1466109 matches found
Log4J-Mitigation-CVE-2021-44228--CVE-2021-45046--CVE-2021-45105--CVE-2021-44832
Mitigación de Log4J-CVE-2021-44228,CVE-2021-45046,CVE-2021-45105,CVE-2021-44832 Por favor, mantén un ojo en esta ya que el equipo de Apache Log4j está divulgando muchos más CVEs y solucionando problemas de seguridad muy rápidamente...
awesome-security-vul-llm
Awesome Security Vulnerability ProjectBy LLM Project Introduction This project uses a large model combined with a crawler to retrieve all projects on GitHub that contain valuable vulnerability information, vulnerability POCs, or rule information. It automatically identifies the project's director...
WebAccess-CVE-2017-16720-
This repository does not have a README...
CVE-2021-46422-poc
...
CVE-2025-29556
CVE-2025-29556 – ExaGrid Security Officer Account Creation Bypass 📝 Overview Vulnerability Title : Unauthorized Creation of Security Officer Account Product : ExaGrid EX10 Backup Appliance Version Affected : Tested on current version at disclosure Versions Affected : 6.3 – 7.0.1.P08 CVE ID :...
CMD_Bypass_Assessment
CMD Bypass Method Analysis CMD Bypass Method Analysis is a PowerShell script that automatically tests CMD bypass methods on Windows systems and evaluates the results. The script checks for various CMD bypass methods and saves the results to a text file, providing security recommendations. Use To...
sdnpwn
¿Qué es sdnpwn? sdnpwn es un kit de herramientas y un framework para probar la seguridad de las Redes Definidas por Software SDN. Para más información, consulta este artículo: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Instalación Primero descarga sdnpwn usando git root@kitploit: git clone...
CVE-2024-10924-Exploit
CVE-2024-10924-Exploit Really Simple Security Free, Pro y Pro Multisite 9.0.0 - 9.1.1.1 - Bypass de autenticación 📖 Descripción Este script explota una vulnerabilidad en el plugin Really Simple Security versiones 9.0.0 - 9.1.1.1 para WordPress. El fallo permite un bypass de autenticación debido a...
glue
OWASP Glue Glue is a framework for running a series of tools. Generally, it is intended as a backbone for automating a security analysis pipeline of tools. Recommended Usage For those wishing to run Glue, we recommend using the docker image because it should have the other tools it uses available...
claude-project-scanner
Claude Project Scanner Read-only Claude Code skill that scans third-party projects for known security risks before you open them. Catches the attack patterns documented in: CVE-2025-59536 Claude Code Lifecycle Hooks injection CVE-2025-61260 OpenAI Codex CODEXHOME injection CVE-2025-54136 Cursor...
theftfuzzer
root@kitploit: ┌┬┐┬ ┬┌─┐┌─┐┌┬┐┌─┐┬ ┬┌─┐┌─┐┌─┐┬─┐ │ ├─┤├┤ ├┤ │ ├┤ │ │┌─┘┌─┘├┤ ├┬┘ ┴ ┴ ┴└─┘└ ┴ └ └─┘└─┘└─┘└─┘┴└─ Introduction: TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations. Usage: python theftfuzzer.py -d 'http://example.com/api/data'...
advisories
Advisories Security advisories from Kelly Kaoudis @kaoudis and friends. In general, I'll publish here either after the vendor has patched, or after 90 days from vulnerability discovery. Happy reading! Advisories are numbered in discovery order & by year; discovery enumeration starts at 0...
CVE-2022-2588
CVE-2022-2588...
corsair_scan
Welcome to Corsairscan Corsairscan is a security tool to test Cross-Origin Resource Sharing CORS misconfigurations. CORS is a mechanism that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served. If this is not...
user-security-stories
Historias de Seguridad de Usuario Este repositorio contiene una colección de historias de seguridad de usuario y criterios de aceptación. Historias de Seguridad de Usuario Criterios de Aceptación de Seguridad Por favor, haga un fork y contribuya con historias de seguridad y criterios de aceptació...
cliam
cliam Herramienta de enumeración de permisos IAM multi-nube. Actualmente cubre: AWS GCP Azure Oracle 🚧 WIP Descripción Cliam es un identificador simple de permisos en la nube. Hay dos componentes principales en la CLI. La mayoría de los permisos enumerados son permisos de listar, describir u...
sec_review_cve-2024-3094
A full security review of the open-source vulnerability CVE-2024-3094 was conducted. Based on the obtained data, the following were prepared: 1. Report «ThreatModel + SecurityReview» – detailed description of threats, exploitation paths, risk assessment, and recommendations for reducing the attac...
bypass-403
Bypass-403 A simple script just made for self use for bypassing 403 It can also be used to compare responses on verious conditions as shown in the below snap Usage ./bypass-403.sh https://example.com admin ./bypass-403.sh website-here path-here Features Use 24 known Bypasses for 403 with the help...
pylibemu
Pylibemu |version badge| |downloads badge| .. |version badge| image:: https://img.shields.io/pypi/v/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ .. |downloads badge| image:: https://img.shields.io/pypi/dm/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ Pylibemu is a...