543 matches found
@ballerine/workflows-service (>=0.4.6, <=0.5.49), @digitaltg/vc-signer (1.0.0) +9 more potentially affected by CVE-2025-54782 via @nestjs/devtools-integration (0.1.6)
@nestjs/devtools-integration NPM version 0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on @nestjs/devtools-integration and may be impacted: - @ballerine/workflows-service =0.4.6, =0.0.37, =0.0.4, =0.0.1, =0.0.6, =0.0.82, =0.0.32, =1.0.0, =1.0.9 -...
Lynis Auditing Tool 3.1.5
Lynis is an auditing tool for Unix specialists. It scans the system and available software to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes. This software aims in assisting automated...
awesome-termux-hacking
This is an awesome list of Termux hacking tools. It appears to be a collection of various tools and frameworks for penetration testing, vulnerability assessment, and exploitation. The list includes tools for tasks such as: Subdomain enumeration e.g., Sublist3r Vulnerability scanning e.g., w3af,...
hacking-material-books
This repository is an offensive tool for Metasploit and Nmap scripting. It contains a collection of articles and resource files for Metasploit RC/ERB scripting, Nmap NSE scripting, and bash programming. The repository includes examples of how to use Metasploit RC/ERB scripting to automate tasks,...
Exploit for Use After Free in Microsoft
微软3389远程漏洞CVE-2019-0708批量检测工具 0x001 Win下检测 https://github.com/robertdavidgraham/rdpscan C:\Users\K8team\Desktop\rdpscan-master\vs10\Release 的目录 2019/06/02 02:11 DIR . 2019/06/02 02:11 DIR .. 2019/06/02 01:55 2,582,016 libcrypto-11.dll 2019/06/02 01:57 619,520 libssl-11.dll 2019/06/02 02:04 172,03...
PT-2025-30961 · Undefined · Undefined
CVE-2023-2274 Rejected reason https://t.co/zVBsOBuaOr Don't wait vulnerability scanning results: https://t.co/oh1APvMMnd...
PT-2025-30940 · Tera Insights · Ticrypt
Name of the Vulnerable Software and Affected Versions: tiaudit versions prior to 2025-07-17 Description: tiaudit in Tera Insights tiCrypt allows unauthenticated REST API requests that reveal sensitive information about the underlying SQL queries and database structure. Recommendations: Update...
PT-2025-28977 · Undefined · Undefined
CVE-2024-10391 Rejected reason https://t.co/JRdHr8fGKh Don't wait vulnerability scanning results: https://t.co/oh1APvMMnd...
PT-2025-28054 · Undefined · Undefined
CVE-2025-0654 Rejected reason https://t.co/bkRtGoOT8j Don't wait vulnerability scanning results: https://t.co/oh1APvMMnd...
PT-2025-28058 · Undefined · Undefined
CVE-2025-1569 Rejected reason https://t.co/AikfnFLfa0 Don't wait vulnerability scanning results: https://t.co/oh1APvMMnd...
PT-2025-27839 · Undefined · Undefined
CVE-2025-45407 CVE-2025-45407 https://t.co/h665vWmWoy Don't wait vulnerability scanning results: https://t.co/oh1APvMMnd...
Nuclei 3.4.5
Nuclei is a modern, high-performance vulnerability scanner that leverages simple YAML-based templates. It empowers you to design custom vulnerability detection scenarios that mimic real-world conditions, leading to zero false positives...
LLM vs. SAST: a Technical Analysis on Detecting Coding Bugs of GPT4-Advanced Data Analysis
With the rapid advancements in Natural Language Processing NLP, large language models LLMs like GPT-4 have gained significant traction in diverse applications, including security vulnerability scanning. This paper investigates the efficacy of GPT-4 in identifying software vulnerabilities compared...
Penetration Testing for System Security: Methods and Practical Approaches
Penetration testing refers to the process of simulating hacker attacks to evaluate the security of information systems . This study aims not only to clarify the theoretical foundations of penetration testing but also to explain and demonstrate the complete testing process, including how network...
Citrix App layering 24.3 | Hidden RPC Services Vulnerabilities reported on ELM Appliance
Vulnerability scanning software may flag "Hidden RPC Services Vulnerability" on Citrix App layering ELM Appliance...
Pentesters: Is AI Coming for Your Role?
We've been hearing the same story for years: AI is coming for your job. In fact, in 2017, McKinsey printed a report, Jobs Lost, Jobs Gained: Workforce Transitions in a Time of Automation , predicting that by 2030, 375 million workers would need to find new jobs or risk being displaced by AI and...
Silk Typhoon targeting IT supply chain
Executive summary: Microsoft Threat Intelligence identified a shift in tactics by Silk Typhoon, a Chinese espionage group, now targeting common IT solutions like remote management tools and cloud applications to gain initial access. While they haven't been observed directly targeting Microsoft...
Linux Distros Unpatched Vulnerability : CVE-2024-35904
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux: avoid dereference of garbage after mount failure In case kernmount fails and returns an error pointer return in the error branch instead of continuing...
Linux Distros Unpatched Vulnerability : CVE-2017-2839
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable denial of service vulnerability exists within the handling of challenge packets in FreeRDP 2.0.0-beta1+android11. A specially crafted challenge...