383606 matches found
CVE-2026-107914
Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when delivering a compressed archive. This vulnerability is mitigated by the fact that an export must have been previously requested by someone with the "Synchronize, import, and export...
CVE-2026-107889
A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security filter responsible for cleaning user input can be bypassed, allowing a realm administrator to store malicious scripts in display fields. This could result in unauthorized JavaScript executio...
CVE-2026-107889
A stored Cross-Site Scripting (XSS) vulnerability exists in the login theme rendering component of Keycloak . The flaw arises because the security filter intended to sanitize user input can be bypassed, enabling a realm administrator to inject malicious scripts into display fields. If exploited, ...
EUVD-2026-95478
A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security filter responsible for cleaning user input can be bypassed, allowing a realm administrator to store malicious scripts in display fields. This could result in unauthorized JavaScript executio...
CVE-2026-107889
A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security filter responsible for cleaning user input can be bypassed, allowing a realm administrator to store malicious scripts in display fields. This could result in unauthorized JavaScript executio...
CVE-2026-107889 Keycloak-services: keycloak-services: stored xss on login page via kcsanitize bypass
A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security filter responsible for cleaning user input can be bypassed, allowing a realm administrator to store malicious scripts in display fields. This could result in unauthorized JavaScript executio...
CVE-2026-107889
A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security filter responsible for cleaning user input can be bypassed, allowing a realm administrator to store malicious scripts in display fields. This could result in unauthorized JavaScript executio...
twint
TWINT - Herramienta de Inteligencia de Twitter Sin autenticación. Sin API. Sin límites. Twint es una herramienta avanzada de scraping de Twitter escrita en Python que permite extraer Tweets de perfiles de Twitter sin usar la API de Twitter. Twint utiliza los operadores de búsqueda de Twitter para...
blind-sql-bitshifting
Inyección SQL Ciega mediante Desplazamiento de Bits Este es un módulo que realiza inyección SQL ciega utilizando el método de desplazamiento de bits para calcular caracteres en lugar de adivinarlos. Requiere 7/8 solicitudes por carácter, dependiendo de la configuración. Uso import...
gps-sdr-sim
GPS-SDR-SIM GPS-SDR-SIM genera flujos de datos de señal de banda base GPS, que pueden convertirse a RF utilizando plataformas de radio definida por software SDR, como ADALM-Pluto, bladeRF, HackRF, y USRP. Instrucciones de compilación en Windows 1. Inicie Visual Studio. 2. Cree un proyecto vacío...
Maryam
OWASP Maryam OWASP Maryam es un marco de trabajo modular de código abierto basado en OSINT y recopilación de datos. Está diseñado para proporcionar un entorno robusto para recolectar datos de fuentes abiertas y motores de búsqueda de forma rápida y exhaustiva. Instalación Sistemas operativos...
instaloctrack
instaloctrack TL;DR : ascineema, video del proyecto Una herramienta para extraer ubicaciones georreferenciadas de perfiles de Instagram. Salida en JSON y mapa interactivo. requisitos sudo apt install chromium-chromedriver && chmod a+x /usr/bin/chromedriver 🛠️ instalación git clone...
probable_subdomains
Probables subdominios Herramienta en línea: https://weakpass.com/generate/domains Resumen Durante los bug bounties, pruebas de penetración, ejercicios de red team y otras grandes actividades, siempre hay un momento en el que necesitas ejecutar amass, subfinder, sublister, o cualquier otra...
CLEANSTART-2026-BD59133 Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's
Security vulnerability affects the apache2 package. Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's...
CLEANSTART-2026-VK65361 Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service
Security vulnerability affects the apache2 package. Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service...
EUVD-2026-95325
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...
EUVD-2026-95327
IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map...
EUVD-2026-95326
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow...