the "Email Subscribers by Icegram Express" plugin for WordPress. This vulnerability affects versions up to and including 5.7.14 and poses...