SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

burp_global_match_replace

Global Match & Replace GMR Extensión de Burp Suite Global Match & Replace GMR amplía Burp Suite con reglas de coincidencia/reemplazo que se aplican globalmente o en múltiples herramientas de tu elección Repeater, Intruder, Proxy, etc.. Proporciona diferencias diffs por solicitud y respuesta para...

fhex

Fhex - 功能齐全的十六进制编辑器 本项目旨在开发一个轻量级但实用的工具。原因在于现有十六进制编辑器存在一些不同的限制（例如，依赖过多、缺少十六进制着色功能等）。 本项目基于 qhexedit2 、capstone 和 keystone 引擎。未来可能会增加新功能，欢迎提交 PR。 功能 块加载器 - 用于仅加载大文件的一部分，避免耗尽内存（使用 alt + 左/右箭头在块间移动）。请注意，在块模式下，所有操作（例如搜索）仅应用于当前块，但文件保存除外（整个文件被保存）。然而，每次编辑一个块后，在移动到另一个块之前请先保存，否则更改将丢失。 搜索与替换（支持...

fhex

Fhex - A Full-Featured HexEditor This project is born with the aim to develop a lightweight, but useful tool. The reason is that the existing hex editors have some different limitations e.g. too many dependencies, missing hex coloring features, etc.. This project is based on qhexedit2 , capstone...

vulnerable-bsr-lab-CVE-2023-6933

Laboratorio de Vulnerabilidad CVE-2023-6933 Resumen Este entorno de laboratorio demuestra CVE-2023-6933, una vulnerabilidad crítica de Inyección de Objetos PHP en el plugin Better Search Replace de WordPress versiones ≤1.4.4. Detalles de la Vulnerabilidad ID CVE : CVE-2023-6933 Puntuación CVSS :...

Better Search Replace < 1.4.5 - PHP Object Injection

The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. I...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

bambdas

Scripts Bambda Bienvenido al repositorio oficial de scripts Bambda de PortSwigger. Este repositorio contiene una colección de scripts desarrollados por PortSwigger y por la comunidad, con 🧡 📑 En esta página Tipos de scripts Bambda Contenido del repositorio Importación de scripts en Burp...

CVE-2023-6933

Introducción a la vulnerabilidad CVE-2023-6933 Descripción El plugin "Better Search Replace" para WordPress presenta una vulnerabilidad crítica conocida como Inyección de Objetos PHP PHP Object Injection. Esta falla de seguridad está presente en todas las versiones hasta la 1.4.4 inclusive. Surge...

CVE-2026-15253

CVE-2026-15253 Easy Media Replace = 0.2.0 - Cross-Site Scripting Almacenado Autenticado Author+ Descripción El plugin Easy Media Replace es vulnerable a Cross-Site Scripting Almacenado XSS a través del título del archivo adjunto multimedia. Cuando un Author renombra un archivo multimedia utilizan...

study-turbolinks-link

Uso de JavaScript https://github.com/turbolinks/turbolinksapi-reference Turbolinks.visit'/home/two' // default is advance. Turbolinks.visit'/home/two', action: 'advance' Turbolinks.visit'/home/two', action: 'replace'...

GO-2026-6588 podman quadlet install --replace does not fully replace the old file in github.com/containers/podman

podman quadlet install --replace does not fully replace the old file in github.com/containers/podman...

Rocky Linux 9 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-crypto-debuginfo / etc (crlsa-2026_69540)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202669540 advisory. rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace function CVE-2026-78002 Tenable has extracted the preceding description block...

Rocky Linux 10.2 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-crypto-debuginfo / etc (crlsa-2026_69541)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202669541 advisory. rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace function CVE-2026-78002 Tenable has extracted the preceding description blo...

AlmaLinux 9.2 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ALMALINUX9.2:CLSA-2026:1790809774)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1790809774 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by...

AlmaLinux 9.6 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ALMALINUX9.6:CLSA-2026:1790795134)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790795134 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by...

Rocky Linux 9.6 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (ALMALINUX9.6:CLSA-2026:1790795134)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790795134 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function b...

RLSA-2026:69540 Important: rsyslog security update

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fixes: rsyslog: rsyslog: Denial of service via heap buffer overflow in...

rsyslog security update

An update is available for rsyslog. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It...

RockyLinux 9 : rsyslog (RLSA-2026:69540)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:69540 advisory. rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace function CVE-2026-78002 Tenable has extracted the preceding description bloc...