h2t

h2t - Herramienta de Endurecimiento HTTP Descripción h2t es una herramienta simple para ayudar a los administradores de sistemas a endurecer sus sitios web. Hasta ahora h2t verifica las cabeceras del sitio web y recomienda cómo mejorarlas. Dependencias Python 3 colorama requests Instalación...

packman

packman A documentation and tracking project with the goal of making package management systems more secure. See issues for a very rough list of a few of the related issues we have seen. Table Of Package Management Systems...

hyenae-ng

Hyenae NG Hyenae NG Next Generation is a re-write of the original Hyenae tool which was originally published back in the year 2010. Besides switching from C to C++, using modern design concepts, Hyenae NG was just like the original Hyenae written with maximum portability in mind. Since the origin...

Updated nodejs packages fix security vulnerabilities

http2: retain header memory in session accounting. CVE-2026-56846 http2: defer rst stream while in scope. CVE-2026-56848 permission: avoid granting radix split nodes. CVE-2026-58043 https: distinguish PFX object-array agent keys. CVE-2026-56850 https: bind identity checks to session reuse...

cve-2017-12615

cve-2017-12615...

PentesterLab-Intercept-CVE-2014-1266

Este repositorio no tiene un README...

CVE-2024-32002-hook

This repository does not have a README...

nuclei-templates

Nuclei Templates Lista de plantillas curada por la comunidad para el motor nuclei, con el fin de encontrar vulnerabilidades de seguridad en las aplicaciones. Documentación • Contribuciones • Discusión • Comunidad • Preguntas frecuentes •...

CVE-2023-38609

This repository does not have a README...

semgrep-rules

Trail of Bits public Semgrep rules This repository contains Semgrep rules developed by Trail of Bits and made available to the public. They are part of our ongoing development efforts and are used in our security audits, vulnerability reseach, and internal projects. They will evolve over time as ...

CVE-2019-15107

CVE-2019-15107...

CVE-2019-9849

CVE-2019-9849: Gráficos de viñetas remotos recuperados en el “modo sigiloso” en LibreOffice LibreOffice tiene un 'modo sigiloso' en el que solo los documentos de ubicaciones consideradas 'de confianza' pueden recuperar recursos remotos. Este modo no es el modo predeterminado, pero los usuarios...

wanderer

Wanderer Wanderer is an open-source program that collects information about running processes. This information includes the integrity level, the presence of the AMSI as a loaded module, whether it is running as 64-bit or 32-bit as well as the privilege level of the current process. This...

CVE-2024-4577

CVE-2024-4577 CVE-2024-4577...

psychic-signatures

CVE-2022-21449: Psychic Signatures in Java...

CVE-2024-38821-POC

CVE-2024-38821: Proof of Concept PoC: Authentication Bypass in Spring Framework This is a proof of concept for the CVE-2024-38821 vulnerability Execution Steps 1. Build the Docker image Spring Boot 3.3.4, based on Spring Framework 6.1.13 root@kitploit: cd vuln docker build -t cve-2024-38821-poc...

qark

Quick Android Review Kit 此工具旨在查找 Android 应用程序中的多个安全相关漏洞，无论是源代码还是打包的 APK。该工具还能够创建“概念验证”可部署 APK 和/或 ADB 命令，能够利用它发现的许多漏洞。无需对测试设备进行 root，因为此工具专注于在原本安全的环境下仍可被利用的漏洞。 需求 已在 Python 2.7.13 和 3.6 上测试 已在 OSX、Linux 和 Windows 上测试 用法 更多选项请参见 --help 命令。 APK:: qark --apk path/to/my.apk Java 源码文件:: qark --java...

CVE-2026-60004 vulnerabilities

Vulnerabilities for packages: gitea...

CVE-2021-25162

CVE-2021-25162 CVE-2021-25162...

CVE-2023-4800

ID de CVE: CVE-2023-4800 Tipo de Vulnerabilidad: Exposición de datos sensibles Descripción: El plugin DoLogin Security para WordPress es vulnerable al acceso no autorizado de datos debido a una verificación de capacidad faltante en el widget del panel de administración en versiones hasta la 3.7...