2965234 matches found
notes
notes An archive of my vulnerability research notes. Mostly, expanded takes from Twitter...
hackguard
hackguard FAST WEB APPLICATION VULNERABILITY SCANNER Requirements: 1. Make sure python3 is installed in windows Or in Linux 2. For Windows: python -m pip install -r requirements.txt 3. For Linux: python3 -m pip install -r requirements.txt Installation: 1. For Linux Users: a git clone...
log4j-CVE-2021-44228
log4j-CVE-2021-44228...
CVE-2025-68616-Detecting-and-Patching-an-SSRF-in-WeasyPrint-with-Wazuh
From Detection to Remediation: Hunting and Patching a Real SSRF CVE-2025-68616 in WeasyPrint with Wazuh TL;DR During a personal practice exercise with Wazuh open source SIEM/XDR on a Kali Linux machine, the Vulnerability Detection module identified a High CVSS 7.5 severity vulnerability in the...
n-days
n-days A collection of POCs & writeups for iOS vulnerabilities either discovered by me, binary diffed from In-The-Wild updates or just cool non-public bugs. CVE| Patched In| Link| Reported by me| Exploited ITW| Description ---|---|---|---|---|--- CVE-2021-1757| iOS 14.4| poc - info| ✖️| ✖️| Kernel...
CVE-2024-37051-EXP
CVE-2024-37051-EXP CVE-2024-37051 poc and exploit See PR 1: https://github.com/LeadroyaL/CVE-2024-37051-EXP/pull/1 Chinese vulnerability analysis: https://leadroyal.cn/p/2403/...
CVE-2017-1000253
This repository does not have a README...
webcopilot
WebCopilot An automation tool that enumerate subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities. Features • Installation • Usage • WebCopilot • Tools Used • Acknowledgement WebCopilot is an automation tool designed to enumerate...
CVE-2026-31431-simple-test
CVE-2026-31431 — Educational PoC Disclaimer This repository is provided solely for educational, research, and defensive security purposes. The code demonstrates the technical mechanism behind CVE-2026-31431 in a controlled laboratory environment. It is intended to help security researchers,...
security-portfolio-chris-peterson
security-portfolio-chris-peterson My portfolio showcasing vulnerability research CVE-2026-11989, CVE-2026-11395 and automated threat orchestration engineering Lucius Engine, TalonVigil...
PwnKit-Hunter
Background Last week, a significant vulnerability in polkit’s pkexec was publicly disclosed link. By exploiting this vulnerability, attackers on a vulnerable host could easily gain full root privileges from any unprivileged user. Following the public disclosure of this “PwnKit” vulnerability, we...
CVE-2018-16763
This repository does not have a README...
nvd
nvd Fast, simple library in Go to fetch CVEs from the NVD U.S. National Vulnerability Database feeds. Install go get github.com/daehee/nvd Usage The nvd package provides a Client for fetching CVEs from the official NVD feeds: // nvd client with ./tmp working dir client, err := NewClient"tmp" //...
CVE-2026-33017
This repository does not have a README...
CVE-2026-0920
CVE-2026-0920 Scanner A Python-based scanner for detecting and validating CVE-2026-0920 exposure in WordPress sites using vulnerable LA-Studio Element plugin versions. Overview This tool is designed to automate the identification of WordPress targets potentially affected by CVE-2026-0920 , a...
gha-lab-6255f5fc33
Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of gradio-app/gradio at commit...
-linx-server-vulnerability-report
This repository does not have a README...
CVE-2026-82329
CVE-2026-82329 Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha...