OSINT tool to get information from a Github and Gitlab profile and find user's email addresses leaked on commits. - GONZOsint/gitrecon

Mybb associate CVE-2021-27890 & CVE-2021-27889 to RCE poc - GitHub - xiaopan233/Mybb-XSS_SQL_RCE-POC: Mybb associate CVE-2021-27890 & CVE-2021-27889 to RCE poc

HackerOne report #962604 by muthu_prakash on 2020-08-19, assigned to @kaunghtet:

On December 22, 2020, our Threat Intelligence team responsibly disclosed a vulnerability in Facebook for WordPress, formerly known as Official Facebook Pixel, a WordPress plugin installed on over 500,000 sites. This flaw made it possible for unauthenticated…

近期，奇安信威胁情报中心在日常的样本运营中，捕获了多例实战攻防演习样本。样本主要以“薪酬调整”、“局处级干部进修”等话题为诱饵。部分样本仅有红雨滴高对抗沙箱能够触发完整的行为，甚至号称业界最强的anyrun沙箱也无能为力。

CVE-2021-3449 OpenSSL denial-of-service exploit 👨🏻‍💻 - riptl/cve-2021-3449

Collection of useful features in Burp Suite Application

🐱‍💻 👍 Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski | Total Bug Bounty Reward: $5.000 | CVE-2021-21123 and 5 more... - Puliczek/CVE-2021-21123-PoC-Google-Ch...

Product: McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 Type: OWASP Top Ten 2013 Category A10 - Unvalidated Redirects and Forwards Summary: Unvali...

Several months ago I submitted what appeared to be a security flaw to CloudFalre’s bugbounty program. According to them, this is not a…

Master FFUF for web fuzzing: brute-force directories, optimize wordlists, and compare performance with other tools.

Contribute to smriti548/CVE development by creating an account on GitHub.

AfterLogic Products Vulnerabilities. Contribute to E3SEC/AfterLogic development by creating an account on GitHub.

AfterLogic Products Vulnerabilities. Contribute to E3SEC/AfterLogic development by creating an account on GitHub.

网络空间测绘/搜索引擎相关的资料. Contribute to EXHades/CyberSpaceSearchEngine-Research development by creating an account on GitHub.

The following research outlines a vulnerability discovered in netmask npm package that is currently used by 278,722+ other projects. The vulnerability has been present for 9 years. Since this package is so incredibly widespread, I would suggest every nodejs…

In the latest software supply chain attack, the official PHP Git repository was hacked and tampered with. Yesterday, two malicious commits were pushed to the php-src Git repository maintained by the PHP team on their git.php.net server. The threat actors…

WordPress Plugin WP Super Cache 1.7.1 - Remote Code Execution (Authenticated).. webapps exploit for PHP platform