2937300 matches found
defending-code-reference-harness
Defending Code Reference Harness A reference implementation for autonomous vulnerability discovery and remediation with Claude, based on our learnings from partnering with security teams at several organizations since launching Claude Mythos Preview. For a write up of these learnings along with...
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.
The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2020-11546
Preface A GO language version of the CVE-2020-11546 exploitation tool, just for practicing GO language. Usage go get -u -v github.com/damit5/CVE-2020-11546@master CVE-2020-11546 Build Yourself git clone https://github.com/damit5/CVE-2020-11546 bash build.sh...
juumla
🦁 Juumla 🦁 Juumla Juumla is a python tool created to identify Joomla version, scan for vulnerabilities and sensitive files. ⚡ Installing / Getting started A quick guide on how to install and use Juumla. 1. Clone the repository - git clone https://github.com/oppsec/juumla.git 2. Install the...
vulnrepo
VULNRΞPO - Vulnerability Report Generator & Repository A client-side, privacy-first vulnerability report manager for security professionals. All data is encrypted and stored locally in your browser — nothing is sent to any server by default. Live app: https://vulnrepo.com/ | Dev branch:...
CVE-2019-0708
Leaving for a wedding tomorrow, if I can't find anything then someone else take the reins Going to drop the crash PoC here Friday if there isnt one public already... Maybe the following week, depending on if the vulnerable numbers drop consistently or not. https://vimeo.com/339425966 I'm not...
weblogicScanner
source: https://github.com/rabbitmask/WeblogicScan weblogicScaner 简体中文 | English As of November 27, 2020, weblogic Vulnerability Scanning Tool. If there is an unrecorded and open POC vulnerability, please submit issue. Some bug fixes were made, some POC did not take effect, or configuration error...
CVE-2020-9054
CVE-2020-9054 An incomplete CVE-2020-9054 PoC. I might even finish this sometime, but its been rotting on a hard drive since forever...
CVE-2019-17041
Rsyslog - what is it? Rsyslog is a r ocket-fast sys tem for log processing. It offers high-performance, great security features and a modular design. While it started as a regular syslogd, rsyslog has evolved into a kind of swiss army knife of logging, being able to accept inputs from a wide...
CVE-2018-10933
This repository does not have a README...
CVE-2022-24934
CVE-2022-24934 CVE-2022-24934...
DriverSentinel
🛡️ DriverSentinel 🛡️ Vulnerable Windows Driver Scanner DriverSentinel is a security tool developed in Go that detects malicious and vulnerable drivers on Windows systems by comparing them against the LOLDrivers.io database. Features • Installation • Usage • How It Works 📋 Table of Contents Features...
BWASP
BWASP The BoB Web Application Security Project BWASP is an open-source, analysis tool to support for Web Vulnerability Manual Analysis hackers. The BWASP tool basically provides predicted information through vulnerability analysis without proceeding with an attack. BWASP supports performing...
cve-2022-40684
cve-2022-40684 exploit for CVE-2022-40684 Fortinet...
CVE-2021-41773-RCE
CVE-2021-41773-RCE...
ProxyVulns
ProxyVulns ProxyLogon Usage: python3 26855.py 1.1.1.1 ProxyOracle Once a victim clicks this link, evil.com will receive the cookies...
CVE-2021-21300
CVE-2021-21300...
SucoshScanny
Sucosh Scanny "Sucosh" is an automated Source Code vulnerability scannerSAST and assessment framework for PythonFlask-Django & NodeJs capable of performing code review in Web Application Developing or Source Code Analysis processes.It’s can detect a lot of vulnerabilityRCE,SSTI,Insecure...