V

vulnerability

CVE-2018-7248 - Local and Domain user enumeration via unsecured ManageEngine ServiceDesk Plus API Endpoint

Apache 2.4.49; 2.4.50 - CVE-2021-41773; CVE-2021-42013, Path Traversal & Remote Code Execution via CGI

CVE-2022-26134 - Atlassian Confluence unauthenticated OGNL injection vulnerability (RCE).

Help security professionals and developers understand why Formidable was not vulnerable to CVE-2022-29622.

D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange.

For more information visit https://dheatattack.com

Powershell Empire in Docker

This project illustrates the use of metaeffekt Kontinuum within Gitlab.

This tool generates BIP-39 mnemonic phrases derived from Unix timestamps, exploring the 'Milk Sad' vulnerability's implications (CVE-2023-39910)

The purpose of this project is to improve pipeline performance when scanning for vulnerabilities in dependencies by providing a prebuilt Docker container for DependencyCheck where the vulnerability database is already downloaded

End-to-end security assessment of a production Rails app. Real-world vulnerability analysis and professional reporting.

🤠 A tool to search vulnerable devices or specific services on Shodan using Shodan dorks or custom query.

The purpose of this project is to improve pipeline performance when scanning for vulnerabilities in containers by providing a prebuilt Docker container where the vulnerability database is already downloaded

XSS is a simple shell tool developed to test Cross-Site Scripting (XSS) vulnerabilities on websites.