Cve-2026-27944-Tools-Exploit

🚀 CVE-2026-27944: Exploit de Backup sin Autenticación en Nginx UI 📌 Descripción 27944.py es una herramienta de explotación para CVE-2026-27944 que permite a un atacante descargar y descifrar copias de seguridad de Nginx UI sin autenticación. Esta vulnerabilidad está presente en Nginx UI versión...

PhantomFS

PhantomFS Proveedor de ProjFS. Proyecta archivos cuyo contenido depende de qué proceso los lee. El payload se almacena cifrado con AES-256-CBC en disco, descifrado solo en memoria en tiempo de ejecución. Esto no debería evadir ningún EDR, ya que el payload se escribirá en disco cuando procesos...

Hollow

Hollow hollow es un generador de cargadores de shellcode. Le proporcionas un binario de shellcode sin procesar y un perfil, y genera un cargador PE de Windows compilado con tu shellcode encriptado en su interior. Comenzando Los binarios están disponibles en la página de lanzamientos, o puedes...

CVE-2025-55182-RCE-shell

CVE-2025-55182-RCE-shell Burp Suite/antsword - Shell interactiva secuestro HTTP + POST + AES-256-CBC/BASE64 Detección -dnslog Detección sin salida de DNSLog Nuclei -poc Detección de eco de vulnerabilidad Explotación -exp Shell interactiva eco base64 -exp2 Shell interactiva secuestro HTTP + POST +...

steganography

Herramienta de Esteganografía de Imágenes Herramienta simple de Cifrado y Esteganografía que utiliza cifrado protegido por contraseña para asegurar el contenido de un archivo, y luego lo incrusta en los datos de píxeles de una imagen utilizando codificación de bit menos significativo. Para sistem...

AnonX

NOTA El script AnonX se basaba en la API pública de WeTransfer y dejó de funcionar tres semanas después de su lanzamiento. “Todo lo bueno tiene que llegar a su fin, así que con el corazón apesadumbrado y conteniendo las lágrimas debemos anunciar que retiraremos nuestra API pública. Tiempos...

CVE-2026-33032-nginx-ui-vuln-lab

CVE-2026-27944 + CVE-2026-33032 — Laboratorio RCE sin Credenciales en nginx-ui Aviso legal: Este repositorio está destinado únicamente a fines educativos y de investigación de seguridad autorizada. Todas las técnicas demostradas aquí solo deben utilizarse contra sistemas que poseas o para los que...

Malicious code in imgbundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e14218599b46d143fa8e150156864d14d58c327bd8a8816221ac4e8c5cc99350 The package advertises itself as an image bundler, but index.js performs no image bundling. On require, a top-level IIFE reads an AES-256-CBC-encrypt...

reyee_decrypt

reyeedecrypt 自适应解密锐捷 Ruijie ReyeeOS 的固件与配置备份，并从配置中恢复明文口令。 用法 python3 reyeedecrypt.py 输出目录 自动识别，支持以下几种： 输入| 例子 ---|--- 固件 tar 包| AP3.01...withbootencryptov1.tar.gz 固件解压目录| ...withbootencryptov1/ 加密 install bin| ...installencryptov1.bin / ...installencryptov2.bin 加密 u-boot| u-boot-encryptov2 配置备份|...

cryptr v4.0.0

cryptr A simple shell utility for encrypting and decrypting files using OpenSSL. Installation git clone https://github.com/nodesocket/cryptr.git ln -s "$PWD"/cryptr/cryptr.bash /usr/local/bin/cryptr Requirements shred if optionally deleting original file. Bash tab completion Add...

CVE-2026-19806

The Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 1.4.52 via the guestticketlogin function and its p parameter. Th...

EUVD-2026-68969

The Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 1.4.52 via the guestticketlogin function and its p parameter. Th...

PT-2026-84106

Name of the Vulnerable Software and Affected Versions Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System versions prior to 1.4.53 Description An authentication bypass exists that allows for administrator account takeover. The issue resides in the guest ticket...

CVE-2026-19806: Improper Authentication

The Support Genix – Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 1.4.52 via the guestticketlogin function and its p parameter. Th...

CVE-2026-82645

AVideo current commit e01e41ecc and earlier exposes stream credentials through the plugin/Live/view/Liverestreams/getLiveKey.json.php endpoint. Supplying a 'token' request parameter waives both the Live::canRestream access gate and the restream ownership check, causing the endpoint to return any...

CVE-2026-82645 AVideo Unauthenticated Stream Credential Disclosure via Forgeable Token

AVideo current commit e01e41ecc and earlier exposes stream credentials through the plugin/Live/view/Liverestreams/getLiveKey.json.php endpoint. Supplying a 'token' request parameter waives both the Live::canRestream access gate and the restream ownership check, causing the endpoint to return any...

PT-2026-83571

AVideo current commit e01e41ecc and earlier exposes stream credentials through the plugin/Live/view/Live restreams/getLiveKey.json.php endpoint. Supplying a 'token' request parameter waives both the Live::canRestream access gate and the restream ownership check, causing the endpoint to return any...

MAL-2026-14298 Malicious code in emoji-prints-fancy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163576a0a8b626c88261c8cc54c5049d981015c80145ad36e2710fff5014afbe The package advertises itself as a colorized logger, but dist/index.js requires./logger, which at module load AES-256-CBC-decrypts a hardcoded...

CVE-2026-15341

The User Session Synchronizer plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 1.4.0. The synchronizesession function, hooked on init and therefore executed on every request, performs no nonce, capability, or shared-secr...

CVE-2026-15341 User Session Synchronizer <= 1.4.0 - Unauthenticated Authentication Bypass to Account Takeover via 'ussync-key', 'ussync-token', and 'ussync-ref' Parameters

The User Session Synchronizer plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 1.4.0. The synchronizesession function, hooked on init and therefore executed on every request, performs no nonce, capability, or shared-secr...