CVE_Demo

CVEDemo Hallo, ich bin Muhammad Navaid Zafar Ansari. Ich habe dieses Repository erstellt, um meine CVE-Demos zu pflegen und Empfehlungen zur Behebung an alle zu geben, die diese Anwendungen nutzen möchten, in denen ich die Schwachstellen gefunden habe. Haftungsausschluss: Alle Demos wurden...

CVE-2026-31431-mitigation

Mitigazione CVE-2026-31431 Questo repository contiene il codice sorgente della nostra mitigazione basata su eBPF contro CVE-2026-31431, nota anche come "copy.fail". Maggiori informazioni disponibili su https://copy.fail La motivazione alla base della creazione di questa soluzione è stata la...

BPFDoor-controller-source

BPFDoor-controller-source Codice sorgente della recente variante del controller di BPFDoor Originale: 2eacc8d91b9829b9606a7945fc5311fb5876cfb42ffccc1b91f61841237b04c1 Corretto: bpfdoorcontroller.c Helper da originale a corretto: formatfix.py Compilazione: root@kitploit: $ apt install libssl-dev $...

appsec-agent

AppSec Agent وكلاء أمان مدعومون بالذكاء الاصطناعي لمراجعة الكود، وفحص طلبات السحب PR، ونمذجة التهديدات، وتوليد الإصلاحات، والمزيد. يمكنك استخدام AppSec Agent بثلاث طرق:...

CVE-2021-31805-POC

CVE-2021-31805-POC Schwachstelleninformationen Apache Struts ist ein kostenloses Open-Source-MVC-Framework zur Erstellung eleganter, moderner Java-Webanwendungen. Es unterstützt Konvention vor Konfiguration, kann über eine Plugin-Architektur erweitert werden und enthält Plugins für REST, AJAX und...

OpenSovix

CVE-2025-46285 – Tiefgehende Sicherheitslückenanalyse und Proof-of-Concept Wichtiger Haftungsausschluss: Die folgenden Inhalte dienen ausschließlich der Sicherheitsbildung, defensiven Forschung und der Analyse von Sicherheitslücken. Testen oder nutzen Sie diese Sicherheitslücke nicht in nicht...

CVE-2024-3094-fix-exploits

Questo repository non contiene un README...

CVE-2018-15473

CVE-2018-15473 SSH-Username-Enumeration-Exploit OpenSSH 2.3 7.7 Versione modificata dell'exploit originale: https://www.exploit-db.com/exploits/45233 Convertito in Python3 Aggiunta opzione per wordlist di username Come Eseguire root@kitploit: Install the requirements: foo@bar:$ pip3 install -r...

OpenTAXII

OpenTAXII Implementazione del server TAXII in Python di EclecticIQ. OpenTAXII è una robusta implementazione Python dei servizi TAXII che offre un ricco set di funzionalità e un'API pythonica e intuitiva costruita su un'applicazione ben progettata. OpenTAXII è garantito compatibile con Cabby, la...

invokeai

invokeai यह रिपॉज़िटरी Endor Labs EXPOSURE के लिए एक सिंथेटिक डेमो टार्गेट है। वर्तमान स्थिति जानबूझकर कमज़ोर HOT है। EXPOSURE इसके विरुद्ध HOT निर्णय रिपोर्ट करेगा। ट्रैक किया गया CVE: CVE-2024-10821 कोई अपस्ट्रीम फिक्स नहीं; केवल कम्पेंसेटिंग कंट्रोल द्वारा शमन किया गया है। EXPOSURE द्वारा खोला...

CVE-2025-12543-Fix-for-Wildfly

Immagine Base WildFly 11.0.0.Final — Patch per CVE-2025-12543 Panoramica Questo repository fornisce un'immagine Docker di base costruita su WildFly 11.0.0.Final con una correzione backportata per CVE-2025-12543 , una vulnerabilità critica di validazione dell'header Host in Undertow. L'immagine è...

dnsmasq-2.4.1-fix-CVE-2017-14491

dnsmasq-2.4.1-fix-CVE-2017-14491...

CVE-2026-61792

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately...

mysqld_safe-CVE-2016-6662-patch

Playbook per la patch CVE-2016-6662 del server MySQL Come funziona Aggiunge la correzione di Percona al file mysqldsafe. Quali sistemi operativi sono supportati CentOS FreeBSD Come usarlo root@kitploit: ansible-playbook mysqld-safe-patch.yml...

harbian-audit

harbian-audit Hardening Introduction Hardened Debian GNU/Linux and CentOS 8 distro auditing. The main test environment is in debian GNU/Linux 9/10/11/12/13 and CentOS 8 and ubuntu 22, and other versions are not fully tested. There are no implementations of desktop related items in this release. T...

http-server-node

http-server-node Questo repository è un target demo sintetico per Endor Labs EXPOSURE. Lo stato attuale è deliberatamente vulnerabile HOT. EXPOSURE segnalerà un verdetto HOT contro di esso. CVE tracciato: CVE-2021-23797 nessuna fix upstream; mitigato solo tramite un controllo compensativo. Una PR...

packages_apps_Settings_AOSP10_r33_CVE-2020-0219_CVE-2020-0188_old-one

Este repositorio nao tem um README...

CVE-2026-61792 Weblate path traversal allows a project administrator to read arbitrary files via App store metadata download (Incomplete Fix of CVE-2026-34242)

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately...

CVE-2026-61792

Weblate , a web-based continuous localization platform, is affected by a path traversal vulnerability in its App store metadata download feature (versions prior to 2026.7 ). Attacker-influenced paths are resolved without adequate confinement to the repository, allowing a user with project-adminis...

CVE-2026-61792 Weblate path traversal allows a project administrator to read arbitrary files via App store metadata download (Incomplete Fix of CVE-2026-34242)

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read files outside their repository through the App store metadata download feature, which resolves attacker-influenced paths without adequately...