22 matches found
vuln-list-update
vuln-list-update 自动收集漏洞信息并以可解析格式保存 数据源 https://github.com/aquasecurity/vuln-list/ 用法 root@kitploit: $ vuln-list-update -h Usage of vuln-list-update: -target string update target nvd, alpine, alpine-unfixed, redhat, redhat-oval, debian, ubuntu, amazon, bottlerocket, oracle-oval, suse-cvrf, photon,...
huntr-com-bug-bounties-collector
huntr.com 버그 수집기 새로운 버그 바운티취약점 수집기 요구 사항 GUI가 있는 Chrome 스크립트 실행에 문제가 발생할 경우 VM의 GPU 기능 상태를 확인하세요. 가능하다면. Chrome WebDriver 미리보기 root@kitploit: python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File Reading due to Lack of Input Filepath Validation - Feb 6th 2024 / High CVE-2024-0964 -...
cve-collector
CVE-Collector Python으로 작성된 간단한 최신 CVE 수집기 최신 CVECommon Vulnerabilities and Exposures 정보를 수집하는 방법은 다양합니다. 이 코드는 CVE 수집기를 만들 때 수집 방법, 포함할 정보, 코딩 방법에 대한 지침을 제공하기 위해 작성되었습니다. 여기에 제공된 코드는 CVE 수집기를 구현하는 여러 방법 중 하나입니다. 특정 웹사이트를 크롤링하고 HTML 요소를 파싱하여 데이터를 검색하는 방식을 사용합니다. 이 수집기는 https://www.cvedetails.com의 ...
cve-search
cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...
invesalius3_vulnerabilities
invesalius3vulnerabilities 简介 https://github.com/invesalius/invesalius3 是参考实现，一个开源项目。 结构 每个漏洞将采用以下结构： root@kitploit: folder/ |README.md |subfolder/ |artifacts 命名为 CVE-ID（如果分配了ID），如果没有分配ID则命名为 VULN-NAME 或 TMP-N。 每个 folder/ 将在 README.md 文件中注明贡献者。 当前 可用的POC： CVE-2024-44825 CVE-2024-42845 partwave...
CVE-2025
CVE-2025 2025年に発見されたCVEとそのPoC...
pngcheck-vulns
pngcheck-vulns 一个包含已披露和已修补的 pngcheck（2.4.0 - 3.0.1）漏洞概念验证文件的仓库。 每个 PoC 都通过专用生成脚本精心构造，以触发特定 bug，覆盖已分配 CVE 编号和未分配 CVE 编号的漏洞。 有关详细的漏洞分析，请参阅我的研究笔记。 摘要 目录| 类型| 描述| 版本 ---|---|---|--- vulns-3.0.1| 缓冲区越界读取| LOOP 块：未检查的块大小| =3.0.1 vulns-3.0.0| 缓冲区越界读取| PPLT 块：firstidx/lastidx 处理错误| =3.0.0 vulns-2.4.0|...
0day-Rubbish
0day Rubbish 0day vulnerabilities have become rubbish in the AI era. 🌐 Official Website : https://0day-rubbish.com/blog 🎯 Why This Exists Traditional vulnerability disclosure is broken. It's slow, bureaucratic, and ineffective. In the AI era, we can mass-produce 0days at scale—making individual...
smart-contract-vulnerabilities
Vulnerabilità degli Smart Contract Una raccolta di vulnerabilità degli smart contract con i relativi metodi di prevenzione. Vedi /references per riferimenti ottimizzati per LLM. Controllo degli accessi Autorizzazione tramite tx.origin Controllo degli accessi insufficiente Delegatecall a...
CVEsLab
CVEsLab Una raccolta di script exploit proof-of-concept, ambienti lab docker e vulnerabilità scoperte dal Securi Trust Team per scritte dal team di Securi Trust per varie CVE...
PoC-CVEs
PoC || GTFO Proof of Concept di vulnerabilità...
GO-2025-3887 vulnerabilities
Vulnerabilities for packages: tw, flux, pluto, helm-docs, eksctl, cert-manager-cmctl, helm-set-status, trivy, helm-push, istio, k8ssandra-client, chartmuseum, envoy-gateway, k9s, kots, cerbos, helm-mapkubeapis, linkerd2, rancher-fleet, zot, flux-source-controller, zarf, helm-operator, headlamp,...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: slsa-verifier, vexctl, argo-workflows, tkn, rekor, flux-kustomize-controller, kots, terragrunt, dex, flux-source-controller, cloudflared, oauth2-proxy, sops, fulcio, aactl, kubescape, cosign, spire-server, tekton-chains, gitsign...
--POC
Goby POC Collection Convert Goby vulnerability scan tools’...
cve-pocs
CVE Proof-of-Concept Collection !GitHub starshttps://img...
SEC-Bench Pro: Can Language Models Solve Long-Horizon Software Security Tasks?
Large language models LLMs now support automated software security tasks, including vulnerability discovery and proof-of-concept PoC generation. Existing benchmarks do not faithfully evaluate LLMs in real-world bug hunting scenarios because they rely on fuzzing harnesses, target-specific...
PT-2026-39408
Name of the Vulnerable Software and Affected Versions Next.js versions 12.2.0 through 15.5.15 Next.js versions 16.0.0 through 16.2.4 Description Applications using the Pages Router with i18n configured and middleware or proxy-based authorization may allow unauthorized access to protected page dat...