PentesterLab-Intercept-CVE-2014-1266

This repository does not have a README...

CVE-2024-32002-hook

This repository does not have a README...

CVE-2023-38609

このリポジトリには README がありません。...

semgrep-rules

Trail of Bits public Semgrep rules This repository contains Semgrep rules developed by Trail of Bits and made available to the public. They are part of our ongoing development efforts and are used in our security audits, vulnerability reseach, and internal projects. They will evolve over time as ...

CVE-2019-9849

CVE-2019-9849: Remote bullet graphics retrieved in “stealth mode” in LibreOffice LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable...

psychic-signatures

CVE-2022-21449: Psychic Signatures in Java...

CVE-2024-38821-POC

CVE-2024-38821: Proof of Concept PoC: Authentication Bypass in Spring Framework This is a proof of concept for the CVE-2024-38821 vulnerability Execution Steps 1. Build the Docker image Spring Boot 3.3.4, based on Spring Framework 6.1.13 root@kitploit: cd vuln docker build -t cve-2024-38821-poc...

CVE-2026-60004 vulnerabilities

Vulnerabilities for packages: gitea...

MINI-R59R-7PQ4-X3C8

Bulletin has no description...

MINI-5R39-W9JF-FF97

Bulletin has no description...

MINI-423F-4677-9VM4

Bulletin has no description...

CVE-2021-25162

CVE-2021-25162 CVE-2021-25162...

seal-security-nuget-demo-net7

Browser + CLI Demo NuGet/C — .NET 7 Edition Why a .NET 7 fork? This is a retargeted fork of the canonical seal-security-nuget-demo which targets net9.0. The exploit story, the controllers, and the sealed-package list are identical — only theTargetFramework differs. It exists because most enterpri...

aegisagent

AegisAgent — AI Agent Runtime Security Gateway AI Agent Runtime Security Gateway — cryptographically binds every tool call to the authentic model completion, zero-trust policy enforcement, and integrated sandbox isolation and human approval. Background: Why AegisAgent In August 2026, the Cloud...

onedrive_user_enum

onedriveuserenum v2.10 enumerate valid onedrive users For a full rundown of the enumeration technique and OneDrive enum, check out the blog here: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ If you are looking for the old, non-database vesion of OneDrive Enum, you can find it here:...

presentations

My presentations More things can be found in my personal site: https://sites.google.com/site/zhiniangpeng root@kitploit: Exploiting preauth RCE and Sandbox escape vulnerabilities in EXSi, Typhooncon 2023 OLE object are still dangerous today — Exploiting Microsoft Office, POC 2023...

awesome-ai-security — Updated!

awesome-ai-security A curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers. root@kitploit: If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the...

CVE-2023-30212

CVE-2023-30212 Docker environment and exploit the CVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7.2.0 .This vulnerability allows for Cross-Site Scripting XSS attacks...

CVE-2022-0847

このリポジトリには README がありません。...

fickling

Fickling Fickling is a decompiler, static analyzer, and bytecode rewriter for Python pickle object serializations. You can use fickling to detect, analyze, reverse engineer, or even create malicious pickle or pickle-based files, including PyTorch files. Fickling can be used both as a python libra...