Vikunja: Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API

Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API Summary The always-registered Planka migration lets any ordinary user select a Planka server. Although Vikunja caps each JSON response, pagination loop, and attachment independently, it has no...

GHSA-WQ92-8X3R-FM38 Vikunja: Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API

Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API Summary The always-registered Planka migration lets any ordinary user select a Planka server. Although Vikunja caps each JSON response, pagination loop, and attachment independently, it has no...

GHSA-PQF9-H8G4-8GMH Vikunja: Unbounded CSV row cardinality permits API process termination

Unbounded CSV row cardinality permits API process termination Summary The authenticated v2 CSV migration route caps upload bytes but not parsed row cardinality. It reads every record into a string and then materializes a full task object for every row before insertion. Two million one-cell rows f...

Vikunja: Unbounded CSV row cardinality permits API process termination

Unbounded CSV row cardinality permits API process termination Summary The authenticated v2 CSV migration route caps upload bytes but not parsed row cardinality. It reads every record into a string and then materializes a full task object for every row before insertion. Two million one-cell rows f...

GHSA-XXC3-XPMC-VMVR Vikunja: Unbounded nested task-filter recursion permits API process termination

Unbounded nested task-filter recursion permits API process termination Summary Authenticated task-list routes accept a filter expression without a length or nesting-depth bound, preprocess it, parse it recursively through fexpr, and recursively convert the resulting expression tree. A syntactical...

Vikunja: Unbounded nested task-filter recursion permits API process termination

Unbounded nested task-filter recursion permits API process termination Summary Authenticated task-list routes accept a filter expression without a length or nesting-depth bound, preprocess it, parse it recursively through fexpr, and recursively convert the resulting expression tree. A syntactical...

react2shellpoc

这个仓库包含一个概念验证，演示了特定类别的 React Server Component 漏洞如何在 受控的、合法的培训环境 中运行。 手册 ┌──kali㉿kali-/Documents/tools/2025-55182 └─$ python exploit.py -h /\ /\ /\ /\ /\ /\ || CVE-2025-55182 React Server Components RCE usage: exploit.py -h -t URL -c CMD options: -h, --help show this help message and exit -t,...

GHSA-V3P6-34MC-HJ7V Vikunja: Scoped API token can mint unrestricted OAuth session credentials

Summary A scoped API token can bypass its declared permissions by using the OAuth authorization flow to mint normal session credentials. A token limited to: json "oauth":"authorize" can call /api/v1/oauth/authorize, receive an OAuth authorization code, exchange it at /api/v1/oauth/token, and obta...

Vikunja: Scoped API token can mint unrestricted OAuth session credentials

Summary A scoped API token can bypass its declared permissions by using the OAuth authorization flow to mint normal session credentials. A token limited to: json "oauth":"authorize" can call /api/v1/oauth/authorize, receive an OAuth authorization code, exchange it at /api/v1/oauth/token, and obta...

sliver-gui

Sliver GUI 面向 Sliver C2 框架的桌面操作员控制台，风格与 Cobalt Strike 和 Havoc 一脉相承。由 Raj Kumar Mullapudi 设计并开发 Sliver GUI 是一个基于 Wails v2（Go + 纯 HTML/CSS/JS）的轻量前端，运行在 Sliver 现有的 rpcpb.SliverRPC gRPC 服务之上。它不 重新实现任何 C2 逻辑，并使用与官方 sliver-client 相同的 mTLS 操作员 .cfg 文件进行连接——所有命令与控制能力均来自 Sliver 本身。由于后端是 Go，它直接导入 Sliver 真实...

owasp-istg

OWASP IoT Security Testing Guide The OWASP IoT Security Testing Guide provides a comprehensive methodology for penetration tests in the IoT field offering flexibility to adapt innovations and developments on the IoT market while still ensuring comparability of test results. The guide provides an...

skill-scanner

Skill Scanner A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. It combines pattern-based detection YAML + YARA-X, AST and dataflow analysis , an optional LLM-as-a-judge , and a bounded CEL decision layer over typed...

skill-scanner

Skill Scanner A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. It combines pattern-based detection YAML + YARA-X, AST and dataflow analysis , an optional LLM-as-a-judge , and a bounded CEL decision layer over typed...

ida-pro-mcp

IDA Pro MCP !IMPORTANT I recommend using theOfficial Hex-Rays IDA MCP Server instead! See the announcement blog post for more information. Simple MCP Server to allow vibe reversing in IDA Pro. https://github.com/user-attachments/assets/6ebeaa92-a9db-43fa-b756-eececce2aca0 The binaries and prompt...

wordpress-cve-scanner

WordPress CVE Scanner Scan your WordPress core, themes and plugins for known CVEs from the command line. Open source, auditable, privacy-first — powered by the ValtersIT CVE API. Part of the ValtersIT platform — CVE & Threat-IP data you can query or run yourself. Explore both API and scanners:...

CVE-2025-55182

RSC Detector - React Server Components 漏洞扫描器 一个基于 Python 的安全扫描器，用于检测和利用 Next.js 应用中的 React Server Components RSC 漏洞。该工具支持被动检测、主动指纹识别和 RCE 漏洞利用测试。 ⚠️ 警告 ：本工具仅用于授权的安全测试 。未经授权访问计算机系统是非法的。在进行测试前，请务必获得书面许可。 功能特性 ✅ 被动检测 - 分析 HTML、响应头和页面结构中的 RSC 指标 ✅ 主动指纹识别 - 发送 RSC 特定头部以检测服务器响应 ✅ HTTP 头部分析 - 识别...

WebKit-UAF-ANGLE-OOB-Analysis

WebKit-UAF-ANGLE-OOB-Analysis CVE-2025-43529, CVE-2025-14174 Notas y material de PoC para una cadena WebKit/ANGLE en iOS 26.1. Esto no es un exploit completo; separa las primitivas verificadas de las piezas que aún fallan. Autor: zeroxjf Basado en: exploit de jir4vv1t para CVE-2025-43529 Estado:...

trivy-operator

Kubernetes-native security toolkit. Documentation Introduction The Trivy Operator leverages Trivy to continuously scan your Kubernetes cluster for security issues. The scans are summarised in security reports as Kubernetes Custom Resource Definitions, which become accessible through the Kubernete...

ecs-templates

概述 本仓库包含将 Corelight 或 Zeek 日志转换为 Elastic Common Schema（ECS）命名标准并将其存储到 Elastic Stack 部署中所需的一切。该仓库最初于 2019 年发布，与 Elastic Common Schema 同年，至今仍在积极维护和更新。 它支持超过 200 种不同的日志和指标，旨在支持所有环境，同时能够自定义所需和期望的选项以适配每个独特的环境。 我们投入了大量精力来确保对所有环境的支持，同时允许自定义必要和期望的选项，以适应每个独特且各自的部署。 该仓库主要由两部分组成： 1. Elasticsearch...

SecGen

apt 目次 1. 説明 - モジュールの機能とその有益性 2. セットアップ - apt導入の基本 aptが影響を与えるもの aptの使用を開始する 3. 使用 - 設定オプションと追加機能 GPGキーの追加 バックポートの優先度を上げる パッケージリストの更新 特定のリリースのピン止め PPA Personal Package Archiveレポジトリの追加 HieraからのAptの構成 デフォルトのsources.listファイルの置き換え 4. 参考 - モジュールの機能と動作について 5. 制約 - OS互換性など 6. 開発 - モジュール貢献についてのガイド モジュールの概...