ftw

Marco para probar WAFs FTW Propósito Este proyecto fue creado por investigadores de ModSecurity y Fastly para ayudar a proporcionar pruebas rigurosas para reglas de WAF. Utiliza el OWASP Core Ruleset V3 como línea base para probar reglas en un WAF. Cada regla del conjunto de reglas se carga en un...

HybridTestFramework

HybridTestFramework Supported By In the era of cloud-native world we cannot stick to a particular framework, however due to projects requirement we often need to evolve the existing testing solution in such a way so that it can cater multiple testing requirement, hence is targeting to create a...

Agent-Security-Regression-Harness

OWASP Agent Security Regression Harness The OWASP Agent Security Regression Harness is an open source, vendor-neutral test harness for running executable security regression scenarios against agentic applications and MCP-integrated systems. The project helps builders and defenders verify that...

AutoTTP

AutoTTP Automated Tactics Techniques & Procedures. Re-running complex sequences manually for regression tests, product evaluations, generate data for researchers & so on can be tedious. I toyed with the idea of making it easier to script Empire or any frameworks/products/toolkits that provide API...

CVE-2024-6387

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ OpenSSH...

V8Harvest

V8Harvest V8Harvest helps view recent V8 bug patterns on a single page for analyzing V8 vulnerabilities. It has parsed all regress- files under the directory of src/v8/test/mjsunit/ using git log. Each regress contains the following links related to its own information: Chromium Bugs / V8 Bugs V8...

WebKitGTK-DND-Fix

WebKitGTK-DND-Fix Research and CI notebook for restoring trusted file drag-and-drop on WebKitGTK and WPE after CVE-2025-13947. The issue CVE-2025-13947 WSA-2025-0009, GHSA-j77f-3hf7-7rvg let web content read local file contents through drag-and-drop on WebKitGTK. The upstream fix, bugs.webkit.org...

rtl8812au

Controladores inalámbricos RTL8812AU/21AU y RTL8814AU Solo para uso con Linux y Android ESTOS CONTROLADORES ESTÁN OBSOLETOS. Use los controladores mac80211 en https://github.com/lwfinger/rtw88 ¡Importante! root@kitploit: Use "ip" e "iw" en lugar de "ifconfig" e "iwconfig" Se describe más abajo,...

CVE-2026-3494_Verfication

CVE-2026-3494 - MariaDB serveraudit Logging Verification PoC This project provides a specialized environment to verify and analyze a potential audit logging bypass in the MariaDB serveraudit plugin when specific inline comments , -- are used within SQL queries. Key Findings Logging Omission in...

CVE-2026-79763 Termix: MFA-critical operations accept the account password as a sole factor (regression of CVE-2026-45749)

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.0 until 2.5.1, the POST /users/totp/disable and POST /users/totp/backup-codes endpoints accept the account password as the sole reauthentication factor after a 2.4.0 refactor...

coreruleset

Rama| Estado ---|--- main| 🛡️ OWASP CRS...

tcpcopy

TCPCopy - A TCP Stream Replay Tool TCPCopy is a TCP stream replay tool for realistic testing of Internet server applications. Getting to Know TCPCopy An Overview of TCPCopy for Beginners A General Overview of TCPCopy Architecture TCPCopy Testing Use Cases TCPCopy Pre-Warming Examples Description...

CVE-2026-86350

Inconsistent interpretation of HTTP/2 requests 'HTTP Request/Response smuggling' vulnerability in Apache Tomcat caused by a regression in fix for CVE-2026-41293 can trigger request header mix-up. This issue affects Apache Tomcat: from 11.0.22 through 11.0.25, from 10.1.55 through 10.1.59, from...

CVE-2026-86350

Inconsistent interpretation of HTTP/2 requests 'HTTP Request/Response smuggling' vulnerability in Apache Tomcat caused by a regression in fix for CVE-2026-41293 can trigger request header mix-up. This issue affects Apache Tomcat: from 11.0.22 through 11.0.25, from 10.1.55 through 10.1.59, from...

EUVD-2026-85235

Inconsistent interpretation of HTTP/2 requests 'HTTP Request/Response smuggling' vulnerability in Apache Tomcat caused by a regression in fix for CVE-2026-41293 can trigger request header mix-up. This issue affects Apache Tomcat: from 11.0.22 through 11.0.25, from 10.1.55 through 10.1.59, from...

CVE-2026-86350 Apache Tomcat: Regression in fix for CVE-2026-41293 can trigger request header mix-up

Inconsistent interpretation of HTTP/2 requests 'HTTP Request/Response smuggling' vulnerability in Apache Tomcat caused by a regression in fix for CVE-2026-41293 can trigger request header mix-up. This issue affects Apache Tomcat: from 11.0.22 through 11.0.25, from 10.1.55 through 10.1.59, from...

roninforge-hono

roninforge-hono Cursor plugin for Hono v4 TypeScript edge web framework + TypeScript. Pinned to hono ^4.12.19, @hono/zod-validator ^0.8.0, @hono/zod-openapi ^1.4.0 peer zod ^4.x, @hono/node-server ^2.0.3 Node 20+. Teaches the v4 APIs that LLMs trained on pre-2024 data do not know c.json always...

regression-scanner

This repository does not have a README...

CVE-2025-26865

CVE-2025-26865: FreeMarker Server-Side Template Injection via the "ecommerce" plugin in Apache OfBiz Due to a regression between 18.12.17 and 18.12.18 the fix for finding CVE-2022-25813: FreeMarker Server-Side Template Injection in Apache OfBiz was no longer enforced which reopened the possibilit...

USN-8779-2: Bubblewrap regression

USN-8779-1 fixed vulnerabilities in Bubblewrap. Unfortunately, the fix for CVE-2026-87766 introduced a regression in symlink resolution, preventing certain Flatpak applications from launching. This update reverts that fix until a complete fix is available. We apologize for the inconvenience...