iptables-essentials

Iptables Essentials: Reglas y comandos comunes de firewall ☑️ POR HACER Añadir ejemplos útiles de configuración de Iptables Añadir configuración útil de Kernel Settings sysctl Añadir enlaces a recursos externos útiles Añadir ejemplos de configuración avanzada, comandos, reglas Tabla de Contenidos...

CVE-2022-33891

CVE-2022-33891 PoC PoC for CVE-2022-33891, with ability to set custom payloads. Not vulnerable by default -- spark.acls.enable need to be TRUE. Intended Use Usage of this script is limited to personnel who are authorised to run the payload on the target hosts for vulnerability patching purposes...

EUVD-2026-97014

Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /configdump endpoint to read configured LLM provider API...

rayder

Rayder Una herramienta ligera para orquestar y organizar tus flujos de trabajo en línea de comandos Acerca de • Instalación • Uso • Configuración del flujo de trabajo • Ejecución paralela • Flujos de trabajo Acerca de Rayder es una herramienta de línea de comandos diseñada para simplificar la...

CVE-2012-1823

PHP CGI Argument Injection CVE-2012-1823 Description sapi/cgi/cgimain.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script aka php-cgi, does not properly handle query strings that lack an = equals sign character, which allows remote attackers to execute arbitrary code by...

EUVD-2026-96925

LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthenticated FastAPI server to 0.0.0.0 on port 14345, while the lf CLI silently discards HOST overrides. Network-adjacent attackers can call the project and dataset management API to read stored provider API key...

netscaler-ctx697096-checker

NetScaler checker for CTX697096, CTX697174 and CTX697191 Read-only precondition and exposure checker for the Citrix NetScaler ADC / NetScaler Gateway security bulletin CTX697096 , covering CVE-2026-88771 through CVE-2026-88778 , and for CTX697174 , covering CVE-2026-88779 the SAML crash attack, a...

SXDork

SXDork v1.0 SXDork is a powerful tool that utilizes the technique of google dorking to search for specific information on the internet. Google dorking is a method of using advanced search operators and keywords to uncover sensitive information that is publicly available on the internet. SXDork...

CVE-2023-33246

CVE-2023-33246 - RocketMQ Remote Code Execution CVE-2023-33246 - Apache RocketMQ config Remote Code Execution Exploit Overview RocketMQ is a distributed messaging and streaming platform. RocketMQ versions 5.1.0 and below are vulnerable to Arbitrary Code Injection. Broker component of RocketMQ is...

IngressNightmare-RCE-POC

⚠️ Critical RCE in Ingress-NGINX via Configuration Injection CVE-2025-1974 and more This repository contains a proof-of-concept PoC exploit for CVE-2025-1974 , a Critical CVSS 9.8 vulnerability in the Ingress-NGINX controller for Kubernetes. This flaw allows unauthenticated remote code execution...

CVE-2018-18441-exploit

CVE-2018-18441-exploit Las cámaras Wi-Fi de la serie DCS de D-Link exponen información sensible sobre la configuración del dispositivo. Los dispositivos afectados incluyen muchas de la serie DCS, como: DCS-936L, DCS-942L, DCS-8000LH, DCS-942LB1, DCS-5222L, DCS-825L, DCS-2630L, DCS-820L, DCS-855L,...

airflowscan

airflowscan Lista de verificación y herramientas para aumentar la seguridad de Apache Airflow. AVISO Este proyecto NO ESTÁ AFILIADO con la Apache Foundation ni con el proyecto Airflow, y no cuenta con su respaldo. Contenido El propósito de este proyecto es proporcionar herramientas para aumentar ...

CVE-2019-3799

CVE-2019-3799 - Spring-Cloud-Config-Server Directory Traversal Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the...

mole

Mole Un framework para identificar y explotar vulnerabilidades fuera de banda OOB. Instalación y Configuración Instalación de Mole Python = 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive Establec...

CVE-2023-29007_win-version

CVE-2023-29007win-version original PoC https://github.com/ethiack/CVE-2023-29007 PoC repository for CVE-2023-29007 More information available at: https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007...

HoneySAP

HoneySAP: SAP Low-interaction honeypot Version 0.2.0 Overview HoneySAP is a low-interaction research-focused honeypot specific for SAP services. It's aimed at learn the techniques and motivations behind attacks against SAP systems. Features low-interaction honeypot for SAP services YAML and...

CVE-2026-87761

The Adwised Web Push Notification WordPress plugin through 2.5.7 does not perform any capability or nonce check before allowing an authenticated user to overwrite its site-wide configuration, and does not escape those configuration values before printing them inside an inline script block on ever...

truegaze

truegaze Una herramienta de análisis estático para aplicaciones Android e iOS que se centra en problemas de seguridad fuera del código fuente, como cadenas de recursos, bibliotecas de terceros y archivos de configuración. Requisitos Se requiere Python 3 y todos los módulos necesarios se encuentra...

EUVD-2026-96770

The Adwised Web Push Notification WordPress plugin through 2.5.7 does not perform any capability or nonce check before allowing an authenticated user to overwrite its site-wide configuration, and does not escape those configuration values before printing them inside an inline script block on ever...

CVE-2026-86798

The HootBoard WordPress plugin, versions through 3.1.4 , is vulnerable to unauthenticated stored XSS . The flaw exists because the plugin fails to perform authorization checks on certain REST endpoints and does not properly escape values stored via these endpoints before displaying them on public...