7505 matches found
Qualys TotalAI Achieves FedRAMP Moderate (FedRAMP Certified Class C) Authorization
Key Takeaways Federal AI adoption is accelerating faster than governance and approved security tooling. Risk now spans models, infrastructure, and the software supply chain. AI threats often mimic normal usage, which makes it difficult to detect with static methods. Meeting mandated federal...
CVE-2023-54347
OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repeated login attempts to the main login endpoint. Attackers can submit POST requests with authUser and clearPass parameters to systematically test username and...
vulnhub-writeups
VulnHub Writeups Author: Roman Mares Company: Delt...
linux-malware-toolbox
Linux Malware Samples - Educational Repository ⚠️ IMPORTAN...
Oracle Linux 10 : freeipmi (ELSA-2026-13515)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-13515 advisory. 1.6.17-1 - Update to 1.6.17 1.6.14-6 - .fmf/version: Add fmf metadtata root 1.6.14-5 - gating: RHEL-10: Add OSCI testing Tenable has extracted the preceding...
freeipmi security update
1.6.17-1 - Update to 1.6.17 1.6.14-6 - .fmf/version: Add fmf metadtata root 1.6.14-5 - gating: RHEL-10: Add OSCI testing...
Lulzbuster 2.0.0
Lulzbuster is a multithreaded, very fast and smart HTTPS directory and file bruteforcer written in C on top of libcurl. Given a target URL and a wordlist, it enumerates valid paths by firing concurrent HTTP requests and reporting back the responses that look like real hits i.e. status codes the...
pentest-automation-framework
pentest-automation-framework Built this to speed up structure...
WebPentestKit2
\ 🛡️ WebPentestKit2 \Advanced Web Application Exploitatio...
ethical-hacking-portfolio
Ethical Hacking Portfolio - CS4069 | Spring 2026 Course:...
Webmin-1.910-Exploit-Script
Webmin-1.910-Exploit-Script Python 3 🔥 Remote Code Execu...
QASecClaw: A Multi-Agent LLM Approach for False Positive Reduction in Static Application Security Testing
Static Application Security Testing tools help developers find security vulnerabilities before release, but they often produce many false positives. This increases manual review effort, reduces developer trust, and may cause real vulnerabilities to be ignored among noisy reports. We present...
clan-nxt-toolkit
🔴 CLAN NXT Toolkit ██████╗██╗ █████╗ ███╗ ██╗...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Frangoteam Fuxa
CVE-2025-69985: FUXA ≤ 1.2.8 Authentication Bypass + RCE Explo...
IASS-ISP-ASN-Security-Scanner
💀 IASS — ISP ASN Security Scanner Automated reconnaissance &...
OWASP-Pentest-Suite
OWASP Web Application Penetration Testing University of t...
CVE_2026_31431-Testing-the-Copy-Fail-exploit
CVE-2026-31431 Exploit Toolkit A comprehensive toolkit for de...
