An automated repo to track Nuclei template scanning capabilities against the CISA KEV.

Detection for CVE-2025-37164

Detection for CVE-2025-40602

README Profile

Detection for CVE-2025-61675, CVE-2025-61678 & CVE-2025-66039

Passive detection for CVE-2025-58360

Detection template for CVE-2025-8110

Personal Blog

A list of all of my starred repos, automated using Github Actions 🌟

Detection for CVE-2025-34299

Detection for CVE-2025-49113

Detection for CVE-2025-53072 + CVE-2025-62481

LiteSpeed Cache plugin for WordPress that could enable unauthenticated users to escalate their privileges

A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds t…

An unauthenticated privilege escalation problem tracked as CVE-2024-32444 (CVSS score: 9.8).

Cityworks deserialization of untrusted data vulnerability Detection

MitM attack allowing a malicious interloper to impersonate a legitimate server when a client attempts to connect to it

The OpenSSH client and server are vulnerable to a pre-authentication DoS attack between versions 9.5p1 to 9.9p1 (inclusive) that causes memory and CPU consumption

The Popup Builder WordPress plugin before 4.2.3 does not prevent simple visitors from updating existing popups, and injecting raw JavaScript in them, which could lead to Stored XSS attacks.

Zimbra Collaboration (ZCS) Arbitrary File Upload Vulnerability

An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes unescaped, causing arbitrary markup to be injected into the document.

Detection method for Exim vulnerability CVE-2024-39929

Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely …

Detection for CVE-2025-24016 - Deserialization of Untrusted Data Vulnerability in the Wazuh software

Detection for CVE-2024-57378

Detection for CVE-2025-47812