775 matches found
githubFind3r
githubFind3r githubFind3r is a very fast command line repo/user/commit search tool enter image description here Installation root@kitploit: git clone https://github.com/atmoner/githubFind3r.git cd githubFind3r npm install Run it root@kitploit: node githubFind3r.js...
cve-2024-21409-repro
This repository does not have a README...
osintbuddy
我还没有任何数据。在没有数据之前就进行理论推导是一个重大错误。人们会不知不觉地扭曲事实来适应理论，而不是让理论适应事实。 | plugins-system | osintbuddy.com | osintbuddy discord | entities | pypi package | 认识 OSINTBuddy 注意 – 不，这个项目并没有“死亡” ，我们正在进行一次重大重写（Python 插件仍将得到支持！）。重写版本位于 github.com/osintbuddy/osintbuddy 欢迎来到 OSINTBuddy...
git-all-secrets
git-all-secrets Sobre git-all-secrets é uma ferramenta que pode: Clonar múltiplos repositórios públicos/privados do GitHub de uma organização e escaneá-los, Clonar múltiplos repositórios públicos/privados do GitHub de um usuário que pertence a uma organização e escaneá-los, Clonar um único...
CVE-2019-5413
CVE-2019-5413 Repo falso...
nimcrypt
nimcrypt Nimcrypt is a .NET PE Crypter written in Nim, based entirely on the work of @byt3bl33d3r's OffensiveNim project: https://github.com/byt3bl33d3r/OffensiveNim This tool was inspired by @S3cur3Th1sSh1t's blog post a few months ago, as it's essentially just a full PoC of what he presented:...
proxmark3
Deprecato Fork di Iceman QUESTO FORK È STATO DEPRECATO, USA IL REPO RRG/ICEMAN! Rif.: repository GitHub Proxmark3 RDV4.0 Il repo RRG/Iceman è basato su questo repo. Nel repo RRG è stato investito molto sviluppo per portare il supporto a tutte le nuove funzionalità hardware. Il repo supporta...
gh-safe-repo
gh-safe-repo Erstelle GitHub-Repositories mit automatisch angewendeten sicheren Standardeinstellungen. Ersetzt die fünfminütige Checkliste für Einstellungen nach der Erstellung durch einen einzigen Befehl. gh-safe-repo create root@kitploit: Branch protection, immutable tags, Dependabot, restricte...
CVE-2026-77573 Weblate: DNS rebinding in VCS operations allows server-side request forgery
Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.8, a user permitted to manage component repository URLs can perform server-side request forgery against internal services through DNS rebinding during VCS operations. Weblate...
platform_frameworks_base_CVE-2023-21288
Questo repository non contiene un README...
dymerge
A simple, yet powerful tool - written purely in python - which takes given wordlists and merges them into one dynamic dictionary that can then be used as ammunition for a successful dictionary based or bruteforce attack. Compatible with Python 2.6 & 2.7. Author: Nikolaos Kamarinakis nikolaskama.m...
VulnLLM-R
VulnLLM-R: LLM di Ragionamento Specializzato per il Rilevamento di Vulnerabilità Paper: arXiv:2512.07533 Codice e Dati: GitHub Demo: Demo web Modello: Modello 7B Ambiente e dataset 🛠️ Creare l'ambiente Installare Git LFS e clonare il repository i file LFS vengono scaricati automaticamente durante...
cve-2026-45033-class
Claude Code — Guard-Bypass für Git-Bare-Repo / core.fsmonitor PoC Proof-of-concept für die Schwachstellenklasse „bösartiges Bare-Git-Repository →core.fsmonitor → Codeausführung" vgl. CVE-2026-45033 in GitHub Copilot CLI, reproduziert gegen Claude Code , wobei die zusätzliche...
trajan
Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...
CVE-2024-58376
Renovate versions 37.158.0 before 37.199.0 contain a command injection vulnerability in the helmv3 manager's registryAliases handling that allows attackers with commit access to execute arbitrary commands. Attackers can manipulate registryAliases keys with unquoted shell metacharacters to inject...
EUVD-2026-62470
Renovate versions from 39.218.0 before 40.33.0 contain an arbitrary command injection vulnerability in the kustomize manager where user-provided chart names are appended to helm pull commands without proper sanitization. Attackers with repository write access can craft malicious kustomization.yam...
CVE-2024-58376
Renovate versions 37.158.0 through 37.198.0 are affected by a command injection vulnerability in the helmv3 manager's registryAliases handling. Since PR #26848 made registryAliases mergeable, the helmv3 manager executes helm repo add for each defined alias. The key was not quoted , allowing att...
CVE-2024-58376 Renovate 37.158.0 before 37.199.0 Command Injection via helmv3
Renovate versions 37.158.0 before 37.199.0 contain a command injection vulnerability in the helmv3 manager's registryAliases handling that allows attackers with commit access to execute arbitrary commands. Attackers can manipulate registryAliases keys with unquoted shell metacharacters to inject...
EUVD-2026-60969
CodeWhale versions before 0.8.64 fail to properly validate the allowshell configuration parameter from project config files, allowing attackers to enable arbitrary shell command execution by committing a malicious .codewhale/config.toml file to a repository. When a user clones and opens the...