22 matches found
cve-search
cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...
CVEsLab
CVEsLab 由 Securi Trust 团队为各种 CVE 编写的一系列概念验证漏洞利用脚本、Docker 实验室环境以及 Securi Trust 团队发现的漏洞。...
vuln-list-update
vuln-list-update Collect vulnerability information and save it in parsable format automatically Data https://github.com/aquasecurity/vuln-list/ Usage root@kitploit: $ vuln-list-update -h Usage of vuln-list-update: -target string update target nvd, alpine, alpine-unfixed, redhat, redhat-oval,...
smart-contract-vulnerabilities
智能合约漏洞 一份智能合约漏洞及其预防方法的合集。 参见 /references 获取针对 LLM 优化的参考资料。 访问控制 通过 tx.origin 进行授权 访问控制不足 对不受信任的被调用方执行 Delegatecall 签名可塑性 缺少针对签名重放攻击的保护 数学 整数溢出与下溢 差一错误 精度缺失 控制流 重入 利用区块 Gas 上限发动的拒绝服务攻击 利用（意外）revert 发动的拒绝服务攻击 在循环中使用 msg.value 交易排序依赖 Gas 不足引发的 Griefing 攻击 数据处理 未检查返回值 写入任意存储位置 无界返回数据 未初始化的存储指针 意外的...
CVE-2025
CVE-2025 CVEs discovered in 2025 and their PoCs...
cve-collector
CVE-Collector 用Python编写的简易最新CVE收集器 收集最新CVE（通用漏洞与暴露）信息有多种方法。 此代码旨在为创建CVE收集器时如何收集、包含哪些信息以及如何编码提供指导。 此处提供的代码仅是实现CVE收集器的众多方式之一。 它使用一种方法编写：爬取特定网站、解析HTML元素并检索数据。 该收集器使用 https://www.cvedetails.com 上的搜索查询来收集严重性评分为6或更高的漏洞信息。 功能特点 它创建一个简单的基于分隔符的文件作为数据库（无需数据库管理系统）。 当发现新的CVE时，它还会检索"漏洞详细信息"。 设置方法 1. 设置...
huntr-com-bug-bounties-collector
huntr.com 漏洞收集器 新的漏洞赏金（漏洞）收集器 环境要求 支持图形界面的 Chrome（如果脚本执行遇到问题，请检查虚拟机的 GPU 功能状态（如果可用）。） Chrome WebDriver 预览 root@kitploit: python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File Reading due to Lack of Input Filepath Validation - Feb 6th 2024 / High CVE-2024-0964 - gradio-app/gradio -...
invesalius3_vulnerabilities
invesalius3vulnerabilities Intro The https://github.com/invesalius/invesalius3 is the reference, an Open Source Project. Structure Every vulnerability will have the following structure: root@kitploit: folder/ |README.md |subfolder/ |artifacts named as CVE-ID if a ID is assigned or as VULN-NAME or...
0day-Rubbish
0day Rubbish 0day vulnerabilities have become rubbish in the AI era. 🌐 Official Website : https://0day-rubbish.com/blog 🎯 Why This Exists Traditional vulnerability disclosure is broken. It's slow, bureaucratic, and ineffective. In the AI era, we can mass-produce 0days at scale—making individual...
pngcheck-vulns
pngcheck-vulns A repository of proof-of-concept files demonstrating disclosed and patched vulnerabilities in pngcheck 2.4.0 - 3.0.1. Each POC is custom crafted with dedicated generation scripts to trigger specific bugs, covering both CVE-numbered and unnumbered vulnerabilities. For detailed...
GO-2025-3887 vulnerabilities
Vulnerabilities for packages: chartmuseum, flux-helm-controller, cilium-cli, helm-push, kargo, trivy-operator, helm-mapkubeapis, helm-set-status, pluto, tw, envoy-gateway, k8sgpt, cerbos, helm-docs, eksctl, zot, flux-source-controller, zarf, headlamp, linkerd2, k9s, cert-manager-cmctl, istio,...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: slsa-verifier, cloudflared, vexctl, argo-workflows, dex, flux-source-controller, fulcio, tkn, gitsign, tekton-chains, flux-kustomize-controller, kubescape, cosign, rekor, sops, terragrunt, kots, oauth2-proxy, spire-server, aactl...
--POC
Goby POC Collection Convert Goby vulnerability scan tools’...
cve-pocs
CVE Proof-of-Concept Collection !GitHub starshttps://img...
SEC-Bench Pro: Can Language Models Solve Long-Horizon Software Security Tasks?
Large language models LLMs now support automated software security tasks, including vulnerability discovery and proof-of-concept PoC generation. Existing benchmarks do not faithfully evaluate LLMs in real-world bug hunting scenarios because they rely on fuzzing harnesses, target-specific...
PT-2026-39408
Name of the Vulnerable Software and Affected Versions Next.js versions 12.2.0 through 15.5.15 Next.js versions 16.0.0 through 16.2.4 Description Applications using the Pages Router with i18n configured and middleware or proxy-based authorization may allow unauthorized access to protected page dat...