security-research

Security Research This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code. We believe that vulnerability disclosure is a two-way street. Vendors, as well as researchers, must act responsibly. This i...

owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integrati...

pub

❤ Be a Hero, tip a 🍺 🙂 ⟶ Ƀ : 1AZMeGVfCBbYwVYyG9s79pJDyocTZgiApa | Ξth : 0x438B38E30eF117C15fBfF833f9C2c70182925815 Exploit PoCs and tools for vulnerabilities disclosed by tintinweb. pub root@kitploit: police line - do not cross ==== police line - do not cross ==== police line - do not cross ====...

securitylab

GitHub Security Lab This is the main git repository of GitHub Security Lab. We use it for these main purposes: We share with our community some best practices about security research and vulnerability disclosures in our docs We use issues on this repo to track CodeQL bounty requests. We use it fo...

Vulnerability-Disclosures

Mandiant Vulnerability Disclosures This repository details vulnerabilities disclosed by Mandiant. These vulnerabilities were discovered by internal research, through Red Team assessments, or in use in the wild. Proof of concepts PoCs may or may not be provided. The following licenses/licensing...

Ctirix_RCE-CVE-2019-19781

CtirixRCE-CVE-2019-19781 Citrix ADC RCE cve-2019-19781 Vídeo Síguenos Vulnmachines YouTube Twitter Facebook...

advisories

Advisories Security advisories from Kelly Kaoudis @kaoudis and friends. In general, I'll publish here either after the vendor has patched, or after 90 days from vulnerability discovery. Happy reading! Advisories are numbered in discovery order & by year; discovery enumeration starts at 0...

CVEs

CVEs These are vulnerabilities I have identified and disclosed through the CVE program...

Astro - Unauthorized Third-Party Image Access

Astro 5.13.2 and 4.16.18 contains an information disclosure vulnerability caused by improper validation of protocol-relative URLs in the image optimization endpoint, letting attackers serve images from unauthorized third-party domains, exploit requires on-demand rendering deployment. id:...

NETGEAR DGN2200 / DGND3700 - Admin Password Disclosure

NETGEAR DGN2200 / DGND3700 is susceptible to a vulnerability within the page 'BSWcxttongr.htm' which can allow a remote attacker to access this page without any authentication. The attacker can then use this password to gain administrator access of the targeted router's web interface. id:...

BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File Disclosure

Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability caused by improper validation of the 'READ.filePath' parameter in fileread script and SendCGICMD API, letting authenticated attackers read arbitrary system files. id: CVE-2019-25246 info: name: BEWARD...

Wowza Streaming Engine Manager 4.7.4.01 - Directory Traversal

Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a remote, specifically crafted HTTP request to the REST API. id: CVE-2018-19365 info: name: Wowza Streaming Engine Manager 4.7.4.01 - Directory Traversal author: 0xAkoko severity: critical...

WP Cerber < 8.9.3 - Broken Access Control

WP Cerber 8.9.3 contains a bypass of /wp-json access control caused by improper handling of trailing '?' character, letting unauthorized users access protected REST API endpoints, exploit requires sending a request with a trailing '?'. id: CVE-2021-37598 info: name: WP Cerber 8.9.3 - Broken Acces...

WPS Hide Login <= 1.9.15.2 - Login Page Disclosure

The WPS Hide Login plugin for WordPress is vulnerable to Login Page Disclosure in all versions up to, and including, 1.9.15.2. This is due to a bypass that is created when the 'action=postpass' parameter is supplied. This makes it possible for attackers to easily discover any login page that may...

disclosure-check

Disclosure Check Disclosure Check is a tool for identifying vulnerability disclosure mechanisms for open source projects. Warning This project is still in development and may not work correctly for many different projects. If you encounter a bug, please open an issue and we'll try our best to...

Disclosures

Disclosures This repository contains my vulnerability reports which aren't under an NDA or restricted by VRP terms of service. Contents Fancy Product Designer Microsoft Xfinity...

CVE-2023-1767

Stored XSS snyk.io Discovery 19/03/23 CVE-2023-1767 Responsible Vulnerability Disclosure Report Vulnerability blog post coverage Exploit PoC...

CVE-2026-61568

creationtimestamp| type| source ---|---|--- 2026-09-15 22:35:03+00:00| published-proof-of-concept| https://github.com/zereight/gitlab-mcp/security/advisories/GHSA-vmp7-252j-cwp7 2026-09-16 07:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmlhqrvhm2t...

rtx-cve-2023-45779

This repository is provided AS IS to accompanya Meta Red Team X vulnerability disclosure. It is not an official Meta project and will not be supported like one. A set of scripts and artifacts that demonstrate detection and exploitation of Android devices that ship APEXes signed with test keys fro...

IIITA-IoT-Security-Research

IIIT Allahabad – IoT Security Research Internship Overview This repository showcases the work carried out during my Research Internship at the Indian Institute of Information Technology, Allahabad IIIT Allahabad under the Cryptography and Network Security CNS Lab. During this internship, I worked...