22 matches found
smart-contract-vulnerabilities
Smart Contract Vulnerabilities A collection of smart contract vulnerabilities along with prevention methods. See /references for LLM-optimized references. Access Control Authorization Through tx.origin Insufficient Access Control Delegatecall to Untrusted Callee Signature Malleability Missing...
cve-search
cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...
vuln-list-update
vuln-list-update Collect vulnerability information and save it in parsable format automatically Data https://github.com/aquasecurity/vuln-list/ Usage $ vuln-list-update -h Usage of vuln-list-update: -target string update target nvd, alpine, alpine-unfixed, redhat, redhat-oval, debian, ubuntu,...
CVE-2025
CVE-2025 CVEs discovered in 2025 and their PoCs...
CVEsLab
CVEsLab A collection of proof-of-concept exploit scripts, docker lab environments, and Securi Trust Team-discovered vulnerabilities for written by the team at Securi Trust for various CVEs...
invesalius3_vulnerabilities
invesalius3vulnerabilities Intro The https://github.com/invesalius/invesalius3 is the reference, an Open Source Project. Structure Every vulnerability will have the following structure: folder/ |README.md |subfolder/ |artifacts named as CVE-ID if a ID is assigned or as VULN-NAME or TMP-N if no ID...
huntr-com-bug-bounties-collector
Recolector de bugs de huntr.com Nuevo recolector de bug bountyvulnerabilidades Requisitos Chrome con interfaz gráfica Si tienes problemas con la ejecución del script, verifica el estado de las características de GPU de las máquinas virtuales, si están disponibles. Chrome WebDriver Vista previa...
cve-collector
CVE-Collector Simple recolector de las últimas CVE escrito en Python Existen varios métodos para recolectar información sobre las últimas CVE Common Vulnerabilities and Exposures. Este código fue creado para proporcionar orientación sobre cómo recolectar, qué información incluir y cómo codificar ...
0day-Rubbish
0day Rubbish 0day vulnerabilities have become rubbish in the AI era. 🌐 Official Website : https://0day-rubbish.com/blog 🎯 Why This Exists Traditional vulnerability disclosure is broken. It's slow, bureaucratic, and ineffective. In the AI era, we can mass-produce 0days at scale—making individual...
pngcheck-vulns
pngcheck-vulns A repository of proof-of-concept files demonstrating disclosed and patched vulnerabilities in pngcheck 2.4.0 - 3.0.1. Each POC is custom crafted with dedicated generation scripts to trigger specific bugs, covering both CVE-numbered and unnumbered vulnerabilities. For detailed...
PoC-CVEs
PoC || GTFO Proof of Concepts of vulnerabilities...
GO-2025-3887 vulnerabilities
Vulnerabilities for packages: headlamp, nova, linkerd2, flux, helm-mapkubeapis, flux-helm-controller, eksctl, pluto, zot, helm-set-status, helm-operator, cerbos, k8ssandra-client, kargo, cluster-api-helm-controller, rancher-fleet, trivy, chart-testing, chartmuseum, k9s, istio, helm-docs, kubescap...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: rekor, spire-server, tkn, gitsign, dex, flux-kustomize-controller, cloudflared, cosign, terragrunt, slsa-verifier, argo-workflows, kubescape, tekton-chains, oauth2-proxy, aactl, fulcio, vexctl, flux-source-controller, kots, sops...
--POC
Goby POC Collection Convert Goby vulnerability scan tools’...
cve-pocs
CVE Proof-of-Concept Collection !GitHub starshttps://img...
SEC-Bench Pro: Can Language Models Solve Long-Horizon Software Security Tasks?
Large language models LLMs now support automated software security tasks, including vulnerability discovery and proof-of-concept PoC generation. Existing benchmarks do not faithfully evaluate LLMs in real-world bug hunting scenarios because they rely on fuzzing harnesses, target-specific...
PT-2026-39408
Name of the Vulnerable Software and Affected Versions Next.js versions 12.2.0 through 15.5.15 Next.js versions 16.0.0 through 16.2.4 Description Applications using the Pages Router with i18n configured and middleware or proxy-based authorization may allow unauthorized access to protected page dat...