CVE-2023-46019-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability

CVE-2023-46019-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overvi...

k8scout

k8scout Beta — A single-binary Kubernetes attack path engine for authorized security assessments. Drop it into a compromised pod, run it, and get a map of every realistic escalation path — from your current foothold to cluster-admin, node access, secret theft, and cloud IAM roles. The idea You ha...

claude-bug-bounty

BugHunter AI-powered bug bounty hunting — recon to report, in your terminal. Free Setup · Quick Start · Commands · What It Finds · Install · FAQ Powered byAwareXone.com — Your AI Agent Against Scams & Fraud 💜 Open for Sponsorship BugHunter is open for sponsorship. Your support funds new features...

ShunyaNet-Sentinel

ShunyaNet Sentinel UPDATED: 03/02/2026 ShunyaNet Sentinel is a lightweight, cyberpunk-themed program that ingests RSS feeds e.g., breaking news, social media, sends them to an LLM for analysis, and delivers alerts and summary reports directly to the GUI and Slack at regular intervals. The project...

Firefox-CVE-2024-9680

Firefox CVE-2024-9680 CVE-2024-9680 Description An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox 131.0.2, Firefox E...

nfcgate

NFCGate ⚠️NFCGate is currently being falsely detected as "NGate" malware. Please seethis issue for up-to-date information.⚠️ NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security...

chaoskube

chaoskube chaoskube periodically kills random pods in your Kubernetes cluster. Why Test how your system behaves under arbitrary pod failures. Example Running it will kill a pod in any namespace every 10 minutes by default. root@kitploit: $ chaoskube INFO0000 starting up dryRun=true interval=10m0s...

Azure-Sentinel

Microsoft Sentinel and Microsoft 365 Defender Welcome to the unified Microsoft Sentinel and Microsoft 365 Defender repository! This repository contains out of the box detections, exploration queries, hunting queries, workbooks, playbooks and much more to help you get ramped up with Microsoft...

CVE-2024-50986

CVE-2024-50986: DLL Hijacking Exploit for Clementine Description: An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file. Version Affected: Clementine v.1.3.1 Researcher: Utkarsh r1971d3 LinkedIn NIST CVE Link:...

ASVS

OWASP Application Security Verification Standard This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License. 🎉🎉🎉 Welcome to Version 5.0 of the ASVS! 🎉🎉🎉 Released LIVE on stage at Global AppSec EU Barcelona 2025! Introduction The primary aim of the OWASP...

check-cve-2026-23111

CVE-2026-23111 Defensive Validation Script Overview CVE-2026-23111 is a Linux kernel vulnerability in nftables that can be exploited for local privilege escalation by an unprivileged user on systems where user namespaces and nftables are available.12 Public vendor and government advisories descri...

cve-2021-33909

Kernel runtime fix of CVE-2021-33909 This repository builds an out-of-tree module named "cve-2021-33909.ko". cve-2021-33909 fixes an issue in the kernels filesystem layer by kprobe-replacing vulnerable functions during runtime. It can be build via "make", setting KDIR to the kernels...

blackbox-fuzzing

Blackbox-Fuzzing of IoT Devices Using the Router TL-WR902AC as Example This is the HTML version of my term paper which can be downloaded as PDF here. Introduction Fuzzing has become "one of the most effective ways" of finding bugs in software. With this or similar claims, many current...

dbeaver

DBeaver Free multi-platform database tool for developers, SQL programmers, database administrators and analysts. Has a lot of features including schema editor, SQL editor, data editor, AI integration, ER diagrams, data export/import/migration, SQL execution plans, database administration tools,...

rwsploit

Oracle Reports rwservlet Scanner ⚠️ For authorized use only. Only run this tool against systems you own or have explicit written permission to test. Unauthorized use is illegal. A focused exploitation scanner for Oracle Reports Server rwservlet targeting CVE-2012-3152 and CVE-2012-3153 — affecting...

flipperzero-firmware

Flipper Zero Firmware Flipper Zero Official Website - A simple way to explain to your friends what Flipper Zero can do. Flipper Zero Firmware Update - Improvements for your dolphin: latest firmware releases, upgrade tools for PC and mobile devices. User Documentation - Learn more about your...

EUVD-2026-77062

A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gfnodegetfield of the file scenegraph/basescenegraph.c of the component MP4Box. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The...

CVE-2026-90577

CVE-2026-90577 is a heap-based buffer overflow in the MP4Box component of GPAC (up to commit f1219cde), specifically in the function gf_node_get_field within scenegraph/base_scenegraph.c. The vulnerability requires local access with low privileges and no user interaction, resulting in low impact ...

CVE-2026-90577 GPAC MP4Box base_scenegraph.c gf_node_get_field heap-based overflow

A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gfnodegetfield of the file scenegraph/basescenegraph.c of the component MP4Box. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The...

DumpGuard

DumpGuard DumpGuard is a credential dumping and protocol research tool for modern Windows systems. It abuses the Remote Credential Guard protocol to recover credential material even when Credential Guard is enabled, and also includes a Microsoft v1 authentication package path for session-oriented...