1436617 matches found
hopgoblin
hopgoblin hopgoblin é um scanner para instâncias do Adobe Experience Manager AEM. Ele automatiza uma série de verificações que realizamos frequentemente manualmente durante avaliações de segurança. Funcionalidades Detecta endpoints do QueryBuilder expostos: /bin/querybuilder.json...
Nuclei-Templates-Collection
https://github.com/0xSojalSec/templates-nuclei-Oracle-OAM---XSS https://gist.github.com/ResistanceIsUseless/e46848f67706a8aa1205c9d2866bff31 https://github.com/0xElkot/My-Nuclei-Templates https://github.com/0xSojalSec/Nuclei-Templates-API-Linkfinder https://github.com/0xSojalSec/templatesallnucle...
EnableWindowsLogSettings
Guida di Yamato Security alla configurazione dei log eventi di Windows per DFIR e Threat Hunting English | 日本語 Questa è un'altra guida sulla corretta configurazione e sul monitoraggio dei log eventi di Windows, con particolare attenzione alla registrazione per le regole sigma. Questo è un lavoro ...
security-research
Исследования в области безопасности Коллекция файлов, связанных с моими личными исследованиями в области безопасности. Дополнительные материалы будут публиковаться в моём блоге https://blog.mirch.io. Инструменты Инструмент| Описание ---|--- openssldircheck| Утилита для Windows для проверки...
vulnerability_advisories
Бюллетени безопасности Onapsis Этот репозиторий содержит бюллетени безопасности для уязвимостей, обнаруженных командой Onapsis Research Labs Сводка по бюллетеням Следующая таблица содержит сводку уязвимостей, описанных в этом репозитории: Вендор| CVE| CVSS| Описание| Ссылка на отчёт...
sound4-directory-listing
Бейджи Лицензия MIT...
CVE-2026-55520
creationtimestamp| type| source ---|---|--- 2026-08-28 20:35:15+00:00| published-proof-of-concept| https://github.com/scrapy/protego/security/advisories/GHSA-wjmf-p669-5m5p...
CVE-2026-55220
creationtimestamp| type| source ---|---|--- 2026-08-28 20:35:07+00:00| published-proof-of-concept| https://github.com/pimcore/pimcore/security/advisories/GHSA-w23p-wrp7-ch38 2026-08-28 22:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu6erfrsko2t 2026-08-29 14:10:05+00:00...
CVE-2026-55634
creationtimestamp| type| source ---|---|--- 2026-08-28 20:35:05+00:00| published-proof-of-concept| https://github.com/pimcore/pimcore/security/advisories/GHSA-9x44-4gxf-8c25 2026-08-28 22:08:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu6eta3ywc2b 2026-08-29 01:08:54+00:00...
CVEs
Exploits de Prova de Conceito de CVE da Rhino Uma coleção de scripts de exploit de prova de conceito escritos pela equipe do Rhino Security Labs para várias CVEs. CVE-2025-32815: Bypass de Autenticação no Infoblox NetMRI via Credenciais Embutidas CVE-2025-32814: Injeção de SQL Não Autenticada no...
PrivateBin has stored Cross-Side-Scripting (XSS) vulnerability in attachment download link via dangerous MIME types with required user-interaction
Summary Stored cross-site scripting XSS in PrivateBin's attachment download link. An anonymous attacker can create a paste with a text/html attachment that, with certain user interaction, bypasses protections similar to CVE-2022-24833. When a victim opens the "Download attachment" link in a new...
CVE-2026-70309
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...
SecGen
LO SVILUPPO È STATO SPOSTATO SU http://github.com/cliffe/SecGen/, QUESTA REPO NON È PIÙ MANTENUTA E PROBABILMENTE NON FUNZIONERÀ! Security Scenario Generator SecGen Riepilogo SecGen crea macchine virtuali vulnerabili così gli studenti possono imparare le tecniche di penetration testing. Box come...
vuke
vuke Forschungswerkzeug zur Analyse und Reproduktion angreifbarer Bitcoin-Schlüsselerzeugung. Funktionen Modulare Architektur – steckbare Quellen und Transformationen Mehrere Eingabequellen Zahlenbereiche schwache Seeds testen Wortlisten Brainwallet-Analyse Zeitstempel zeitbasierte PRNG-Ausnutzun...
PoC_CVEs
PoC CVEs — Proof-of-Concept-Repository-Index Ein kontinuierlich aktualisierter Index von öffentlichen GitHub-Proof-of-Concept-Repositories, die CVE-IDs zugeordnet sind. Streng zu Bildungs- und defensiven Sicherheitsforschungszwecken. Live-Suchoberfläche labs.jamessawyer.co.uk/cves/ Eine...
metarget
中文 | English 1 Einführung Metarget = meta- + target, ein Framework zur automatischen Erstellung verwundbarer Infrastrukturen, das die schnelle und automatische Bereitstellung einfacher oder komplexer verwundbarer Cloud-Native-Ziele ermöglicht. 1.1 Warum Metarget? Bei Sicherheitsforschungen stelle...
training-application-security
Treinamento Gratuito de Codificação Segura e Segurança de Aplicações — Exercícios SCORM de Código Aberto 40 exercícios gratuitos de codificação segura em código aberto que ensinam segurança de aplicações web da forma como os desenvolvedores aprendem — explorando vulnerabilidades reais como injeçã...
0xsp-Mongoose
Supporta il progetto per lo sviluppo continuo ETH 0xf340c15c5e669a4ababab856e9f2bccd659d6e42 0xsp Mongoose RED per Windows Versione corrente 2.2.0 La versione 0xsp mongoose red è fornita per assistere le vostre esigenze durante la simulazione di sicurezza informatica; utilizzando questa versione...