138 matches found
security-advisories
security-advisories Публичные бюллетени безопасности, опубликованные Me Chidubem Chukwu Terminal Venom, включая раскрытия CVE и отчёты об уязвимостях для открытого и стороннего программного обеспечения...
reports
Эта папка содержит некоторые отчёты об уязвимостях, которые я раскрыл со временем. Barracuda Networks Load Balancer ADC - множественные уязвимости CVE-2014-8426, CVE-2014-8428 Aruba ClearPass Policy Manager - хранимая XSS CVE-2015-1389 Network Solution WebMail - множественные уязвимости...
purify
Purify Outil tout-en-un pour gérer les rapports de vulnérabilités 🎮 Démo 📃 Documentation 📹 Vimeo rapide Description L'objectif de Purify est d'être un outil facile à utiliser et efficace pour simplifier le flux de travail de gestion des vulnérabilités provenant de divers outils même personnalisés...
envizon
envizon - by evait security EOL https://github.com/evait-security/envizon/issues/130 We evait security moved to https://gitlab.com/invuls/pentest-projects/pcf for internal project documentation. network visualization & pentest reporting Version 5.0 This tool is designed, developed and supported b...
vulnerability_advisories
Бюллетени безопасности Onapsis Этот репозиторий содержит бюллетени безопасности для уязвимостей, обнаруженных командой Onapsis Research Labs Сводка по бюллетеням Следующая таблица содержит сводку уязвимостей, описанных в этом репозитории: Вендор| CVE| CVSS| Описание| Ссылка на отчёт...
CVE
CVE CVE, отчёты, исследования...
wordpress-hacking
Piratage de WordPress Quelques ressources utiles pour pirater WordPress et ses plugins et thèmes. Bug Bounty Si vous êtes passionné par la découverte et le signalement de vulnérabilités WordPress, envisagez de rejoindre ces programmes de bug bounty : Wordfence et Patchstack. En vous inscrivant vi...
Inside the Advisory Database and what happens when vulnerability volume breaks records
In May 2026, the GitHub Advisory Database published 1,560 reviewed advisories --more than five times our typical monthly output and the highest in its history. And it still wasn't enough to keep up. Over the past few months, the vulnerability ecosystem has shifted in a fundamental way. Input acro...
Vulnerability Reports Are Not Special Anymore
A requirement for staying sane while working in public as an open source maintainer is realizing that every issue, PR, and piece of feedback is a present, not an obligation. You can accept it, ignore it, and use it partially or not at all. Except… For years, as lead of the Go Security team at the...
Smart_Contract_Researcher_POC
Smart Contract Security Research Portfolio hailthelord...
Wordfence Intelligence Weekly WordPress Vulnerability Report (May 25, 2026 to May 31, 2026)
Last week, there were 277 vulnerabilities disclosed in 184 WordPress Plugins and 70 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 93 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...
IMVU-Exploits
IMVU Exploits IMVU Classic Client v3.6.15 - Complete exploita...
The Fault in Our Drafts: Vulnerabilities in RPKI Specification and Software
The Resource Public Key Infrastructure RPKI secures the Internet's routing system by defining a complex trust and validation framework for certificates, Route Origin Authorizations ROAs, manifests, and Certificate Revocation Lists CRLs. These mechanisms are specified across dozens of RFCs. This...
Demystifying the Mythos or Disrupting Bugonomics? from Zero-Day Asymmetry to Defender Remediation Throughput
Recent demonstrations of large language models producing candidate and confirmed vulnerabilities in production software have renewed the narrative that AI will reshape offensive and defensive security. Headlines emphasize capability; they rarely interrogate costs and incentives. This paper examin...
Web-Application-Vulnerability-Scanner
Web-Application-Vulnerability-Scanner Developed a Python-...
cnnvd-cve-report-generator
No d...
RAVEN: Retrieval-Augmented Vulnerability Exploration Network for Memory Corruption Analysis in User Code and Binary Programs
Large Language Models LLMs have demonstrated remarkable capabilities across various cybersecurity tasks, including vulnerability classification, detection, and patching. However, their potential in automated vulnerability report documentation and analysis remains underexplored. We present RAVEN...
Gitlab -- vulnerabilities
Gitlab reports: Improper Handling of Parameters issue in Jira Connect installations impacts GitLab CE/EE Cross-Site Request Forgery issue in GLQL API impacts GitLab CE/EE HTML Injection in vulnerability report impacts GitLab EE Denial of Service issue in GraphQL API impacts GitLab CE/EE Improper...