HeartBleed-CVE-2014-0160--SCRIPTS-python3

This repository does not have a README...

Research-on-CVE-2025-9998

Investigación sobre CVE-2025-9998 vulnerabilidad en CVE 2025-9998 y solución para esa vulnerabilidad con ayuda de inteligencia artificial...

CVE-2022-46164-poc

CVE-2022-46164-poc Exploit básico de POC para CVE-2022-46164...

Detecting-CVE-2018-15708-Vulnerabilities

Detecting-CVE-2018-15708-Vulnerabilities...

cve-2016-2431

cve-2016-2431 Qualcomm TrustZone kernel privilege escalation...

cve-2022-27666-exploits

cve-2022-27666-exploits Hay 2 métodos de explotación que explotan CVE-2022-27666. Para más información sobre cómo usar estas bases de código, por favor consulta mi blog aquí...

CVE-2018-18714

CVE-2018-18714 Código PoC para CVE-2018-18714 Puedes encontrar más información @ https://downwithup.github.io/CVEPosts.html Software vulnerable Descarga @: https://www.iobit.com/en/malware-fighter.php...

echteeteepee

Herramientas de Prueba de Vulnerabilidades de Desync HTTP/1 Este repositorio contiene herramientas de seguridad defensiva para detectar vulnerabilidades de contrabando de solicitudes desync HTTP/1 basadas en la innovadora investigación de James Kettle de PortSwigger. Atribución de la Investigació...

CVE-2025-48595

cve-id ⚡ Uso Simple Utilice este proyecto únicamente en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Configuraciones de laboratorio aisladas Entornos de pruebas de penetración autorizados Ejemplo de configuración: root@kitploit: git clone cd Ejemplo de uso:...

CVE-2025-15467

CVE-2025-15467 discovery tool powershell...

CVE-2023-34362-Defense-Package

This repository does not have a README...

IOCs

This repository does not have a README...

YaraRules

YaraRules I share YARA rules in this repo...

CVE-2026-16313

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...

The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes

The Gentlemen ransomware-as-a-service RaaS operation is actively developing and maintaining a suite of endpoint detection and response EDR killers that it hands out to affiliates for impairing system defenses before deploying the encryptor. This mature portfolio of EDR-terminating tools is center...

From Assistive to Agentic: The AI Shift That's Redefining Threat Management

Introduction The average enterprise security team has 40 or more security tools, giving a lot of visibility into internal telemetry and asset data. But often, these tools are working in siloes, generating overlapping alerts and data. And yet, breach dwell times remain stubbornly long 43 days,...

AI is accelerating cyberattacks—here’s how to stay ahead

In March, we wrote that identity security has become the new pressure point for modern cyberattacks. Since then, AI has only increased that pressure. AI helps cyberattackers move faster across the attack chain: personalizing social engineering at scale, automating reconnaissance, analyzing leaked...

A Bayesian Network Approach for Enhancing Security-Focused Decision Support Systems

The adoption and integration of heterogeneous stacks in most of today's open-source based networks brings clear benefits like interoperability and availability of advanced features. Yet, on the other hand the increasing number of interconnecting components and moving parts requires maintaining an...

Microsoft Build 2026: Securing code, agents, and models across the development lifecycle

In this article 1. Secure your code 2. Secure your agents 3. Trust agents with your data 4. Secure your models 5. Trust starts with security Today, developers and security teams are caught in growing tension. AI is accelerating development and introducing new issues around insecure code, opaque...

Malicious code in wallet-security-checker (npm)

A coordinated supply-chain attack comprising 10 npm packages published by maintainer ddjidd5640 [email protected] within a 48-hour window 2026-05-19T03:55Z – 2026-05-21T04:31Z. All packages masquerade as legitimate Web3/DeFi developer security tools MCP servers while silently exfiltrating...