29 matches found
Nuclei-Templates-Collection
https://github.com/0xSojalSec/templates-nuclei-Oracle-OAM---XSS https://gist.github.com/ResistanceIsUseless/e46848f67706a8aa1205c9d2866bff31 https://github.com/0xElkot/My-Nuclei-Templates https://github.com/0xSojalSec/Nuclei-Templates-API-Linkfinder https://github.com/0xSojalSec/templatesallnucle...
bissap
bissap %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%. % % % .: % .===% . :: % :%%=====%%%%%%: % %%%= =====%============%%%-% = % = =====-================ % BBBBBBBBBBBBBBBBB IIIIIIIIII SSSSSSSSSSSSSSS SSSSSSSSSSSSSSS AAA PPPPPPPPPPPPPPPPP = : =====================% + B::::::::::::::::B I::::::::I...
DetectionLabELK
DetectionLabELK DetectionLabELK는 Chris Long의 DetectionLab에서 포크된 버전으로, Splunk 대신 ELK 스택을 사용합니다. 설명: DetectionLabELK는 효과적인 탐지 능력을 구축하고자 할 때 사용하기에 완벽한 랩입니다. 방어자를 염두에 두고 설계되었습니다. 주요 목적은 블루팀이 보안 도구가 사전 탑재되고 시스템 로깅 구성에 관한 모범 사례가 적용된 Windows 도메인을 신속하게 구축할 수 있도록 하는 것입니다. 대부분의 요구에 맞게 쉽게 수정하거나 추가 호스트를 포함하도...
CISA-KEV
CISA-KEV Executive Summary This repository provides automated tracking and analysis of both CISA's KEV and VulnCheck KEV catalogs, cross-referenced with Nuclei security templates and public proof-of-concept exploits. By integrating VulnCheck KEV, coverage expands from 1,557 to 4,720 total unique...
CyberRange
개요: 이 CyberRange 프로젝트는 세계 최초의 오픈소스 CyberRange 청사진을 나타냅니다. 이 프로젝트는 AWS Cloud를 사용하여 사설 연구소에서 완벽한 공격, 방어, 리버스 엔지니어링 및 보안 인텔리전스 도구를 위한 부트스트랩 프레임워크를 제공합니다. 이 프로젝트에는 취약한 시스템과 침투 테스터, 개발자, 악성코드 분석가, 포렌식/리버스 엔지니어, 위협 헌터 등에게 알려진 가장 강력한 오픈소스/커뮤니티 에디션 도구의 툴킷이 포함되어 있습니다. 시작하기 액세스 권한을 얻으려면 AWS 계정 번호를 보내주셔야 30...
xioc
xioc 텍스트에서 hxxp://banana.com, 1.1.1.1, phish at malicious dot com과 같이 "이스케이프"된 것을 포함한 침해 지표를 추출합니다. 설치 https://github.com/assafmo/xioc/releases 에서 미리 컴파일된 바이너리를 다운로드하세요. 또는... go get을 사용하세요: go get -u github.com/assafmo/xioc 또는... snap 설치를 사용하세요 Ubuntu: snap install xioc 또는 Ubuntu PPA를 사용하세요: cur...
AtlassianPwn
이 저장소에는 README가 없습니다...
pentestforge
PentestForge Combine four heterogeneous security projects i...
vuln_apps
vulnapps 一系列故意存在漏洞的应用，用于将安全工具（crossfyre、Burp、ZAP、nuclei 等）指向目标。此文件夹不包含任何应用源码 ，只有骨架定义和一个小型管理器。每个应用都作为自己独立的容器栈运行，因此不会相互冲突。 这里的一切都是故意有漏洞的。仅供本地测试。 请勿将这些暴露到互联网或不受信任的网络。所有端口都绑定到 127.0.0.1。 工作原理 docker compose up 启动一个容器：vulnappsmanager （控制平面）。它本身不会启动任何漏洞应用。 你通过管理器来驱动整个应用集群。每个应用由 apps// 下的一个骨架文件夹（一个...
GO-2026-6255 vulnerabilities
Vulnerabilities for packages: trivy, conftest-fips, cloudbeat-fips, zot, guac, conftest, kaniko-fips, skaffold-fips, trivy-fips, skaffold, podman, trivy-operator-fips, scorecard, kubescape, kubescape-server-fips, kaniko, docker-fips, kubescape-server, podman-fips, livekit-cli, cloudbeat...
GO-2026-6213 vulnerabilities
Vulnerabilities for packages: dagger, trufflehog, kyverno, flux, nfpm, goreleaser, pulumi-language-java, cerbos, kargo, k9s, act, kubescape, xeol, skaffold, external-secrets-operator, nuclei, trivy-operator, guac, argocd-image-updater, bom, boring-registry, gptscript, kubevela, snyk-cli, zot,...
CVE-2025-71339
Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.evallength gadget in pickle reduce methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded by victims who trust Picklescan's safety validation...
CVE-2026-53655
node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...
CVE-2026-53655
node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...
CVE-2026-53655 node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)
node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...
CVE-2026-53655 node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)
node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar node-tar applies a PAX extended header's size= record and other PAX overrides to the next header entry of any type, including intermediary metadata headers such as a GNU long-name L or long-link K entry. Per POSIX pax, a PAX extend...
PT-2026-49577
Name of the Vulnerable Software and Affected Versions node-tar versions prior to 7.5.16 Description An interpretation differential exists in how the software parses tar archives. The issue occurs because the library applies a PAX extended header's size= record and other PAX overrides to the next...
CVE-2026-32280 vulnerabilities
Vulnerabilities for packages: nginx-prometheus-exporter, buf, kubescape, kyverno-policy-reporter-ui, mountpoint-s3-csi-driver, lazygit, nuclei, mcp-grafana, yunikorn-k8shim, mkcert, crossplane-provider-azure-storage, nsc, percona-server-mongodb-operator, configmap-reload, ingress-nginx-controller...
EUVD-2026-3672
go-tuf is a Go implementation of The Update Framework TUF. Starting in version 2.0.0 and prior to version 2.3.1, a compromised or misconfigured TUF repository can have the configured value of signature thresholds set to 0, which effectively disables signature verification. This can lead to...