firefox: Sandbox escape due to use-after-free in the DOM: Security component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Security component...

CVE-2023-36802

CVE-2023-36802...

CVE-2025-53770

CVE-2025-53770...

CVE-2025-29927

CVE-2025-29927 About the Next.js CVE-2025-29927 security vulnerability... You can check the link for detailed information: https://bilalgns.github.io/posts/nextjs-cve-2025-29927...

pkgxray

pkgxray — pre-install security for npm packages, MCP servers, and AI agents Inspect an npm package or MCP server before you install or connect to it, and get a deterministic, evidence-backed SAFE, REVIEW, or BLOCK verdict. Local, zero-dependency static analysis — normal scans never execute packag...

CVE-2015-8562

This repository does not have a README...

reasongate

ReasonGate A self-hostable gate that inspects the text going into and out of an LLM and returns an explainable allow / flag / block decision with a machine-readable audit record for every call. What this is The open-source core is rule-based. It does four things: recognizes known prompt-injection...

CVE-2019-3778-Spring-Security-OAuth-2.3-Open-Redirection

CVE-2019-3778-Spring-Security-OAuth-2.3-Open-Redirection Spring Security OAuth 2.3 Open Redirection 分析复现篇 Exploit Title: Open Redirector in spring-security-oauth2 Date: 17 June 2019 Exploit Author: Riemann Vendor Homepage: https://spring.io/projects/spring-security-oauth Software Link:...

CVE-2019-1388

CVE-2019-1388...

CVE-2024-38856

nuclei -t CVE-2024-38856.yaml -u https://target...

bx2-writeups

Security Writeups A collection of my cybersecurity writeups covering: TryHackMe Hack The Box Linux Privilege Escalation AI & Infrastructure Security CTFs Security Challenges Author: Nanashi Bx2...

Security Bulletin: IBM Security QRadar Log Management AQL Plugin contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. IBM Security QRadar Log Management AQL Plugin has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-82417 DESCRIPTION: Summary...

Prober

Check network assumptions reproducibly This project uses Ansible to generate BATS test files verifying security assuptions about network infrastructure. Tests are run from probe machines "prober nodes " to which Prober is deployed. This tool is meant for reproducible, automated testing of own...

CVE-2021-45232

CVE-2021-45232 CVE-2021-45232 POC 1、Apache APISIX Dashboard unauthorized access vulnerability CVE-2021-45232 scan 2、Apache APISIX Dashboard default password scan...

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 Sorry Everyone. This is our team's testing program, not click bait. If you think we have others purpose, reconsider yourself. If you want to busfame, I don't care. Thanks @testanull, sorry for my English. I don't understand what people want in this repo?...

PentesterLab-Intercept-CVE-2014-1266

This repository does not have a README...

Web-App-PenTesting

🚀 Quick Start 1. Clone the repository git clone https://github.com/Sarthak4126/Web-App-PenTesting.git cd Web-App-PenTesting/targetapp 2. Install dependencies pip install -r requirements.txt 3. Launch the target application python app.py App runs at: http://127.0.0.1:5000 4. Run the automated...

cve-2025-22235-demo

CVE-2025-22235: Spring Boot EndpointRequest.to Authentication Bypass Vulnerability Demo Vulnerability Description CVE-2025-22235 is a Spring Boot security vulnerability involving the EndpointRequest.to method, which may generate an incorrect matcher when configuring security rules, leading to the...

semgrep-rules

Trail of Bits public Semgrep rules This repository contains Semgrep rules developed by Trail of Bits and made available to the public. They are part of our ongoing development efforts and are used in our security audits, vulnerability reseach, and internal projects. They will evolve over time as ...

camjacking-templates

CamJacking CamJacking is a security awareness training and simulation framework designed to help organizations educate users about camera permission risks, browser security, and social engineering awareness in controlled, authorized environments. 🎯 What is CamJacking? CamJacking is an...