613068 matches found
CVE-2026-67316 vulnerabilities
Vulnerabilities for packages: nextcloud-server, azurite, langfuse, semaphore, wazuh-dashboard-fips, awx, opensearch-dashboards, lerna, prism, jitsucom-jitsu, opensearch-dashboards-fips, kubeflow-centraldashboard, langfuse-fips, librechat, kibana, redisinsight, wazuh-dashboard...
syft
Syft A CLI tool and Go library for generating a Software Bill of Materials SBOM from container images and filesystems. Exceptional for vulnerability detection when used with a scanner likeGrype...
cve-2022-21907
CVE-2022-21907 This package will detect exploits of CVE-2022-21907 https://corelight.com/blog/detecting-cve-2022-21907 Detection Method: HTTP HTTP data must be = 1750 bytes, and The HTTP/1.1 is not observed at the end of the exploit HTTP request. Usage: root@kitploit: $ zeek -Cr your.pcap package...
Certitude
Certitude es un paquete Python para realizar clasificación supervisada de URL maliciosas utilizando un conjunto conjunto de características lexicográficas y de certificados. Todos los proyectos COSSAS están alojados enGitLab con un mirror push a GitHub. Para problemas/contribuciones consulta...
ios-mac-app
Proton VPN for iOS and macOS Copyright c 2025 Proton Technologies AG Dependencies This project uses Swift Package Manager for all of it's dependencies. Allow Xcode to resolve packages before running any target. Third-party dependencies ACKNOWLEDGEMENTS.md Setup Enable Git LFS on your machine Clon...
CVE-2024-20767
CVE-2024-20767...
boa-detector
boa-detector This Zeek package detects the Boa web server string in HTTP headers. All Boa versions are considered vulnerable: https://www.microsoft.com/en-us/security/blog/2022/11/22/vulnerable-sdk-components-lead-to-supply-chain-risks-in-iot-and-ot-environments/ When the /^Boa/./ server string i...
Corelight-Ansible-Roles
Corelight-Ansible-Roles Caution: Before you run this version, if you are upgrading, some variable names and locations have changed To get started, simply run this command: source curl https://raw.githubusercontent.com/corelight/Corelight-Ansible-Roles/main/download-run-me-first.sh This product...
conn-burst
Connection Burst Identification This package identifies "bursting connections" which are considered to be connections which transfer a large amount of data quickly. Once a bursty connection is identified it is no longer watched for being bursty. When a bursty connection is identified, the event...
go-zeek-broker-ws
Zeek Broker websocket interface library for Golang This library implements the Zeek Broker websocket interface. Helper functions are provided with reasonable mappings between Zeek and Go types. Usage The library contains two packages: encoding encoding models the recursive JSON-based data structu...
PetitPotam-notest
PetitPotam NTLM Relay Attack Detection A Zeek package for detecting some attempts to trigger NTLM relay attacks via the Petit Potam exploit. This package will detect what appear to be successful and unsuccessful exploit attempts. It makes a distinction between them by examining the return code fo...
PetitPotam
PetitPotam NTLM Relay Attack Detection A Zeek package for detecting some attempts to trigger NTLM relay attacks via the Petit Potam exploit. This package will detect what appear to be successful and unsuccessful exploit attempts. It makes a distinction between them by examining the return code fo...
ripple20
"Ripple20" Treck IOT/ICS device discovery and exploit detection v0.2 Summary: A Zeek package for the passive detection of Treck devices, discovery/scanning attempts and exploitation of the "Ripple20" set of vulnerabilities in the Treck TCP/IP stack. References:...
NPM: nanoid: Integer Overflow or Wraparound
NPM: nanoid: Integer Overflow or Wraparound vulnerability discovered by ? in WordPress Npm nanoid versions 3.3.12...
CVE-2022-36446
CVE-2022-36446 CVE-2022-36446 - Webmin 1.996 Remote Code Execution Access to the "Software Package Updates" module is required to trigger the vulnerability. Users with access to this module can run commands with root privileges on the system by performing OS Command Injection during a new package...
evilginx2
Evilginx 3.0 Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server...
CVE-2019-12840_POC
CVE-2019-12840POC PoC para la ejecución remota de comandos autenticada en la actualización de paquetes de Webmin Una alternativa al módulo de metasploit. Todo el crédito es para Özkan Mustafa Akkuş https://www.pentest.com.tr/exploits/Webmin-1910-Package-Updates-Remote-Command-Execution.html...
vet
Inicio Rápido • Documentación • Comunidad...
nmap
nmap This library aims at providing idiomatic nmap bindings for go developers, in order to make it easier to write security audit tools using golang. What is nmap Nmap Network Mapper is a free and open-source network scanner created by Gordon Lyon. Nmap is used to discover hosts and services on a...