sandsifter

s a n d s i f t e r : the x86 processor fuzzer Overview The sandsifter audits x86 processors for hidden instructions and hardware bugs, by systematically generating machine code to search through a processor's instruction set, and monitoring execution for anomalies. Sandsifter has uncovered secre...

CVE-2022-51025

Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files via the name parameter of /webapi/file/transfer. Attackers can send GET requests with type=dbbackup and ../ sequences in name to read files like...

CLSA-2026-1792667085 TuxCare security update for 36 packages (24 CVEs)

TuxCare rebuilt 36 packages to address 24 CVEs. Fixed in 8.5.46-tuxcare.1...

CVE-2026-112842 WordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Member Subscriptions: from n/a through 3.1.2...

CVE-2026-112842

The Cozmoslabs Paid Member Subscriptions WordPress plugin is vulnerable to a Missing Authorization vulnerability (CWE-862) in versions 3.1.2 and earlier . This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels . No specific technical root cause or remediation instru...

uptux

uptux Specialized privilege escalation checks for Linux systems. Implemented so far: Writable systemd paths, services, timers, and socket units Disassembles systemd unit files looking for: References to executables that are writable References to broken symlinks pointing to writeable directories...

CVE-2022-51025

Penta Security WAPPLES versions 4.0.54.1 , 5.0 , and 6.0 are affected by a path traversal vulnerability in the /webapi/file/transfer endpoint. Authenticated attackers can exploit the name parameter by using ../ sequences and the type=db_backup parameter to download arbitrary files, such as /etc/p...

Elkeid

Elkeid - Bytedance Cloud Workload Protection Platform English | 简体中文 Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices. With the business...

webhacklist

The complete archive of the Top 10 Web Hacking Techniques — every nominated technique not just the winners for every year since 2006, plus PDF snapshots of the original announcement posts so the record survives its hosts. 🌐 Read it online at webhacklist.com Search every technique, filter by year,...

ROOT-APP-PYPI-CVE-2026-49855 CVE-2026-49855 in tornado - Patched by Root

Root has patched CVE-2026-49855 in the tornado package for Root:PyPI. Multiple fixed versions available...

CVE-2019-1253

CVE-2019-1253 AppXSvc Arbitrary File Security Descriptor Overwrite EoP I have independently reported this vulnerability to MSRC, however, my submission turned out to be a duplicate due to the fact that the fix for CVE-2019-1253 also addressed this issue. My PoC differs from the ones created by...

security-tools-cheatsheets

Security Tools Cheatsheets...

syft

Syft A CLI tool and Go library for generating a Software Bill of Materials SBOM from container images and filesystems. Exceptional for vulnerability detection when used with a scanner likeGrype. Features Generates SBOMs for container images , filesystems , archives see the docs for a full list of...

BlueTeam-Tools

BlueTeam-Tools This github repository contains a collection of 70+ tools and resources that can be useful for blue teaming activities. Some of the tools may be specifically designed for blue teaming, while others are more general-purpose and can be adapted for use in a blue teaming context. 🔗 If...

Pentest-Everything

⚔️ Pentest Everything Important Bookmark this page as other page links are likely to change or move over time. This page will always remain the same. About this book This book is my collection of notes and write-ups for various offensive security based topics and platforms. This book is generally...

CLSA-2026-1792666002 TuxCare security update for 40 packages (17 CVEs)

TuxCare rebuilt 40 packages to address 17 CVEs. Fixed in 10.1.33-tuxcare.1...

Olyx

Olyx A modern Android application for comprehensive URL security analysis, combining multiple threat detection APIs with advanced domain spoofing detection to protect users from malicious websites. Screenshots Features Multi-API Security Analysis AbuseIPDB : Scans IP reputation for reported...

SecurityShepherd

OWASP Security Shepherd The OWASP Security Shepherd Project is a web and mobile application security training platform. Security Shepherd has been designed to foster and improve security awareness among a varied skill-set demographic. The aim of this project is to take AppSec novices or experienc...

tangalanga

Tangalanga Zoom Conference scanner. This scanner will check for a random meeting id and return information if available. Install First try to see if there's any prebaked version for the date: https://github.com/elcuervo/tangalanga/releases. This versions already have a token ready to use. Either...

wafpass

WAFPASS ██╗ ██╗ █████╗ ███████╗██████╗ █████╗ ███████╗███████╗ ██║ ██║██╔══██╗██╔════╝██╔══██╗██╔══██╗██╔════╝██╔════╝ ██║ █╗ ██║███████║█████╗ ██████╔╝███████║███████╗███████╗ ██║███╗██║██╔══██║██╔══╝ ██╔═══╝ ██╔══██║╚════██║╚════██║ ╚███╔███╔╝██║ ██║██║ ██║ ██║ ██║███████║███████║ ╚══╝╚══╝ ╚═╝...