detection-rules

检测规则 Detection Rules 是 Elastic Security 所用规则的大本营。该仓库用于 Elastic Security 检测引擎（Detection Engine）规则的开发、维护、测试、验证和发布。 该仓库最初在 Elastic 的博客文章中宣布：Elastic Security 开放公共检测规则仓库。更多内容，请参阅随附的网络研讨会：Elastic Security：公共检测规则仓库介绍。 目录 检测规则 目录 仓库概述 快速开始 如何贡献 检测即代码 DaC RTAs 许可证 疑问？问题？建议？ 仓库概述 Detection Rules...

cve

CVE PoC ほぼすべての公開されているCVE PoC。 現在最もホットなCVE...

CVE-2022-36804

CVE-2022-36804 概念验证 该仓库包含针对近期 BitBucket 远程代码执行漏洞 CVE-2022-36804 的简易概念验证利用代码。利用此漏洞需要能够访问目标实例上的一个仓库；如果你没有凭据，则目标必须具有公开仓库。 用法 root@kitploit: usage: exploit.py -h -p PROJECT -r REPO -u URL -c COMMAND --proxy PROXY --session SESSION --check Exploits the CVE-2022-36804 RCE in vulnerable BitBucket...

wiz-research-iocs

Wiz Research 公开 IOC 数据库 本仓库包含由 Wiz Research 聚合的公开失陷指标（IOC）。...

vuln_test_repo_public_ruby_gemfile_cve-2016-6317

此存储库没有 README。...

public-pentesting-reports

公开渗透测试报告 一个包含由咨询公司和学术安全团体发布的公开渗透测试报告的仓库。 由 Julio @ Blaze Information Security 维护 https://www.blazeinfosec.com。 基于 Arne Padmos 于2015年创建 的列表。有关威胁建模领域的类似工作，请参阅此仓库。...

Cyber-Defence

简介 本仓库包含 NCC Group 网络应急响应团队（Cyber Incident Response Team）公开发布的信息。 联系方式 如需了解本仓库中任何内容的更多信息，请联系团队：[email protected]。 如因安全事件需要联系我们的 CIRT 团队，请发送邮件至 [email protected]。 NCC Group 应急响应服务 NCC Group 拥有全球性的应急响应部门。我们在美国、加拿大、英国、荷兰、德国、丹麦、西班牙、新加坡、澳大利亚和日本均设有应急响应团队。...

nccfsas

はじめに このリポジトリには、NCC GroupのFull Spectrum Attack Simulation（FSAS）チームが公開した情報が含まれています。...

exploits

Repositorio público de exploits de prueba de concepto Este repositorio contiene exploits públicos de prueba de concepto PoC para diversas vulnerabilidades que he descubierto a lo largo del tiempo. Estos exploits PoC se comparten con fines educativos y para demostrar los riesgos potenciales...

Disclosures

漏洞披露 本仓库包含我的漏洞报告，这些报告不受保密协议（NDA）约束，也不受 VRP 服务条款的限制。 目录 Fancy Product Designer Microsoft Xfinity...

CVE-2026-45258_1day_LPE_exploit

このリポジトリには README がありません。...

gitlab-component

gitlab-component Getting started To make it easy for you to get started with GitLab, here's a list of recommended next steps. Already a pro? Just edit this README.md and make it your own. Want to make it easy? Use the template at the bottom! Add your files Create or upload files Add files using t...

security-advisories

Threat Lance 安全公告 由 Threat Lance 发布的公开安全公告仓库。 CVE| 标题| 严重程度| 发布日期 ---|---|---|--- CVE-2025-50455| EasyAppointments = 1.5.1 通过 orderby 的盲 SQL 注入| 严重| 待定...

semgrep-rules

Reglas públicas de Semgrep de Trail of Bits Este repositorio contiene reglas de Semgrep desarrolladas por Trail of Bits y puestas a disposición del público. Forman parte de nuestros esfuerzos de desarrollo continuo y se utilizan en nuestras auditorías de seguridad, investigación de vulnerabilidad...

PT-2026-55456

Summary 9router uses a publicly known hardcoded string "9router-default-secret-change-me" as the fallback of JWT secret for all Dashboard session JWTs when the JWT SECRET environment variable is not set. Because this secret is committed in the public repository and unchanged across all releases,...

9router's Hardcoded Default fallback JWT Secret Allows Authentication Bypass

9router uses a publicly known hardcoded string "9router-default-secret-change-me" as the fallback of JWT secret for all Dashboard session JWTs when the JWTSECRET environment variable is not set. Because this secret is committed in the public repository and unchanged across all releases, any...

CVE-2026-14340

GitHub Enterprise Server (GitHub ES) suffers an incorrect authorization vulnerability (CVE-2026-14340) where a user-to-server token scoped to a GitHub App installation could perform write operations on public repositories outside the token’s scope. The root cause is an authorization check that on...

PT-2026-51628

Name of the Vulnerable Software and Affected Versions Gogs affected versions not specified Description Gogs contains an authorization bypass in its Git Smart HTTP handler for repository RPCs. The system determines the authorization policy based on the client-supplied service query parameter rathe...

CVE-2026-48244

Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in settings.inc.php that is committed to the public source repository. The key can be extracted by anyone with read access to the source and used to make Google Maps Platform requests billed against the original owner's Google...

CVE-2026-48243

Open ISES Tickets before 3.44.2 embeds a hardcoded WhitePages reverse-phone API key in wp1.php that is committed to the public source repository. Any actor with read access to the source tree can extract the key and use it to make third-party API calls billed to or rate-limited against the origin...