ica2tcp

Acerca de Ica2Tcp Ica2Tcp es una herramienta desarrollada en C que permite actuar como proxy de cualquier conexión TCP dentro de una conexión Citrix ICA. Es para Citrix lo que ssh -D es para SSH. Puede encontrar información adicional aquí: https://www.sstic.org/2022/presentation/ica2tcp/ Descargo...

wanderer

Wanderer Wanderer is an open-source program that collects information about running processes. This information includes the integrity level, the presence of the AMSI as a loaded module, whether it is running as 64-bit or 32-bit as well as the privilege level of the current process. This...

n00bRAT

n00bRAT v0.7 Es un pequeño programa en C que emula un servidor HTTP mínimo para la identificación de escáneres de seguridad. Permite controlar la máquina a través de este protocolo HTTPv0.1 falso. Este servidor n00b fue creado como RAT durante la universidad para el curso de Hacking Ético. Qué es...

CVE-2023-30459

CVE-2023-30459 SmartPTT SCADA 1.1.0.0 permite la ejecución remota de código cuando el atacante tiene privilegios de administrador escribiendo un script malicioso en C y ejecutándolo en el servidor a través de la configuración del servidor en el panel de control del administrador en el puerto 8101...

metasploit-javapayload

This repository has been merged into metasploit-payloads Please note that this repository has been merged into a unified repository for meterpreters: https://github.com/rapid7/metasploit-payloads The history has been preserved, along with prehistory from metasploit-framwork:...

GoAT

GoAT Golang Advanced Trojan es un troyano creado en Go, que utiliza Twitter como servidor C&C. GoAT tiene capacidades muy únicas e impresionantes, incluyendo ejecución de comandos multihilo y un sofisticado módulo rootkit de autodefensa escrito en C. Si no estás familiarizado con el malware, por...

class-dump

class-dump class-dump es una utilidad de línea de comandos para examinar el segmento Objective-C de los archivos Mach-O. Genera declaraciones para las clases, categorías y protocolos. Esta es la misma información que proporciona 'otool -ov', pero presentada como declaraciones normales de...

PT-2026-108136

Name of the Vulnerable Software and Affected Versions MongoDB C++ Driver affected versions not specified Description The MongoDB C++ Driver discards content following an embedded NUL byte in specific field and collection names processed by the collection API. This behavior allows the driver and t...

PT-2026-108137

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description An off-by-one error exists in the BSON bulk document writer. This occurs when a document ends at a specific buffer boundary, causing the writer to write one zero byte immediately pas...

PT-2026-108141

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description An incorrect calculation in Decimal128 string parsing allows the driver to accept certain over-precision inputs containing leading zeros instead of rejecting them. This results in th...

PT-2026-108140

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. This allows subsequent append or comparison operations to underfl...

CVE-2025-52357

CVE-2025-52357 : Aviso de seguridad: XSS en la consola de administración del router FD602GW-DX-R410 Prueba de concepto y aviso de seguridad para la vulnerabilidad de XSS reflejado en la consola de administración del router de fibra FD602GW-DX-R410 firmware V2.2.14. Incluye detalles, impacto y guí...

external_libexif_AOSP10_r33_CVE-2020-0198

libexif ------- DESCRIPCIÓN libexif es una biblioteca para analizar, editar y guardar datos EXIF. Está pensada para reemplazar muchas implementaciones redundantes en utilidades de línea de comandos y programas con interfaces gráficas. CARACTERÍSTICAS libexif admite el análisis, la edición y el...

joern

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...

CVE-2026-107202

A command injection vulnerability exists in the h-ui version v0.0.25 and below administrative API due to improper validation of the listen configuration field. When an authenticated administrator submits a value containing shell metacharacters, the application constructs nftables/iptables rule...

CVE-2026-23744

CVE-2026-23744 — MCPJam Inspector RCE no autenticado PoC de ejecución remota de código no autenticada para CVE-2026-23744. MCPJam Inspector 1.4.2 y versiones anteriores exponen funcionalidad a través de /api/mcp/connect que puede lanzar un comando de servidor MCP controlado por el atacante sin...

vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

A flaw was found in Vim, an open-source command-line text editor. An attacker could craft a malicious tags file that, when processed by Vim's C omni-completion feature, leads to insufficient escaping of input. This vulnerability allows for the execution of arbitrary Ex commands and, subsequently,...

Important: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

CVE-2026-106058 GitAhead through 2.7.1 OS Command Injection via Git Filter Filenames

GitAhead through 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames into clean/smudge filter commands. Attackers can ship files named with $command selected via .gitattributes so...

CVE-2026-106058

GitAhead versions up to and including 2.7.1 are vulnerable to an OS command injection in the src/git/Filter.cpp component. The flaw exists because malicious repositories can execute arbitrary commands by substituting crafted filenames into clean/smudge filter commands. Specifically, an attacker c...