unauthscout

UnauthScout UnauthScout is a CLI tool for unauthenticated OSINT reconnaissance on public developer platforms such as GitHub and GitLab. It standardizes the collection of publicly available user data using a consistent interface and normalized JSON output contracts. Problem Statement Public...

CVE-2023-41652

CVE-2023-41652 RSVPMarker = 10.6.6 - Inyección SQL sin autenticación Descripción: El plugin RSVPMarker para WordPress es vulnerable a la inyección SQL a través del parámetro 'email' en versiones hasta, e incluyendo, la 10.6.6 debido a un escape insuficiente en el parámetro proporcionado por el...

libexif_Android10_r33_CVE-2016-6328

libexif ------- DESCRIPCIÓN libexif es una biblioteca para analizar, editar y guardar datos EXIF. Está diseñada para reemplazar muchas implementaciones redundantes en utilidades de línea de comandos y programas con interfaces gráficas. CARACTERÍSTICAS libexif admite el análisis, edición y guardad...

CVE-2023-1454-EXP

CVE-2023-1454-EXP CVE-2023-1454 jeecg-boot Vulnerabilidad de inyección SQL no autorizada JeecgBoot es una plataforma de desarrollo de bajo código basada en generadores de código. La plataforma Java de bajo código jeecg-boot v3.5.0 para aplicaciones web empresariales presenta la última...

CVE_2021_27850_POC

Uso de comandos git clone https://github.com/Ovi3/CVE202127850POC.git cd CVE202127850POC/ gradlew runnbaleJar java -jar ./build/libs/CVE202127850POC-1.0-SNAPSHOT.jar Usage: java TapestryExploit Tapestry Key DNS URL java TapestryExploit Tapestry Key CB2 Command 假设 hmac key为 change this immediately...

engeman-web-language-combobox-sqli

Engeman Web = 12.0.0.2 Password Recovery Page Load Unauthenticated SQL Injection Proof of concept for exploitation of the vulnerability described in CVE-2025-8220, which concerns the possibility of SQL Injection during the password recovery page load in the Engeman Web software. Description A...

CVE-2025-32013

CVE-2025-32013 Aviso de Seguridad y PoC para CVE-2025-32013 Cómo Usar 1. Comience aquí: Lea este archivo README para obtener una visión general de la estructura y el contenido del repositorio. 2. Aviso de Seguridad Interno: Abra 01SecurityAdvisory.md para ver el informe detallado que aborda la...

CVE-2023-22527-POC

CVE-2023-22527: Vulnerabilidad de Atlassian Confluence Introducción La vulnerabilidad CVE-2023-22527 es una falla de seguridad crítica en Atlassian Confluence, una plataforma de colaboración y documentación ampliamente utilizada. Esta vulnerabilidad existe tanto en Confluence Data Center como en...

CVE-2025-55182-Scanner

🛡️ Escáner CVE-2025-55182 React2Shell Desarrollado por:SainiON Hacks Una herramienta GUI independiente para detectar y demostrar la vulnerabilidad de Ejecución Remota de Código RCE en React Server Components CVE-2025-55182 en aplicaciones Next.js. 📺 Demostración y Tutorial Mira el desglose complet...

CVE-2026-42945

CVE-2026-42945 PoC Go Chino | English Herramienta auxiliar de detección y explotación para la implementación HTTP/2 de nginx CVE-2026-42945, utilizada para verificar si la vulnerabilidad existe en entornos autorizados , comparar los efectos de la corrección y reproducir el comportamiento del PoC ...

EUVD-2026-95032

A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free spa...

CVE-2026-107565 Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption

A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free spa...

CVE-2026-107565

A flaw in luksmeta allows a local attacker with administrative privileges to cause data corruption when saving metadata to a Linux Unified Key Setup (LUKS) device. The root cause is identified as incorrect boundary calculations and flawed overlap detection within the luks1 metadata allocator. Con...

CVE-2026-107565 Luksmeta: incomplete gap-boundary and overlap checks in luks1 metadata allocator allow data corruption

A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free spa...

CVE-2026-107565

A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free spa...

CVE-2026-107565

A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free spa...

CVE-2026-90460

A flaw was found in OpenStack Keystone. Tokens obtained via delegated authentication methods trusts, application credentials, OAuth1 access tokens can move a credential to an unauthorized project by supplying a new projectid in a PATCH /v3/credentials request, because only the pre-update project ...

CVE-2026-79993

A flaw was found in Apache ZooKeeper. The deleteContainer opcode is processed without verifying Access Control List ACL permissions. A remote, unauthenticated attacker with network access to the ZooKeeper client port can delete any empty persistent znode, including container and TTL nodes. This c...

CVE-2020-11019

CVE-2020-11019 In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOGTRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0. authentication| complexity|...

cve-2025-66478_rce_vulnerable

Blog Moderno con shadcn/ui Un blog moderno y elegante construido con Next.js 16, React 19, shadcn/ui y Tailwind CSS. IMPORTANTE: Proyecto de Next JS VULNERABLE creado solo para fines educativos, de pruebas y explotación, NO SE RECOMIENDA INSTALACIÓN EN PRODUCCION, SÓLO PARA ÁMBITO LOCAL O ENTORNO...