diff

diff Simply diff for CVE-2017-0785...

fickling

Fickling Fickling is a decompiler, static analyzer, and bytecode rewriter for Python pickle object serializations. You can use fickling to detect, analyze, reverse engineer, or even create malicious pickle or pickle-based files, including PyTorch files. Fickling can be used both as a python libra...

CVE-2019-18935

CVE-2019-18935 CVE-2019-18935...

comission

CoMisSion - WhiteBox CMS analysis CoMisSion is a tool to quickly analyze a CMS setup. The tool: checks for the core version; checks for modifications made on the core additions, alterations, deletions with a fresh archive downloaded from CMS official website; looks for the last core version; look...

Kaspersky_CVE-2024-3094

Security Review: CVE-2024-3094 XZ Utils Backdoor Author: Sushin Ivan Date: March 2026 1. Project Description This repository contains the results of a full security review of the vulnerability CVE-2024-3094 Supply Chain Attack in the XZ Utils library. Objective: Conduct threat analysis Threat...

DeepGuard

DeepGuard 📖 Project Overview DeepGuard is an innovative secure code generation approach that enhances large language models' capability for secure code generation through multi-layer semantic aggregation techniques. This method effectively identifies and mitigates security vulnerabilities in code...

cve-2023-43208-poc

Mirth Connect PoC Script Simple Python script for security research related to Mirth Connect vulnerabilities. Important Use this project only on systems you own or have explicit written permission to test. Unauthorized testing is illegal. Files exploit.py — main script Requirements Python 3.9+...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

Sudo-Security-Bypass-CVE-2019-14287

Sudo-Security-Bypass-CVE-2019-14287 =========================================================================== ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██╗ █████╗ ██╗██╗ ██╗██████╗ █████╗ ███████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗███║██╔══██╗ ███║██║ ██║╚════██╗██╔══██╗╚════██║ ██║ ██║...

CVE-2023-4631

CVE ID : CVE-2023-4631 Vulnerability Type : IP Address Spoofing Description : The DoLogin Security plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 3.6. This is due to insufficient restrictions on where the IP Address information is being retrieved for...

iocextract

iocextract Indicator of Compromise IOC extractor for some of the most commonly ingested artifacts. Table of contents Overview The Problem Our Solution Example Use Case Installation Usage Library Command Line Interface Helpful Information FAQ More Details Custom Regex Related Projects Contributing...

burpgpt

!IMPORTANT Announcing the launch of BurpGPT Pro, the edition specifically tailored to meet the needs of professionals and cyber boutiques. Discover a host of powerful features and a user-friendly interface that enhances your capabilities and ensures an optimal user experience. To access these...

cloud-sniper

Cloud Sniper has a new home!! Click here to visit!! Cloud Security Operations What is Cloud Sniper? Cloud Sniper is a platform designed to manage Security Operations in cloud environments. It is an open platform which allows responding to security incidents by accurately analyzing and correlating...

CVE-2026-50751

🚨 CVE-2026-50751 - Authentication Bypass in Check Point VPN IKEv1 📖 Overview CVE-2026-50751 is a critical authentication bypass vulnerability affecting Check Point Quantum Security Gateway deployments configured with the legacy IKEv1 Remote Access VPN protocol. The flaw allows an unauthenticated...

red-detector

Red-Detector Description Scan your EC2 instance to find its vulnerabilities using Vuls https://vuls.io/en/. Audit your EC2 instance to find security misconfigurations using Lynis https://cisofy.com/solutions/lynis. Scan your EC2 instance for signs of a rootkit using Chkrootkit...

semgrep-rules

Trail of Bits public Semgrep rules This repository contains Semgrep rules developed by Trail of Bits and made available to the public. They are part of our ongoing development efforts and are used in our security audits, vulnerability reseach, and internal projects. They will evolve over time as ...

signalops

SignalOps SignalOps puts what is transmitting around a location on one map: Wi-Fi and Bluetooth devices, cell towers, exposed and public cameras, aircraft, satellites, ships and RF networks. It runs on your own machine. There is no account and no cloud backend. What it finds Wireless and cellular...

tiuku

Tiuku Tiuku is a tool for scanning various kinds of systems and environments for security related information and displaying the results in a browser-based user interface. It can also detect and highlight some issues automatically. Both the data collection scripts and the user interface can be...

CVE-2023-48795

OpenSSH Vulnerability Scanner for CVE-2023-48795 This Python-based tool scans systems for OpenSSH installations and checks if they are vulnerable to CVE-2023-48795 , a critical vulnerability that affects versions earlier than OpenSSH 9.6. The script provides a detailed report of the scanned...

packman

packman A documentation and tracking project with the goal of making package management systems more secure. See issues for a very rough list of a few of the related issues we have seen. Table Of Package Management Systems Language| Name| Tier| Controls| Packman Lead| Packman Page...