CVE-2021-21978

CVE-2021-21978 CVE-2021-21978 RCE exp Versiones afectadas VMware View Planner Harness 4.X Al igual que CVE-2021-21978, esta vulnerabilidad permite subir archivos arbitrarios sin acceso autorizado y lograr la ejecución remota de código modificando el script py incluido. Es importante señalar que l...

SPIP BigUp Plugin - Remote Code Execution

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request. id: CVE-2024-8517 info: name: SPIP BigUp Plugin - Remote Code Execution...

NSEC3-X

DESCARGO DE RESPONSABILIDAD: Este proyecto fue generado por Inteligencia Artificial IA pero ha pasado por un riguroso proceso "Human-in-the-Loop" HITL. Esto significa que el código ha sido revisado y refactorizado por un ingeniero de software humano, el diseño arquitectónico fue dirigido por...

Fedora 46 : golang-x-mod (2026-f84c399b38)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f84c399b38 advisory. Automatic update for golang-x-mod-0.41.0-1.fc46. Changelog Fri Sep 25 2026 Packit - 0.41.0-1 - Update to 0.41.0 upstream release - Resolves: rhbz2486558 -...

Linux Distros Unpatched Vulnerability : CVE-2026-67413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.23, 4.1.14, 4.2.9, and 4.3.3, the optional rabbitmqjmstopicexchange plugin's x-jms-topic...

GSSC-CVE-2022-41923

Workaround for CVE-2022-41923: Privilege Management Vulnerability Summary The vulnerability CVE-2022-41923 found in the unpatched Grails Spring Security Core GSSC plugin can result in improper privilege management. This repository describes how to work around the issue. If you are using an...

CVE-2025-59342

CVE-2025-59342 - Path Traversal esm-dev Autor: Byte Reaper Descripción CVE-2025-59342 es una vulnerabilidad de path traversal en esm.sh, una red de entrega de contenido CDN nobuild para el desarrollo web moderno, en la versión 136 y anteriores. El problema existe en el manejo de la cabecera HTTP...

CVE-2023-25610

CVE-2023-25610 Desbordamiento inferior de heap en la interfaz de administración de FortiOS que conduce a la ejecución remota de código. Alcance y limitaciones 1. Fortinet 6.x 2. Basado en TLSv1.3, pueden existir diferencias en otras versiones de TLS. Uso python3 cve-2022-42475.py rhost rport lhos...

blackboxprotobuf

Blackbox Protobuf Blackbox Protobuf now has an official package on PyPi under the namebbpb. The blackboxprotobuf package is an older fork Description Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers protobuf without the matching protobuf definition. Protobuf is a bina...

org.bouncycastle/bc-java: Bouncy Castle for Java: Denial of Service via quadratic-time escaping of X.500 distinguished names

A flaw was found in Bouncy Castle for Java. A remote, unauthenticated attacker could exploit a quadratic-time escaping vulnerability when stringifying X.500 distinguished names. This could lead to a Denial of Service DoS due to excessive resource consumption...

ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass

Impact Type: Improper authorization leading to unauthorized movement of user funds. The x/bonds module moved funds from an address that was resolved from a DID verification method, without verifying that the resolved address belonged to the transaction signer. Affected handlers included...

CVE-2018-20062

CVE-2018-20062 ThinkPHP 5.0.23 - CVE-2018-20062 Impact Verification Affected Versions ThinkPHP 5.0.x 5.0.23 invokefunction deserialization Verification Methodology Standard impact assessment for this CVE follows a two-phase approach: 1. Existence check — confirm the invokefunction route is...

CVE-2026-72815-poc

CVE-2026-72815: go-chi/chi middleware.RealIP IP Spoofing PoC 日本語版 Overview This repository contains a local Proof of Concept PoC for CVE-2026-72815 GHSA-3fxj-6jh8-hvhx, an IP spoofing vulnerability in go-chi/chi's middleware.RealIP. The vulnerable middleware blindly trusts the first leftmost valu...

cuckoo

.. image:: https://cuckoosandbox.org/assets/images/cuckoo-black.png :alt: Cuckoo Sandbox :target: https://cuckoosandbox.org/ PLEASE NOTE: Cuckoo Sandbox 2.x is currently unmaintained. Any open issues or pull requests will most likely not be processed, as a current full rewrite of Cuckoo is...

SDK

Intelligence X Public SDK The software development kit SDK allows anyone to use the Intelligence X search engine. It is free to use and Intelligence X welcomes any integrations into 3rd party tools and services. Intelligence X is a search engine and data archive. For additional details please vis...

burpFakeIP

burpFakeIP 下载使用：Releases 2021/09/24 1. 修复M00nBack反馈的一个bug。 2. 添加了AutoXFF的开关,并将AutoXFF默认设置不开启,如需让插件给每个请求头添加一个随机的XFF请求头可在右键菜单中选择ON开启 2021/05/21 使用Java重构，增加了issue中提到的功能特性，新增给每个请求自动添加XFF头以及随机IP的功能，具体可见右键菜单AutoXFF,默认情况下自动添加的xff头为X-Forwarded-For,值为生成的随机IP,均可自定义。 2020/04/25 优化代码，新增9种请求头。 四个小功能 伪造指定ip...

libtaxii

libtaxii Una librería de Python para manejar mensajes Trusted Automated eXchange of Indicator Information TAXII™ v1.x e invocar Servicios TAXII. :Fuente: https://github.com/TAXIIProject/libtaxii/ :Documentación: https://libtaxii.readthedocs.io/ :Información: https://taxiiproject.github.io/...

CVE-2026-93543

A flaw was found in libXi. An out-of-bounds read vulnerability in the X Input 2 XI2 class parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications. When an application receives and processes specially crafted input from the server, insufficient...

CVE-2026-61604

The ixo Blockchain is a Layer 1 blockchain that runs on both Testnet and Mainnet. Prior to version 8.0.0, the x/bonds module moved funds from an address that was resolved from a DID verification method, without verifying that the resolved address belonged to the transaction signer. Affected...

CVE-2026-93545

A flaw was found in libXi. An out-of-bounds read vulnerability in the XListInputDevices function allows a malicious X server to crash connected client applications. By returning specially crafted input device data when a client requests device information, the server can trigger an application...