should-i-trust

should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...

tarnish

tarnish tarnish è uno strumento di analisi statica per assistere i ricercatori nelle revisioni di sicurezza delle estensioni di Chrome. Automatizza gran parte del lavoro di routine e ti aiuta a identificare rapidamente potenziali vulnerabilità di sicurezza. Questo strumento accompagna il post del...

MIDA-Multitool

MIDA - Multitool Script Bash progettato per l'enumerazione del sistema, l'identificazione delle vulnerabilità e l'escalation dei privilegi. MIDA Multitool trae funzionalità da molti dei miei script precedenti, in particolare SysEnum e RootHelper, ed è per certi versi il successore di RootHelper, ...

firmwalker

firmwalker A simple bash script for searching the extracted or mounted firmware file system. It will search through the extracted or mounted firmware file system for things of interest such as: etc/shadow and etc/passwd list out the etc/ssl directory search for SSL related files such as .pem, .cr...

vajra

An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra Contributing License Future Plans/Under Development Credits Disclaimer FAQ Detailed insight about Vajra can b...

Wordpress-Vulnerability-Identification-Scripts

Wordpress-Vulnerability-Identification-Scripts Identifiziert Domains, die WordPress ausführen, und testet auf Schwachstellen CVE-2023-32243 / VU76395 / usw... wpidentifier.py === Eingabe: Datei mit einer Liste von Domains / Sub-Domains Ausgabe: Liste der Domains, die eine WordPress-Anwendung host...

raptor

Raptor Raptor ist ein Framework zur Überprüfung des Blockchain-Ökosystems Verträge, Protokolle usw.. Übersicht Raptor bietet strukturierte Ansätze und Werkzeuge zur Identifizierung von Sicherheitslücken in Smart Contracts und Blockchain-Protokollen. Das Framework hilft Prüfern, Ergebnisse...

Invoke-HiveDreams

Invoke-HiveDreams Eine Fähigkeit zur Identifizierung und Behebung von CVE-2021-36934 HiveNightmare...

CVE-2026-19371

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfyuploadimage. Such manipulation of the argument imagepath leads to path traversal. An attack has to be approached locally. The project...

HTB-Writeups

Hack The Box Writeups This repository contains my Hack The Bo...

CVE-2026-10043

creationtimestamp| type| source ---|---|--- 2026-06-25 02:41:03+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp3fq6z37d22...

UBUNTU-CVE-2026-41437

hw/uefi: fix ucs2 string helper functions...

GCVE: A Decentralized Model for Vulnerability Identification, Publication, and Operational Enrichment

The Global CVE initiative GCVE proposes a decentralized, open, and extensible model for vulnerability identification, publication, and enrichment. It addresses a gap in today's vulnerability ecosystem: centralized systems provide rigorous control and widely recognized identifiers, while many...

Vulnerability Identification by Harnessing Inter-Connected Multi-Source Information

The utilization of third-party open-source libraries is widespread in modern software development. Due to the dependency relationships, vulnerabilities within open-source libraries pose significant security threats to downstream software. However, the library vulnerabilities are usually implicitl...

BinExploit-Bench

BinExploit-Bench: Binary Exploitation Capability Benchmark for...

A Systematic Review of Algorithmic Red Teaming Methodologies for Assurance and Security of AI Applications

Cybersecurity threats are becoming increasingly sophisticated, making traditional defense mechanisms and manual red teaming approaches insufficient for modern organizations. While red teaming has long been recognized as an effective method to identify vulnerabilities by simulating real-world...

CVE-2022-23456

Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software...

CVE-2019-11949

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2022-31807

A vulnerability has been identified in Building X - Security Manager Edge Controller ACC-AP All versions. Affected devices do not properly check the integrity of firmware updates. This could allow a local attacker to upload a maliciously modified firmware onto the device. In a second scenario, a...

CVE-2023-50806

A vulnerability was discovered in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850 Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380 Exynos 1330, Exynos 9110, Exynos W920, Exynos W930, Exynos Modem...