22 matches found
smart-contract-vulnerabilities
Vulnerabilidades de Contratos Inteligentes Una colección de vulnerabilidades de contratos inteligentes junto con métodos de prevención. Consulta /references para referencias optimizadas para LLM. Control de Acceso Autorización mediante tx.origin Control de Acceso Insuficiente Delegatecall a...
cve-search
cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...
vuln-list-update
vuln-list-update Recopila información de vulnerabilidades y guárdala en un formato analizable automáticamente Datos https://github.com/aquasecurity/vuln-list/ Uso root@kitploit: $ vuln-list-update -h Usage of vuln-list-update: -target string update target nvd, alpine, alpine-unfixed, redhat,...
PoC-CVEs
PoC || GTFO Proof of Concepts of vulnerabilities...
cve-collector
CVE-Collector 用Python编写的简易最新CVE收集器 收集最新CVE（通用漏洞与暴露）信息有多种方法。 此代码旨在为创建CVE收集器时如何收集、包含哪些信息以及如何编码提供指导。 此处提供的代码仅是实现CVE收集器的众多方式之一。 它使用一种方法编写：爬取特定网站、解析HTML元素并检索数据。 该收集器使用 https://www.cvedetails.com 上的搜索查询来收集严重性评分为6或更高的漏洞信息。 功能特点 它创建一个简单的基于分隔符的文件作为数据库（无需数据库管理系统）。 当发现新的CVE时，它还会检索"漏洞详细信息"。 设置方法 1. 设置...
huntr-com-bug-bounties-collector
huntr.com 漏洞收集器 新的漏洞赏金（漏洞）收集器 环境要求 支持图形界面的 Chrome（如果脚本执行遇到问题，请检查虚拟机的 GPU 功能状态（如果可用）。） Chrome WebDriver 预览 root@kitploit: python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File Reading due to Lack of Input Filepath Validation - Feb 6th 2024 / High CVE-2024-0964 - gradio-app/gradio -...
CVEsLab
CVEsLab Una colección de scripts de exploit de prueba de concepto, entornos de laboratorio Docker y vulnerabilidades descubiertas por el equipo de Securi Trust para escritas por el equipo de Securi Trust para varios CVEs...
CVE-2025
CVE-2025 CVEs descubiertas en 2025 y sus PoCs...
invesalius3_vulnerabilities
invesalius3vulnerabilities Intro The https://github.com/invesalius/invesalius3 is the reference, an Open Source Project. Structure Every vulnerability will have the following structure: root@kitploit: folder/ |README.md |subfolder/ |artifacts named as CVE-ID if a ID is assigned or as VULN-NAME or...
0day-Rubbish
0day Rubbish 0day vulnerabilities have become rubbish in the AI era...
pngcheck-vulns
pngcheck-vulns A repository of proof-of-concept files demonstrating disclosed and patched vulnerabilities in pngcheck 2.4.0 - 3.0.1. Each POC is custom crafted with dedicated generation scripts to trigger specific bugs, covering both CVE-numbered and unnumbered vulnerabilities. For detailed...
GO-2025-3887 vulnerabilities
Vulnerabilities for packages: helm-set-status, cert-manager-cmctl, cluster-api-helm-controller, helm-docs, kubescape, envoy-gateway, helm-mapkubeapis, headlamp, flux-helm-controller, cerbos, cilium-cli, flux, zarf, eksctl, trivy, chart-testing, k8ssandra-client, kots, flux-source-controller,...
GO-2023-2334 vulnerabilities
Vulnerabilities for packages: flux-kustomize-controller, cloudflared, kubescape, rekor, cosign, gitsign, tkn, slsa-verifier, oauth2-proxy, kots, flux-source-controller, aactl, vexctl, tekton-chains, argo-workflows, sops, fulcio, dex, terragrunt, spire-server...
--POC
Goby POC Collection Convert Goby vulnerability scan tools’...
cve-pocs
CVE Proof-of-Concept Collection !GitHub starshttps://img...
SEC-Bench Pro: Can Language Models Solve Long-Horizon Software Security Tasks?
Large language models LLMs now support automated software security tasks, including vulnerability discovery and proof-of-concept PoC generation. Existing benchmarks do not faithfully evaluate LLMs in real-world bug hunting scenarios because they rely on fuzzing harnesses, target-specific...
PT-2026-39408
Name of the Vulnerable Software and Affected Versions Next.js versions 12.2.0 through 15.5.15 Next.js versions 16.0.0 through 16.2.4 Description Applications using the Pages Router with i18n configured and middleware or proxy-based authorization may allow unauthorized access to protected page dat...