270019 matches found
CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning
CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning CVE-2024-4879 & CVE-2024-5217 ServiceNow RCE Scanning Using Nuclei & Shodan Dork to find it. Resource Vuln Info https://www.assetnote.io/resources/research/chaining-three-bugs-to-access-all-your-servicenow-data Usage nuclei -t...
Advisories
Security Advisories This repository includes several vulnerabilities that were discovered and reported during penetration tests. All content in this repository is provided for educational purposes only. Links...
nbox-pwnage
nbox-pwnage Here comes the paintrain! . lol . lol . lol o o ==== OO|nn. || | nbox | oo oo oo 'oo OOOO-| oo\ | +--+--+--+--+--+--+--+--+--+-$1-+--+--+--+--+--+--+ 1. Create your own nbox appliance: vagrant up 2. SSH into the appliance with vagrant ssh 3. Check for some of the nbox vulnerabilities...
disclosures
Cylance Vulnerability Research - Disclosure Repository This is a repository to hold all of Cylance's Vulnerability Research team's public vulnerability disclosures. The public key for our Vulnerability Research Team e-mail is below: -----BEGIN PGP PUBLIC KEY BLOCK-----...
llama-cpp-security-patches
llama.cpp Security Patches Security patches for unpatched vulnerabilities in llama.cpp, discovered by Cyera Research. Background Between July 2025 and June 2026, we reported 10 vulnerabilities to the llama.cpp project through GitHub Security Advisories and MITRE. All advisories were closed by the...
gokart
GoKart - Go Security Static Analysis GoKart is a static analysis tool for Go that finds vulnerabilities using the SSA single static assignment form of Go source code. It is capable of tracing the source of variables and function arguments to determine whether input sources are safe, which reduces...
kirjuri
Kirjuri ha sido deprecado. He iniciado un nuevo proyecto que cubre la mayoría de los casos de uso que maneja Kirjuri y muchos más. Consulta la aplicación de gestión de casos DFIRe para todas tus necesidades de gestión de casos y evidencias. ACTUALIZACIÓN DE SEGURIDAD 7.5.2021 Dado que este proyec...
kemon
Kemon An Open Source Pre and Post Callback-based Framework for macOS Kernel Monitoring. Breaking News - 08/28/2019 macOS Catalina 10.15 Beta 7 Release Notes https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes Endpoint Security The kauth API has been...
Crypton
Crypton Crypton es una biblioteca educativa para aprender y practicar Criptografía Ofensiva y Defensiva. Es básicamente una colección de explicaciones e implementaciones de todas las vulnerabilidades y ataques existentes en diversos Sistemas de Cifrado Simétricos y Asimétricos, Firmas Digitales,...
nginxpwner
Nginxpwner Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities. Install: cd /opt git clone https://github.com/stark0de/nginxpwner cd nginxpwner chmod +x install.sh ./install.sh Install using Docker git clone https://github.com/stark0de/nginxpwner cd nginxpwn...
path-auditor
PathAuditor The PathAuditor is a tool meant to find file access related vulnerabilities by auditing libc functions. The idea is roughly as follows: Audit every call to filesystem related libc functions performed by the binary. Check if the path used in the syscall is user-writable. In this case a...
jfscan
!CAUTION ⚠️ Project Deprecated This project has been rewritten in Go for better performance and features. Please use the new version here: nullt3r/massmap Description Killing features Unleash the power of Nmap with Masscan for large-scale scans Scan targets using domain names and other formats...
metabadger
Metabadger Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 IMDSv2. Metabadger Purpose and functionality Diagnose and evaluate your current usage of the AWS Instance Metadata Service along with understanding how the service works Prepare you t...
GHSA-GFHX-HW2G-V5HG vulnerabilities
Vulnerabilities for packages: argo-workflows...
CVE-2026-97711 vulnerabilities
Vulnerabilities for packages: argo-workflows...
SimpleHelp <= 5.5.7 - Unauthenticated Path Traversal
SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing...
openSUSE 16 Security Update : v2ray-core (openSUSE-SU-2026:21996-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21996-1 advisory. Changes in v2ray-core: - Update version to 5.54.2 Add iOS Client Support Bundle: Packet Bridge Receiver, Subscription Improvment, DNS and other...
Debian dla-4814 : firefox-esr - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4814 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4814-1 [email protected]...
rustproofing-linux
Rustproofing Linux Porting Linux Kernel Bugs to Rust This source code repository is a collection of examples accompanying the blog post at https://research.nccgroup.com/?p=18577. DO NOT USE these examples for anything but following the blog post. They intentionally contain vulnerabilities, and ev...
