pentest_lab

Pentest Lab I'm not actively developing on this anymore, but will fix bugs and look at issues and pull requests. Help is appreciated : This local pentest lab leverages docker compose to spin up multiple victim services and an attacker service running Kali Linux. If you run this lab for the first...

awesome-reverse-engineering-and-malware-analysis

Awesome Reverse Engineering & Malware Analysis Un mapa de ingeniería inversa y análisis de malware que de verdad se ha leído. Cada enlace fue abierto y verificado antes de entrar, y se retira en cuanto se pudre: sin páginas muertas, sin notas de una palabra, sin relleno de «¡gran recurso!»...

ruby-advisory-db

Ruby Advisory Database The Ruby Advisory Database is a community effort to compile all security advisories that are relevant to Ruby libraries. We expect others to create the data, such as getting CVE's, GHSA's, OSVDB's, cvss', or original vulnerability information. More details at HERE. You can...

Bug-Bounty

בס״ד ⚜️ Aภl๏miuภuຮ ⚜️ ⫷ HacKingPro ⫸ ⫷ TryHackMe | KoTH ⫸ ⫷ Privilege-Escalation⫸ ⫷ ScanPro | Linfo | Diablo ⫸ ⫷ Offensive-Security | PenTest ⫸ ⫷ Goals | Studies | HacKing | AnyTeam ⫸ Bug Bounty Awesomes Books Cheatsheets Checklists Tools Wordlists More GitHub Bounty GitHub Security Bug Bounty...

awesome-ctf-resources

Recursos increíbles de CTF Una lista de Capture The Flag CTF frameworks, librerías, recursos y software para jugadores de CTF principiantes/experimentados 🚩 Cualquier contribución es bienvenida, ¡enviame un PR! ❤️ -El software y los recursos recopilados no me pertenecen y han sido compilados solo...

Bug-Bounty

Here Are Some Bug Bounty Resource From Twitter Contents List :...

awesome-entra

Awesome Entra A curated list of awesome Microsoft Entra tools, guides, and other resources. Contents Merill's newsletter & podcast Mind Map Learning Hubs Presentations aka.ms Tools Community YouTube Podcast Bluesky Twitter LinkedIn Blogs Merill's newsletter & podcast Entra.News - Weekly round up...

Pentest-Bookmarkz

Pentest Bookmarks List Sofiane Hamlaoui Ver más en Google : https://g.co/kgs/FUZgoXi Medios Hacker Blogs Hay MUCHOS blogs de pentesting, estos son los que monitoreo constantemente y valoro en el trabajo de pruebas del día a día. Carnal 0wnage - atom McGrew Security GNUCITIZEN Darknet - The...

Awesome-Red-Teaming

Esta Lista ya no se actualiza. Awesome Red Teaming Lista de recursos increíbles de Red Team / Red Teaming Esta lista es para cualquiera que desee aprender sobre Red Teaming pero no tenga un punto de partida. De todos modos, es un recurso vivo y se actualizará regularmente con las últimas Tácticas...

awesome-appsec-interview

Awesome Entrevista AppSec Una lista curada de recursos, preguntas de práctica y materiales de estudio para ayudarte a prepararte para entrevistas de Ingeniero de Seguridad de Aplicaciones , organizadas por tipo de entrevista. Contenido Resumen de la Entrevista Revisión de Código Seguro Modelado d...

awesome-devsecops

Awesome DevSecOps Inspirado por la tendencia awesome- en GitHub. Esta es una colección de documentos, presentaciones, vídeos, materiales de formación, herramientas, servicios y liderazgo general que apoyan la misión de DevSecOps. Estos son los bloques de construcción esenciales y fragmentos que...

Incomplete Filtering of Special Elements

Overview angular is a package that lets you write client-side web applications as if you had a smarter browser. It also lets you use HTML as your template language and lets you extend HTML’s syntax to express your application’s components clearly and succinctly. Affected versions of this package...

Fedora 44 : pcs (2026-d420bebe72)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d420bebe72 advisory. - Updated standalone web UI and HA Cluster Management Cockpit application to pcs-web-ui 0.1.24.3 see CHANGELOGWUI.md - Fixed a crash when running pcs...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: lib/stringhelpers: Fixed the issue where strarray was not added to the device’s resource list. Added the allocated strarray to the device’s resource list. This is necessary to automatically release the strarray when the device...

GHSA-48CH-P4GQ-X46X Vikunja Missing Authorization on CalDAV Task Read

Summary The CalDAV GetResource and GetResourcesByList methods fetch tasks by UID from the database without verifying that the authenticated user has access to the task's project. Any authenticated CalDAV user who knows or guesses a task UID can read the full task data from any project on the...

CVE-2025-64469

There is a stack-based buffer overflow vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially...

CVE-2025-64469

There is a stack-based buffer overflow vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially...

CVE-2025-64467

There is an out of bounds read vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted...

CVE-2025-64467 Out-of-Bounds Read in LVResFile::FindRsrcListEntry() in NI LabVIEW

There is an out of bounds read vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted...

PT-2025-52237

Name of the Vulnerable Software and Affected Versions NI LabVIEW versions prior to 25.3 Description An out of bounds read issue exists in NI LabVIEW within the LVResFile::FindRsrcListEntry function when processing a damaged VI file. This can lead to information disclosure or arbitrary code...