EUVD-2026-125608

ragent 1.1.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by uploading SVG knowledge-base documents served inline as image/svg+xml. Attackers can upload a script-bearing SVG via /knowledge-base/kb-id/docs/upload so that victims opening...

CVE-2026-129158

The ragent 1.1.0 application contains a stored cross-site scripting (XSS) vulnerability. Authenticated users can inject malicious scripts by uploading SVG files as knowledge-base documents via the /knowledge-base/{kb-id}/docs/upload endpoint. Because the application serves these files inline as i...

Misconfiguration-Manager

Misconfiguration Manager Remediation Quick Start 1. Review the list of known and documented Attack Techniques and corresponding Defense Techniques to identify issues that may be present in your environment and how to remediate them Refer to this introduction to the project 2. Run ConfigManBearPig...

Red-Teaming-TTPs

!CAUTION This repository contains cheatsheets, notes, and scripts related to my learning in cybersecurity, particularly Red Teaming. You'll find a variety of resources that I've compiled over the years, including: Cheatsheets : Quick reference guides for common tools and techniques. Guides :...

Samuraizer

Samuraizer — Cyber‑Security Knowledge Base Engine NotebookLM on steroids — purpose-built for security researchers. 💡 Why Samuraizer? Every security researcher knows the feeling — you find an interesting GitHub repo, a fresh CVE writeup, a blog post about a new exploitation technique. You forward ...

awesome-soc

Awesome SOC An operational handbook and knowledge base to build, run and mature a SOC including CSIRT. Covering: SOC basics detection engineering threat intelligence SOC metrics/KPI SOC automation AI use cases and best practices SOP SOC playbooks Those are my view, based on my own experience as...

altair

ALTAIR - A Modular Web Vulnerability Scanner Copyleft by Simone Margaritelli [email protected] http://www.evilsocket.net - http://www.backbox.org Usage: altair options -u EXAMPLES: altair --filter=lfi,rfi --url=http://www.somesite.com altair --filter=sqli --load-modules=sqlmap...

EUVD-2026-125215

EspoCRM before 9.3.11 and 10.x before 10.0.9 contains a stored cross-site scripting vulnerability in Knowledge Base articles that lets users with Knowledge Base create or edit access attach a JavaScript file and add a crafted link to the article body. When an administrator clicks the link, the...

CVE-2026-126305

EspoCRM versions prior to 9.3.11 and 10.x before 10.0.9 are vulnerable to a stored cross-site scripting (XSS) flaw within Knowledge Base articles. An attacker with permissions to create or edit Knowledge Base articles can upload a JavaScript file and include a crafted link in the article body. If...

ULTIMATE-CYBERSECURITY-MASTER-GUIDE

🛡️ Ultimate Cybersecurity Master Guide Professional Cybersecurity Knowledge Base · Red Team · Blue Team · Purple Team A curated cybersecurity knowledge base with original guides, references and tools Abide by theLegal Terms of Use & Disclaimer for the use and misuse of this repository. "Under...

PentestingEverything

PentestingEverything A complete, searchable penetration-testing knowledge base across 23 security domains. Live website: pentesting.m14r41.in Live Website · PentestingChecklist · Contribute · Report an Issue Read it online at pentesting.m14r41.in : fully searchable, with 108 documentation pages,...

pentest

Pentester Guide A comprehensive, SEO-first penetration-testing knowledge base — tools, methodologies, cheatsheets, certifications, and career resources — built as a hand-rolled Jekyll static site on GitHub Pages, with no off-the-shelf theme. Live site: guide.zishanhack.com — this repo is the sour...

RedTeaming-Tactics-and-Techniques

description: - These are notes about all things focusing on, but not limited to, red teaming and offensive security. What is ired.team notes? This is publicly accessible personal red teaming notes at https://ired.team and https://github.com/mantvydasb/RedTeam-Tactics-and-Techniques about my...

Awesome-RCE-techniques

Awesome RCE techniques Awesome list of techniques to achieve Remote Code Execution RCE on various apps! Goal of this project The goal of this project is to provide an OpenSource knowledge database of all the techniques to achieve Remote Code Execution RCE on various applications. All of these...

Awesome-Redteam

Awesome-Redteam ❗Disclaimer: The technologies, concepts, and tools provided in this Git repository are intended for educational and research purposes only. Any use for illegal activities, unauthorized penetration testing, or commercial purposes is strictly prohibited. Please read theAwesome-Laws...

Cyber-Library

Cyber Library Learn cybersecurity, from the foundations up. A structured, community-maintained knowledge base: six tracks, one tree, from how a network works to how an attacker thinks. Read the library → · Browse the structure · Connect your assistant ⭐ If the library helps you, star the repo...

chipwhisperer

ChipWhisperer Important Links Documentation | Labs | Forum | Store | NewAE ChipWhisperer 7.0: Revamped Analyzer, Project, SCA101 ChipWhisperer 7.0 is bringing major improvements to projects, analyzer, as well as a new online course, SCA101. These changes include: New Zarr based projects with...

appsec-forge

appsec-forge Created for Developers, DevOps, AppSec, DevSecOps, and Security Engineers. A repository-first security knowledge base covering secure development, application security, infrastructure, software supply chain, AI, and DevSecOps. Study security problems the same way experienced...

misp-galaxy

misp-galaxy MISP galaxy is a simple method to express a large object called cluster that can be attached to MISP events or attributes. A cluster can be composed of one or more elements. Elements are expressed as key-values. There are default knowledge base such as Threat Actors, Tools, Ransomware...

CVE-2025-7431

Proof of Concept – CVE-2025-7431 Knowledge Base = 2.3.1 - Authenticated Administrator+ Stored Cross-Site Scripting via Plugin Slug CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N ------- 4.4 Vulnerability Overview An authenticated attacker Administrator can exploit a Stored Cross-Site Scripting XSS...