pentest_lab

Pentest Lab I'm not actively developing on this anymore, but will fix bugs and look at issues and pull requests. Help is appreciated : This local pentest lab leverages docker compose to spin up multiple victim services and an attacker service running Kali Linux. If you run this lab for the first...

awesome-ctf-resources

Awesome CTF resources A list of Capture The Flag CTF frameworks, libraries, resources and software for started/experienced CTF players 🚩 Any contribution is welcome, send me a PR! ❤️ -The software and resources collected do not belong to me and have been compiled for educational purposes only-...

Pentest-Bookmarkz

Pentest Bookmarks List Sofiane Hamlaoui Check more on Google : https://g.co/kgs/FUZgoXi Hacker Media Blogs There are a LOT of pentesting blogs, these are the ones I monitor constantly and value in the actual day to day testing work. Carnal 0wnage - atom McGrew Security GNUCITIZEN Darknet - The...

awesome-web-hacking

awesome-web-hacking यह सूची उन सभी के लिए है जो वेब एप्लिकेशन सुरक्षा सीखना चाहते हैं लेकिन उनके पास कोई शुरुआती बिंदु नहीं है। आप अधिक जानकारी जोड़ने के लिए Pull Requests भेजकर मदद कर सकते हैं। यदि आप PRs बनाने के इच्छुक नहीं हैं तो आप मुझे @infoslack पर ट्वीट कर सकते हैं। विषय-सूची पुस्तकें...

dorothy

Created by David French @threatpunter at Elastic Security Dorothy is a tool to help security teams test their monitoring and detection capabilities for their Okta environment. Dorothy has several modules to simulate actions that an attacker might take while operating in an Okta environment and...

awesome-appsec-interview

قائمة رائعة لمقابلات أمن التطبيقات قائمة منسقة من الموارد والأسئلة التدريبية والمواد الدراسية لمساعدتك في الاستعداد لمقابلات مهندس أمن التطبيقات ، مصنفة حسب نوع المقابلة. المحتويات نظرة عامة على المقابلة مراجعة الكود الآمن نمذجة التهديدات البرمجة والكتابة النصية المقابلات القائمة على السيناريو...

awesome-devsecops

बेहतरीन DevSecOps GitHub पर awesome- प्रवृत्ति से प्रेरित। यह दस्तावेज़ों, प्रस्तुतियों, वीडियो, प्रशिक्षण सामग्री, उपकरणों, सेवाओं और सामान्य नेतृत्व का एक संग्रह है जो DevSecOps मिशन का समर्थन करता है। ये आवश्यक बिल्डिंग ब्लॉक्स और छोटी-छोटी जानकारियाँ हैं जो आपको DevSecOps प्रयोग की व्यवस्था...

awesome-reverse-engineering-and-malware-analysis

बेहतरीन रिवर्स इंजीनियरिंग और मालवेयर विश्लेषण यह रिवर्स इंजीनियरिंग और मालवेयर विश्लेषण का नक्शा है जिसे वास्तव में पढ़ा गया है। हर लिंक को शामिल किए जाने से पहले खोला और जांचा गया था, और जैसे ही वह बेकार होता है उसे हटा दिया जाता है - न मृत पेज, न एक-शब्द के नोट, न "महान संसाधन!" जैसा भराव।...

Bug-Bounty

فيما يلي بعض موارد مكافآت الاختراق من Twitter قائمة المحتويات :...

sqliv

SQLiv Massive SQL injection scanner Features 1. multiple domain scanning with SQL injection dork by Bing, Google, or Yahoo 2. targetted scanning by providing specific domain with crawling 3. reverse domain scanning both SQLi scanning and domain info checking are done in multiprocessing so the...

awesome-entra

Awesome Entra Une liste organisée d'outils, de guides et d'autres ressources Microsoft Entra. Sommaire Newsletter et podcast de Merill Carte mentale Centres d'apprentissage Présentations aka.ms & cmd.ms Outils Communauté YouTube Podcast Bluesky Twitter LinkedIn Blogs Newsletter et podcast de Meri...

Incomplete Filtering of Special Elements

Overview angular is a package that lets you write client-side web applications as if you had a smarter browser. It also lets you use HTML as your template language and lets you extend HTML’s syntax to express your application’s components clearly and succinctly. Affected versions of this package...

Fedora 44 : pcs (2026-d420bebe72)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d420bebe72 advisory. - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.24.3 see CHANGELOGWUI.md - Fixed a crash when running pcs...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: lib/stringhelpers: Fixed the issue where strarray was not added to the device’s resource list. Added the allocated strarray to the device’s resource list. This is necessary to automatically release the strarray when the device...

GHSA-48CH-P4GQ-X46X Vikunja Missing Authorization on CalDAV Task Read

Summary The CalDAV GetResource and GetResourcesByList methods fetch tasks by UID from the database without verifying that the authenticated user has access to the task's project. Any authenticated CalDAV user who knows or guesses a task UID can read the full task data from any project on the...

CVE-2025-64469

There is a stack-based buffer overflow vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially...

CVE-2025-64469

There is a stack-based buffer overflow vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially...

CVE-2025-64467

There is an out of bounds read vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted...

CVE-2025-64467 Out-of-Bounds Read in LVResFile::FindRsrcListEntry() in NI LabVIEW

There is an out of bounds read vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted...

PT-2025-52237

Name of the Vulnerable Software and Affected Versions NI LabVIEW versions prior to 25.3 Description An out of bounds read issue exists in NI LabVIEW within the LVResFile::FindRsrcListEntry function when processing a damaged VI file. This can lead to information disclosure or arbitrary code...