22 matches found
vuln-list-update
vuln-list-update 自动收集漏洞信息并以可解析格式保存 数据源 https://github.com/aquasecurity/vuln-list/ 用法 root@kitploit: $ vuln-list-update -h Usage of vuln-list-update: -target string update target nvd, alpine, alpine-unfixed, redhat, redhat-oval, debian, ubuntu, amazon, bottlerocket, oracle-oval, suse-cvrf, photon,...
cve-search
cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...
cve-collector
CVE-Collector 用Python编写的简易最新CVE收集器 收集最新CVE（通用漏洞与暴露）信息有多种方法。 此代码旨在为创建CVE收集器时如何收集、包含哪些信息以及如何编码提供指导。 此处提供的代码仅是实现CVE收集器的众多方式之一。 它使用一种方法编写：爬取特定网站、解析HTML元素并检索数据。 该收集器使用 https://www.cvedetails.com 上的搜索查询来收集严重性评分为6或更高的漏洞信息。 功能特点 它创建一个简单的基于分隔符的文件作为数据库（无需数据库管理系统）。 当发现新的CVE时，它还会检索"漏洞详细信息"。 设置方法 1. 设置...
huntr-com-bug-bounties-collector
Recolector de bugs de huntr.com Nuevo recolector de bug bountyvulnerabilidades Requisitos Chrome con interfaz gráfica Si tienes problemas con la ejecución del script, verifica el estado de las características de GPU de las máquinas virtuales, si están disponibles. Chrome WebDriver Vista previa...
CVEsLab
CVEsLab 由 Securi Trust 团队为各种 CVE 编写的一系列概念验证漏洞利用脚本、Docker 实验室环境以及 Securi Trust 团队发现的漏洞。...
PoC-CVEs
PoC || GTFO Proof of Concepts of vulnerabilities...
invesalius3_vulnerabilities
invesalius3vulnerabilities Intro The https://github.com/invesalius/invesalius3 is the reference, an Open Source Project. Structure Every vulnerability will have the following structure: root@kitploit: folder/ |README.md |subfolder/ |artifacts named as CVE-ID if a ID is assigned or as VULN-NAME or...
CVE-2025
CVE-2025 2025年发现的CVE及其PoC...
pngcheck-vulns
pngcheck-vulns 一个包含已披露和已修补的 pngcheck（2.4.0 - 3.0.1）漏洞概念验证文件的仓库。 每个 PoC 都通过专用生成脚本精心构造，以触发特定 bug，覆盖已分配 CVE 编号和未分配 CVE 编号的漏洞。 有关详细的漏洞分析，请参阅我的研究笔记。 摘要 目录| 类型| 描述| 版本 ---|---|---|--- vulns-3.0.1| 缓冲区越界读取| LOOP 块：未检查的块大小| =3.0.1 vulns-3.0.0| 缓冲区越界读取| PPLT 块：firstidx/lastidx 处理错误| =3.0.0 vulns-2.4.0|...
0day-Rubbish
0day Rubbish 0day vulnerabilities have become rubbish in the AI era...
smart-contract-vulnerabilities
Vulnerabilità degli Smart Contract Una raccolta di vulnerabilità degli smart contract con i relativi metodi di prevenzione. Vedi /references per riferimenti ottimizzati per LLM. Controllo degli accessi Autorizzazione tramite tx.origin Controllo degli accessi insufficiente Delegatecall a...
GO-2025-3887 vulnerabilities
Vulnerabilities for packages: eksctl, flux-source-controller, cert-manager-cmctl, headlamp, kots, istio, k8sgpt, chartmuseum, helm-docs, helm-mapkubeapis, linkerd2, chart-testing, trivy, zot, flux-helm-controller, rancher-fleet, flux, cluster-api-helm-controller, envoy-gateway, helm-operator, tw,...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: spire-server, gitsign, flux-source-controller, tekton-chains, terragrunt, tkn, kots, slsa-verifier, dex, flux-kustomize-controller, argo-workflows, cosign, sops, oauth2-proxy, cloudflared, aactl, rekor, vexctl, fulcio, kubescape...
--POC
Goby POC Collection Convert Goby vulnerability scan tools’...
cve-pocs
CVE Proof-of-Concept Collection !GitHub starshttps://img...
SEC-Bench Pro: Can Language Models Solve Long-Horizon Software Security Tasks?
Large language models LLMs now support automated software security tasks, including vulnerability discovery and proof-of-concept PoC generation. Existing benchmarks do not faithfully evaluate LLMs in real-world bug hunting scenarios because they rely on fuzzing harnesses, target-specific...
PT-2026-39408
Name of the Vulnerable Software and Affected Versions Next.js versions 12.2.0 through 15.5.15 Next.js versions 16.0.0 through 16.2.4 Description Applications using the Pages Router with i18n configured and middleware or proxy-based authorization may allow unauthorized access to protected page dat...