1559 matches found
Apktool
Apktool Dies ist das Repository für Apktool. Die Website befindet sich im Repositoryapktool.org. Apktool ist ein Tool zum Reverse Engineering von Drittanbieter-, geschlossenen, binären Android-Apps. Es kann Ressourcen nahezu in die ursprüngliche Form dekodieren und nach einigen Änderungen...
faraday_addon
Informazioni Faraday Addon è un semplice addon per automatizzare la segnalazione di vulnerabilità dal browser alla propria istanza di Faraday. Faraday Addon intercetta ogni singola richiesta dal browser, aggiungendo una funzionalità per accedere a ciascuna di esse trattandole come vulnerabilità. ...
contact.sh
contact.sh Ein OSINT-Tool zur Ermittlung von Kontakten für die Meldung von Sicherheitsschwachstellen. Installation 🐧 GNU/Linux Stellen Sie sicher, dass die Pakete whois und jq installiert sind. root@kitploit: $ git clone https://github.com/EdOverflow/contact.sh.git $ cd contact.sh/ $ chmod u+x...
versionscan
versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...
CVE-2026-59568
creationtimestamp| type| source ---|---|--- 2026-08-24 15:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttnscki7u2p 2026-08-24 16:07:47+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mttorycio22e 2026-08-24 18:12:34+00:00| seen|...
petereport
PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...
Bug-Bounty-Beginner-Roadmap
Zögern Sie nicht, zu diesem Repository beizutragen! Roadmap für Bug-Bounty-Einsteiger Hallo! Ich bin Ansh Bhawnani. Ich arbeite derzeit als Security Engineer und bin nebenbei Content Creator. Ich erstelle dieses Repository, damit alle beitragen können, um jungen und begeisterten Köpfen den Einsti...
claude-pentest
claude-pentest A local pentesting toolkit built for Claude Co...
6 security settings every GitHub maintainer should enable this week
At GitHub Security Lab, we spend a lot of our week talking to maintainers. Some find the settings page dense and the docs sprawl. Most maintainers we talk to weren't hired to be security engineers. While this is true, ignoring a project's security settings completely will lead into leaving a lot ...
metasploit-web-scanner-module
MSF Web Vulnerability Scanner Advanced Advanced Metasploit au...
ai-pentest-agent
🔐 AI Pentest Agent v4 Automated web application penetration...
GHSA-XMRV-PMRH-HHX2 Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder
CVSSv3.1 Rating: Medium CVSSv3.1 Score: 5.9 CVSSv3.1 Vector String: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Summary and Impact An issue exists in the the EventStream header decoder in AWS SDK for Go v2 in versions predating 2026-03-23. An actor can send a malformed EventStream response frame...
Fleet 代码问题漏洞
Fleet is an open-source device management platform developed by Fleet Device Management. It supports various operating systems and devices, and helps IT and security teams with device management, vulnerability reporting, MDM operations, etc. Versions of Fleet prior to 4.81.0 contained code...
PT-2026-28102
What are the limits of AI-assisted vulnerability hunting? I obtained 23 CVEs in one month. BentoML 8.2k CVE-2026-27905 HIGH SillyTavern 24.6k CVE-2026-26286 HIGH Plane 28.2k CVE-2026-27705 MEDIUM NocoDB 46.4k CVE-2026-28399 MEDIUM Mautic 8.4k CVE-2026-3105 HIGH File Browser 27.9k CVE-2026-28492...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell Security Tool CVE-2025-55182 & CVE-2025-66478...
S3C2 SICP Summit 2025-06: Vulnerability Response Summit
Recent years have shown increased cyber attacks targeting less secure elements in the software supply chain and causing significant damage to businesses and organizations. The US and EU governments and industry are equally interested in enhancing software security, including supply chain and...
CVE-2025-9981
QuickCMS is vulnerable to multiple Stored XSS in slider editor functionality sliders-form. Malicious attacker with admin privileges can inject arbitrary HTML and JS into website, which will be rendered/executed on every page. By default admin user is not able to add JavaScript into the website. T...
EUVD-2019-14213
Malware in sbrugna...