572 matches found
tarnish
tarnish tarnish est un outil d'analyse statique conçu pour aider les chercheurs dans les revues de sécurité des extensions Chrome. Il automatise une grande partie du travail de routine et vous aide à identifier rapidement les vulnérabilités de sécurité potentielles. Cet outil accompagne l'article...
Invoke-HiveDreams
Invoke-HiveDreams Возможность обнаружения и устранения CVE-2021-36934 HiveNightmare...
MIDA-Multitool
MIDA - Multitool Script Bash conçu pour l'énumération du système, l'identification des vulnérabilités et l'élévation de privilèges. MIDA Multitool s'inspire des fonctionnalités de plusieurs de mes scripts précédents, à savoir SysEnum et RootHelper, et est à certains égards le successeur de...
should-i-trust
should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...
vajra
An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra Contributing License Future Plans/Under Development Credits Disclaimer FAQ Detailed insight about Vajra can b...
Joern 4.0.645
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
Wordpress-Vulnerability-Identification-Scripts
Скрипты идентификации уязвимостей WordPress Определяет домены, на которых работает WordPress, и проверяет на уязвимости CVE-2023-32243 / VU76395 / и т.д. wpidentifier.py === Ввод: Файл, содержащий список доменов / поддоменов Вывод: Список доменов, на которых размещено приложение WordPress...
raptor
Raptor Raptor est un framework pour auditer l'écosystème blockchain contrats, protocoles, etc.. Aperçu Raptor fournit des approches et outils structurés pour identifier les vulnérabilités de sécurité dans les smart contracts et les protocoles blockchain. Le framework aide les auditeurs à document...
firmwalker
firmwalker A simple bash script for searching the extracted or mounted firmware file system. It will search through the extracted or mounted firmware file system for things of interest such as: etc/shadow and etc/passwd list out the etc/ssl directory search for SSL related files such as .pem, .cr...
CVE-2026-19371
A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfyuploadimage. Such manipulation of the argument imagepath leads to path traversal. An attack has to be approached locally. The project...
CVE-2026-15658 foreUP customer REST API allows unauthenticated endpoint access
A vulnerability in the foreUP customer REST API allows any authenticated, low-privilege customer to access an endpoint that returns the records of other users without checking that the caller owns the data associated with that record...
HTB-Writeups
Hack The Box Writeups This repository contains my Hack The Bo...
CVE-2026-10043
creationtimestamp| type| source ---|---|--- 2026-06-25 02:41:03+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp3fq6z37d22...
PT-2026-50819
CVE-2026-39927 - Rejected reason: This CVE ID has been rejected or CVE ID :CVE-2026-39927 Published : June 16, 2026, 5:16 p.m. | 43 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for more...
UBUNTU-CVE-2026-41437
hw/uefi: fix ucs2 string helper functions...
GCVE: A Decentralized Model for Vulnerability Identification, Publication, and Operational Enrichment
The Global CVE initiative GCVE proposes a decentralized, open, and extensible model for vulnerability identification, publication, and enrichment. It addresses a gap in today's vulnerability ecosystem: centralized systems provide rigorous control and widely recognized identifiers, while many...
Vulnerability Identification by Harnessing Inter-Connected Multi-Source Information
The utilization of third-party open-source libraries is widespread in modern software development. Due to the dependency relationships, vulnerabilities within open-source libraries pose significant security threats to downstream software. However, the library vulnerabilities are usually implicitl...
BinExploit-Bench
BinExploit-Bench: Binary Exploitation Capability Benchmark for...
A Systematic Review of Algorithmic Red Teaming Methodologies for Assurance and Security of AI Applications
Cybersecurity threats are becoming increasingly sophisticated, making traditional defense mechanisms and manual red teaming approaches insufficient for modern organizations. While red teaming has long been recognized as an effective method to identify vulnerabilities by simulating real-world...
