8642 matches found
pentest-ai-agents v3.4.0
pentest-ai-agents 50 Claude Code subagents for penetration testing. Quick Start | Cheatsheet | Coverage | Agents | Examples Table of Contents What's New in v3.3 What's New in v3.2 Agent Map What's New in v3.1 Quick Start Cheatsheet Coverage Agents Tier 1 vs Tier 2 Examples Running Tools in a...
MAL-2026-12784 Malicious code in devplatform-spa-testing (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43b8f8982db0f563db0d728dbc9ecdd9907e29dd45f2d9bf42e0c8416fc80fa On require'devplatform-spa-testing', index.js loads platform.js which selects a platform-specific endpoint, retrieves a payload over HTTPS from...
Malicious code in devplatform-spa-testing (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43b8f8982db0f563db0d728dbc9ecdd9907e29dd45f2d9bf42e0c8416fc80fa On require'devplatform-spa-testing', index.js loads platform.js which selects a platform-specific endpoint, retrieves a payload over HTTPS from...
Malicious code in gs-uitk-testing-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58475142ea32c554345513c67fd5ed8a8d6b60fb151e675249e4eb83984c8300 [email protected] declares an npm install lifecycle script scripts.install='node index.js' that loads lib/core.js. That module collects th...
MAL-2026-12792 Malicious code in gs-uitk-testing-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58475142ea32c554345513c67fd5ed8a8d6b60fb151e675249e4eb83984c8300 [email protected] declares an npm install lifecycle script scripts.install='node index.js' that loads lib/core.js. That module collects th...
YayTune_PoC
YayTunePoC This is a repository dedicated to technical test...
Vulnerability-Assessment-Penetration-Testing-Engagement-X-Company
VAPT Report — Venus & Napping X Company Engagement Vulnerab...
Exploit for Use After Free in Linux Linux_Kernel
ghostlock-honor-aak GhostLock CVE-2026-43499 exploit adapte...
Exploit for CVE-2026-12720
CVE-2026-12720 Proof-of-Concept PoC !Licensehttps://img...
Exploit for Interpretation Conflict in Wordpress
wp2exp2026 🔥 WordPress All-in-One Exploit Framework — De...
MAL-2026-11932 Malicious code in @servicetitan/testing-library (npm)
npm/@servicetitan/testing-library is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Malicious code in @servicetitan/testing-library (npm)
npm/@servicetitan/testing-library is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Exploit for CVE-2026-52102
CVE-2026-52102 - Exploit PoC A Proof of Concept PoC demonst...
Exploit for CVE-2026-32621
CVE-2026-32621 - Apollo Federation Prototype Pollution PoC...
Exploit for Improper Authentication in Checkpoint Multi-Domain_Security_Management
checkpoint-smartconsole-poc...
Exploit for CVE-2026-17583
cve-id Donate Support the maintenance of this project wit...
toolbox v0.2.2
-Significant%20AI%2C%20fully%20reviewed-1f77b4 MCP-based application security testing tools for your coding agent. Not a scanner — a collaborative workbench. Agents struggle with UI and stateful APIs; you're good at both. Sectool lets you explore an application through its proxy while an agent...
Vulnerability-Wiki-PoC
💠 Vulnerability-Wiki-PoC 🚀 Focused on practical applicati...
Cisco Small Business SPA500 Series IP Phones Local Code Execution (CVE-2019-15959)
A vulnerability in Cisco Small Business SPA500 Series IP Phones could allow a physically proximate attacker to execute arbitrary commands on the device. The vulnerability is due to the presence of development testing and verification scripts that remained on the device. An attacker could exploit...