CVE-2026-71183

An authorization vulnerability in Apache DolphinScheduler allows authenticated users to obtain information about data sources they are not authorized to access through the /unauth-datasource and /authed-datasource endpoints. These endpoints fail to enforce the required data source access controls...

CVE-2026-71895

An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes configuration data intended for administrator-managed cluster configuration. The exposed kubeconfig data contains credentials that may allow users to authenticate directly to the...

CVE-2026-12260

SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques. Exploitation allows attacke...

exim-cve-2019-10149-data

Recopilación de Datos de CVE de Exim Recopilación de Datos Relacionada con las Vulnerabilidades de Exim CVE-2019-10149, CVE-2019-15846, CVE-2019-16928 Anuncio de CVE: https://vulners.com/cve/CVE-2019-10149 Detalles del Exploit: https://www.exploit-db.com/exploits/46974 Cronología del Problema:...

CVE-2025-66516-POC

⚠️ LEA EL DESCARGO DE RESPONSABILIDAD ANTES DE USAR ⚠️ Solo pruebas educativas/autorizadas | Licencia | Política de seguridad Acerca de este PoC Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2025-66516 , una vulnerabilidad de inyección de entidad externa XML XXE en...

xsssniper

XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use --threads=THREADS...

wa-tunnel

wa-tunnel - TCP Tunneling through Whatsapp This is a Baileys based piece of code that lets you tunnel TCP data through two Whatsapp accounts. This can be usable in different situations, for example network carriers that give unlimited whatsapp data or airplanes where you also get unlimited social...

ir-rescue

ir-rescue ir-rescue is composed of two sister scripts that collect a myriad of forensic data from 32-bit and 64-bit Windows systems ir-rescue-win and from Unix systems ir-rescue-nix. The scripts respect the order of volatility and artifacts that are changed with the execution e.g. , prefetch file...

php-encryption

php-encryption composer require defuse/php-encryption Esta es una librería para cifrar datos con una clave o contraseña en PHP. Requiere PHP 5.6 o superior y OpenSSL 1.0.1 o superior. Recomendamos usar una versión de PHP que aún tenga soporte de seguridad, lo que al momento de escribir esto...

buster

Descripción Buster es una herramienta OSINT avanzada utilizada para: Obtener cuentas sociales de un correo electrónico usando múltiples fuentes gravatar, about.me, myspace, skype, github, linkedin, brechas anteriores Obtener enlaces a donde se encontró el correo usando google, twitter, darksearch...

CVE-2025-51867

CVE-2025-51867 Descripción de la vulnerabilidad Deepfiction AI es una empresa de entretenimiento con inteligencia artificial cuya misión es revolucionar la narración de historias personalizadas. Deepfiction AI ofrece una aplicación web para crear historias mediante chats con un LLM, que es...

D4TA-HUNTER

Video Demo: https://darkhacking.es/d4ta-hunter-framework-osint-para-kali-linux Mi sitio web: https://microjoan.com Mi blog: https://darkhacking.es/ Cómprame un café: https://www.buymeacoffee.com/microjoan AVISO LEGAL Este toolkit contiene materiales que pueden ser potencialmente dañinos o...

MalPipe

MalPipe //\ | | / / \ / | |/ // | ' \ / \ / //\ \ | | / /| | | | / / /,|/ || ./ | || MalPipe is a modular malware and indicator collection and processing framework. It is designed to pull malware, domains, URLs and IP addresses from multiple feeds, enrich the collected data and export the...

CVE-2024-1071-PoC-Script

CVE-2024-1071 Script de Explotación 🚀 🌟 Aviso Legal Esta Prueba de Concepto POC está realizada únicamente con fines educativos y de pruebas éticas. El uso de esta herramienta para atacar objetivos sin consentimiento mutuo previo es ilegal. Es responsabilidad del usuario final cumplir con todas la...

CVE-2026-71183

An authorization vulnerability in Apache DolphinScheduler (versions before 3.4.3 ) allows authenticated users to access data sources they are not authorized to view. The /unauth-datasource and /authed-datasource endpoints fail to enforce proper access controls, potentially leaking sensitive conne...

CVE-2026-71183 Apache DolphinScheduler: Missing Authorization Checks Allow Disclosure of Data Source Information and Passwords

An authorization vulnerability in Apache DolphinScheduler allows authenticated users to obtain information about data sources they are not authorized to access through the /unauth-datasource and /authed-datasource endpoints. These endpoints fail to enforce the required data source access controls...

EUVD-2026-94808

An authorization vulnerability in Apache DolphinScheduler allows authenticated users to obtain information about data sources they are not authorized to access through the /unauth-datasource and /authed-datasource endpoints. These endpoints fail to enforce the required data source access controls...

Exploit for CVE-2026-21589

CVE-2026-21589 — Atlassian pre-auth arbitrary file read Pytho...

kernel: ipv6: fix use-after-free in ip6_finish_output2()

A flaw was found in the Linux kernel's IPv6 networking stack. A use-after-free vulnerability exists in the ip6finishoutput2 function, where a cached pointer to the IPv6 destination address can become stale after memory reallocation. An attacker could potentially exploit this to leak sensitive...

kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()

A flaw was found in the Linux kernel's IPv6 Routing Protocol for Low-Power and Lossy Networks RPL segment routing header SRH decompression function, ipv6rplsrhdecompress. An integer overflow occurs when processing a specially crafted IPv6 packet, causing the header length calculation to truncate...