zap-scripts

zap-scripts Zed Attack Proxy Scripts for finding CVEs and Secrets. Building This project uses Gradle to build the ZAP add-on, simply run: ./gradlew build in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/. Usage The easiest way to use this repo in...

reversemap

reversemap Analyse SQL injection attempts in web server logs The program can either be run in batch mode or interactive mode. In batch mode the program will accept Apache web server logs and will deobfuscate requested URLs from the logs. In interactive mode the program will prompt for user input...

scorecard

OpenSSF Scorecard Overview What Is Scorecard? Prominent Scorecard Users View a Project's Score Scorecard's Public Data Using Scorecard Scorecard GitHub Action Scorecard REST API Scorecard Badges Scorecard MCP Server Scorecard Command Line Interface Prerequisites Installation Authentication Basic...

x64dbg

x64dbg An open-source binary debugger for Windows, aimed at malware analysis and reverse engineering of executables you do not have the source code for. There are many features available and a comprehensive plugin system to add your own. You can find more information on the blog! Screenshots |...

beef

=============================================================================== Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...

templates

Report Templates Directory Structure notes: Script generate-directories.py grabs the current latest version of the VRT structure from GitHub and creates any missing directories. Does not remove or rename directories based on items removed from VRT. Script follows standard entry names and keeps...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has patched vulnerabilities in various Developer Tools. A malicious actor can exploit these vulnerabilities to carry out attacks that may result in the categories of damage listed in the table below. The conditions required for successful exploitation vary depending on the vulnerability...

CVE-2026-119976

External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows an unauthorized attacker to disclose information over a network...

CVE-2026-119976

External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows an unauthorized attacker to disclose information over a network...

EUVD-2026-122277

External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows an unauthorized attacker to disclose information over a network...

CVE-2026-119976

The Visual Studio Code - GitHub Pull Requests and Issues Extension is vulnerable to an information disclosure vulnerability (CWE-73) caused by external control of file name or path . An unauthorized attacker could exploit this to disclose sensitive information over a network, potentially leading ...

Visual Studio Code GitHub Pull Requests and Issues Extension Information Disclosure Vulnerability

External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows an unauthorized attacker to disclose information over a network...

PT-2026-143966

External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows an unauthorized attacker to disclose information over a network...

CVE-2026-119976: Microsoft Visual Studio Code: External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows an…

External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows an unauthorized attacker to disclose information over a network...

subdomain-bruteforce-list

I'm grateful for the support received by Tuta subdomain bruteforce list Big list for subdomain bruteforcing: all.txt - size: 676931015 - sha256sum: c5ea368c50f848a46051897819c843c35e7db62ca0b287fd52487e94fd855150 wget "https://localdomain.pw/subdomain-bruteforce-list/all.txt.zip" -O all.txt &&...

PQC-Corpus: A Dataset of Linked Development Histories for Post-Quantum Cryptography

As post-quantum cryptography PQC standards evolve, developers must adapt implementations, tests, and protocols. Studying this work requires connecting code changes to problem reports and developer reviews. We present PQC-Corpus, a dataset of linked development histories from 179 public GitHub...

CVE-2026-119533

A flaw was found in Gitea. Project boards do not properly verify read permissions when listing pull requests that reference board issues. An unauthorized user or anonymous visitor viewing an accessible board can see metadata from private pull requests, including repository paths, pull request...

halogen

Halogen is a tool to automate the creation of yara rules based on the image files embedded within a malicious document. This can assist cyber security professionals in writing detection rules for malicious threats as well as help responders in identifying with particular threat they are dealing...

CVE-2026-119533

Repository and organization project boards listed the pull requests that reference each issue on the board without checking whether the viewer can read them. When a private pull request mentions an issue on a board the viewer can open, the board revealed the private repository's path and the pull...

CVE-2026-119533: Gitea: Repository and organization project boards listed the pull requests that reference each issue on the board without…

Repository and organization project boards listed the pull requests that reference each issue on the board without checking whether the viewer can read them. When a private pull request mentions an issue on a board the viewer can open, the board revealed the private repository's path and the pull...