2965237 matches found
redai
RedAI A terminal workbench for AI-driven vulnerability discovery and live validation. Most "AI security" tools stop at flagging code that looks vulnerable. RedAI goes further: after scanner agents produce candidate findings, validator agents work inside a live environment — a running instance of...
CVE-2020-5902
This repository does not have a README...
log4j-scanner
log4j-scanner Check CVE-2021-44228 vulnerability This test is not 100% reliable, but it helps with a quick scan How tu use: wget https://raw.githubusercontent.com/codiobert/log4j-scanner/main/log4j-scanner.sh -q -O - |bash...
CVE-2023-1454
CVE-2023-1454 jeecg-boot unauthorized SQL Injection Vulnerability CVE-2023-1454 Vulnerability| jeecg-boot unauthorized SQL Injection Vulnerability CVE-2023-1454 ---|--- Chinese name| jeecg-boot 未授权SQL注入漏洞（CVE-2023-1454 CVSS core| 9.8 FOFA Query click to view the results directly| title=="JeecgBoo...
CVE-2024-3094-XZ-Utils-Check
JB-Network - check-xz.sh Utility to check if you have a vulnerable version according to CVE-2024-3094. Installation To use it, open your terminal and run: cd;mkdir git;git clone https://github.com/jbnetwork-git/linux-tools.git chmod +x /git/check-xz.sh How to run? cd /git ./check-xz.sh License. M...
Anthropic-Credited-CVEs
ANTHROPIC CVE TRACKER Overview Tracking vulnerabilities that credit the Anthropic research team and are possibly discovered by Project Glasswing. CURRENT CVE COUNT: 318 Fixed Anthropic Findings w/o CVE: 128 Findings Withdrawn by Anthropic: 243 Distributions | ---|--- Anthropic Research Tracking...
PrintNightmare-CVE-2021-1675
PrintNightmare-CVE-2021-1675 Youtube : https://youtu.be/Zr0KjYDSFKQ...
clusterfuzzlite
ClusterFuzzLite ClusterFuzzLite is a continuous fuzzing solution that runs as part of Continuous Integration CI workflows to find vulnerabilities faster than ever before. With just a few lines of code, GitHub users can integrate ClusterFuzzLite into their workflow and fuzz pull requests to catch...
CVE-2021-46080
CVE-2021-46080 Exploit Title: Vehicle Service Management System - 'Multiple' Cross-Site Request Forgery CSRF Leads to Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 MEDIUM References:...
CVE-2025-61638
CVE-2025-61638 node . "https://www.mediawiki.org/w/api.php" fixed More exploitable targets can be found at https://www.mediawiki.org/wiki/SitesusingMediaWiki. https://phabricator.wikimedia.org/T401099 https://vulners.com/cve/CVE-2025-61638 XSS attack requires editing entries, so at least xss !==...
zabbix-threat-control
Zabbix Threat Control ztc Turn the Zabbix you already run into a vulnerability-management console. ztc reads each host's software inventory through the stock zabbix-agent2 no extra agent to deploy, audits it against Vulners, and pushes scored, per-host findings — problems, dashboards and CVSS...
CVE-mitre
CVE-Mitre Common Vulnerability Exposure Download single CVE The variable is only for example ; you can make your own SVN script for downloading a single folder = CVE = BR @nu11secur1ty $CVE = CVE-2020-13935 svn checkout https://github.com/nu11secur1ty/CVE-mitre/trunk/$CVE Link table of Analysis...
ScannerCVE-2021-3156
ScannerCVE-2021-3156 Script to scan a list of hosts to check if they are vulnerable to CVE-2021-3156. If not vulnerable, the output is as follows: sudoedit: a terminal is required to read the password; either use the -S option to read from standard input or configure an askpass helper sudoedit: a...
CVE-2024-21182
Oracle WebLogic Server JNDI Vulnerability For educational purpose only...
CVE-2024-8698-POC
https://huydoppa.hashnode.dev/analyst-cve-2024-8698-keycloak-with-zero-knowledge-about-keycloak...
CVE-2022-22947-exp
CVE-2022-22947-exp Reproduced the CVE-2022-22947 vulnerability, wrote an exploit exp Later, based on an article by a senior, wrote an exp for memory horse injection, for reference only...
Apache-Druid-CVE-2021-25646
Apache-Druid-CVE-2021-25646 Youtube https://www.youtube.com/watch?v=-mdK5HSRiQU...
WhisperPair
WhisperPair: Testing Harness for Google Fast Pair A practical tool to test whether Google Fast Pair devices are vulnerable to pairing, account-binding, and protocol-level attacks. This repository provides the WhisperPair testing harness, a tool for evaluating the security of Google Fast Pair...
Log4J-Simulation-Tool
About The Project This is a specially crafted automated Vulnerability Scanner, Patch Management and Exploitation tool for CVE-2021-44228. This is a combination of Python, Java and Linux shell program which will make it easier for a Network Administrator, Endpoint Security Developers and...