1436637 matches found
echteeteepee
HTTP/1 Desync Vulnerability Testing Tools This repository contains defensive security tools for detecting HTTP/1 request smuggling desync vulnerabilities based on groundbreaking research by James Kettle of PortSwigger. Research Attribution This work is directly inspired by and implements techniqu...
conscryptchecker
conscryptchecker IMPORTANT! add your own app/google-services.json in order to successfully build...
wordpress-really-simple-security-authn-bypass-vulnerable-application
wordpress-really-simple-security-authn-bypass-vulnerable-application This is a vulnerable application to test the exploit for the Really Simple Security 9.1.2 authentication bypass CVE-2024-10924. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is...
wordpress-really-simple-security-authn-bypass-vulnerable-application
wordpress-really-simple-security-authn-bypass-vulnerable-application Esta es una aplicación vulnerable para probar el exploit de la omisión de autenticación de Really Simple Security 9.1.2 CVE-2024-10924. ¡ADVERTENCIA! Esta aplicación contiene vulnerabilidades de seguridad graves. ¡Úsala bajo tu...
heaphopper
heaphopper HeapHopper is a bounded model checking framework for Heap-implementations. Overview Setup root@kitploit: sudo apt update && sudo apt install build-essential python3-dev virtualenvwrapper git clone https://github.com/angr/heaphopper.git && cd ./heaphopper mkvirtualenv -ppython3 heaphopp...
CVE-2026-61711
A flaw was found in BuildKit. A custom frontend could craft a build request with an invalid security mode, leading to the disabling of Seccomp and AppArmor protections for the build container. This bypasses the intended sandbox mechanisms, potentially allowing for broader impact within the...
byob
Questions? Check out the docs or join our Discord support server Disclaimer : This project should be used for authorized testing or educational purposes only. BYOB is an open-source post-exploitation framework for students, researchers and developers. It includes features such as: Command & contr...
CVE-2014-6271
CS4238 CS4238 Computer Security Practices...
macOS-Kernel-Exploit
macOS-Kernel-Exploit DISCLAIMER You need to know the KASLR slide to use the exploit. Also SMAP needs to be disabled which means that it's not exploitable on Macs after 2015. These limitations make the exploit pretty much unusable for in-the-wild exploitation but still helpful for security...
cve-2020-15148
cve-2020-15148 cve-2020-15148...
CVE-2021-31166-Exploit
CVE-2021-31166-Exploit Exploit for MS Http Protocol Stack RCE vulnerability CVE-2021-31166 A specially crafted Http request targetting a vulnerable windows version will result into DOS attack. And the server will be rebooted with blue screen error. Http.sys is a windows kernel driver responsible...
Important: Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (CUDA)
Red Hat AI Inference Server 3.2.2 CUDA is now available. Red Hat® AI Inference Server...
CVE-2021-2394
CVE-2021-2394...
CVE-2019-0708
CVE-2019-0708 sup pry0cc :3 test: vote for thugcrowd in eu cyber something or other...
CVE-2023-4549
ID de CVE : CVE-2023-4549 Tipo de Vulnerabilidad : Cross-Site Scripting Descripción : El plugin DoLogin Security para WordPress es vulnerable a Cross-Site Scripting Almacenado a través del encabezado 'X-Forwarded-For' en versiones hasta la 3.6 inclusive, debido a una insuficiente sanitización de...
CVE-2020-5902
CVE-2020-5902 CVE-2020-5902...
ROOT-APP-PYPI-CVE-2025-54121 CVE-2025-54121 in starlette - Patched by Root
Root has patched CVE-2025-54121 in the starlette package for Root:PyPI. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-63383 CVE-2026-63383 in libevent - Patched by Root
Root has patched CVE-2026-63383 in the libevent package for Root:Debian:12. Multiple fixed versions available...