Nuclei-Templates-Collection

https://github.com/0xSojalSec/templates-nuclei-Oracle-OAM---XSS https://gist.github.com/ResistanceIsUseless/e46848f67706a8aa1205c9d2866bff31 https://github.com/0xElkot/My-Nuclei-Templates https://github.com/0xSojalSec/Nuclei-Templates-API-Linkfinder https://github.com/0xSojalSec/templatesallnucle...

DetectionLabELK

DetectionLabELK DetectionLabELK è un fork del DetectionLab di Chris Long con stack ELK al posto di Splunk. Descrizione: DetectionLabELK è il laboratorio perfetto da usare se vuoi sviluppare capacità di rilevamento efficaci. È stato progettato pensando ai difensori. Il suo scopo principale è...

xioc

xioc Estrai indicatori di compromissione dal testo, inclusi quelli "escapati" come hxxp://banana.com, 1.1.1.1 e phish at malicious dot com. Installazione Scarica un binario precompilato da https://github.com/assafmo/xioc/releases Oppure... Usa go get: root@kitploit: go get -u...

CyberRange

Übersicht: Dieses CyberRange-Projekt stellt den weltweit ersten Open-Source-Blueprint für einen Cyber Range dar. Dieses Projekt bietet ein Bootstrap-Framework für eine vollständige offensive, defensive, Reverse-Engineering- und Sicherheitsintelligenz-Toolchain in einem privaten Forschungslabor...

AtlassianPwn

Questo repository non contiene un README...

CISA-KEV

CISA-KEV Zusammenfassung Dieses Repository bietet eine automatisierte Verfolgung und Analyse sowohl des CISA-KEV - als auch des VulnCheck-KEV -Katalogs, abgeglichen mit Nuclei-Sicherheitsvorlagen und öffentlichen Proof-of-Concept-Exploits. Durch die Integration von VulnCheck KEV erweitert sich di...

GO-2026-6255 vulnerabilities

Vulnerabilities for packages: conftest-fips, conftest, livekit-cli, skaffold-fips, kubescape, kubescape-server-fips, kaniko, guac, podman-fips, scorecard, cloudbeat, trivy-operator-fips, podman, kaniko-fips, kubescape-server, cloudbeat-fips...

vuln_apps

vulnapps Um conjunto de aplicações intencionalmente vulneráveis para apontar ferramentas de segurança crossfyre, Burp, ZAP, nuclei, e assim por diante. Esta pasta não contém código-fonte de aplicações , apenas definições de esqueleto e um pequeno gerenciador. Cada aplicação roda como sua própria...

bissap

bissap root@kitploit: %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%. % % % .: % .===% . :: % :%%=====%%%%%%: % %%%= =====%============%%%-% = % = =====-================ % BBBBBBBBBBBBBBBBB IIIIIIIIII SSSSSSSSSSSSSSS SSSSSSSSSSSSSSS AAA PPPPPPPPPPPPPPPPP = : =====================% + B::::::::::::::::B I::::::::I...

Python

Python...

GO-2026-6213 vulnerabilities

Vulnerabilities for packages: kyverno, act, gitlab-runner, gitaly, flux-source-controller, grype, rancher-fleet, k9s, cerbos, dagger, pulumi-language-yaml, xeol, flux-image-automation-controller, crossplane, src-fingerprint, boring-registry, trufflehog, kubescape, external-secrets-operator, flux,...

CVE-2025-71339

Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.evallength gadget in pickle reduce methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded by victims who trust Picklescan's safety validation...

CVE-2026-53655

node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...

CVE-2026-53655

node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...

CVE-2026-53655 node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)

node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...

CVE-2026-53655 node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)

node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...

PT-2026-49577

Name of the Vulnerable Software and Affected Versions node-tar versions prior to 7.5.16 Description An interpretation differential exists in how the software parses tar archives. The issue occurs because the library applies a PAX extended header's size= record and other PAX overrides to the next...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, gitaly, fuse-overlayfs-snapshotter, sbom-convert, croc, gke-gcloud-auth-plugin, kube-arangodb, aws-flb-kinesis, neuvector-scanner, cert-manager, minio-operator, cert-manager-csi-driver, cloud-provider-aws, dgraph, secrets-store-csi-driver, ctop,...

EUVD-2026-3672

go-tuf is a Go implementation of The Update Framework TUF. Starting in version 2.0.0 and prior to version 2.3.1, a compromised or misconfigured TUF repository can have the configured value of signature thresholds set to 0, which effectively disables signature verification. This can lead to...

BIT-FLUX-2022-24877 Improper path handling in kustomization files allows path traversal

Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious kustomization.yaml allows an attacker to expose sensitive data from the controller’s pod filesystem and possibly privilege escalation in multi-tenancy deployments...