70 matches found
ipChecker
ipChecker Herramienta para verificar si una IP determinada es un nodo Tor o un proxy abierto. ¿Por qué? A veces todas tus limitaciones no son suficientes para detener ataques de fuerza bruta o cualquier tipo de ataque masivo, por lo que puede ayudarte a bloquear a algunos atacantes que usan Tor o...
CVE-2014-0160-Chrome-Plugin
Heartbleed chrome plugin OBSOLETO Plugin de Chrome que verifica si el sitio actual y todos los subdominios llamados son vulnerables a CVE-2014-0160. La verificación de vulnerabilidad se realiza mediante un servicio API que ahora está muerto ¡no lo estaba en 2014!. Quizás el código pueda ser útil...
CVE-2021-26814
CVE-2021-26814 Un PoC simple en Python para explotar CVE-2021-26814 y obtener RCE en Wazuh Manager v.4.0.0-4.0.3 a través del servicio API. Para ejecutarlo, simplemente haga ejecutable el script .py y láncelo con los parámetros requeridos. root@kitploit: PoC.py -h -user USERNAME -pwd PASSWORD -li...
CVE-2021-26814
CVE-2021-26814 Un PoC simple en Python para explotar CVE-2021-26814 y obtener RCE en Wazuh Manager v.4.0.0-4.0.3 a través del servicio API. Para ejecutarlo, simplemente haga el script .py ejecutable y ejecútelo con los parámetros requeridos. root@kitploit: PoC.py -h -user USERNAME -pwd PASSWORD...
columbus-server
Servidor Columbus ¡Este repositorio está obsoleto! ‼️ El componente del servidor se ha movido a https://github.com/elmasy-com/columbus. Columbus Project es un servicio de descubrimiento de subdominios basado en API, un servicio de enumeración de subdominios extremadamente rápido con funciones...
EUVD-2026-54920
A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unknown functionality of the file src/main/httpServer.ts of the component Built-in HTTP API Service. Executing a manipulation can lead to server-side request forgery. The attack requires access to the...
Daytona: Cross-tenant data leak in notification WebSocket gateway via unverified organizationId join
Summary A cross-tenant authorization flaw in Daytona's notification WebSocket gateway allowed any authenticated user to subscribe to another organization's realtime notification channel and passively receive that organization's events. Impact The notification gateway's JWT handshake joined a...
PT-2026-46840
Name of the Vulnerable Software and Affected Versions OpenStack Ironic versions 32 through 35.0.1 Description An unauthenticated malicious user can cause a service crash by submitting a crafted JSON string to certain endpoints on the API or JSON-RPC service. Recommendations Update OpenStack Ironi...
PT-2026-43276
Name of the Vulnerable Software and Affected Versions FastNetMon Community Edition versions prior to 1.2.10 Description The software exposes a gRPC API server on port 50052 that lacks an authentication mechanism. The server is initialized using grpc::InsecureServerCredentials, allowing any user...
Linux Distros Unpatched Vulnerability : CVE-2026-23921
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A low privilege Zabbix user with API access can exploit a blind SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL...
EUVD-2026-10703
OneUptime is a solution for monitoring and managing online services. The resend-verification-code endpoint allows any authenticated user to trigger a verification code resend for any UserWhatsApp record by ID. Ownership is not validated unlike the verify endpoint. This affects the...
PT-2026-23615
Name of the Vulnerable Software and Affected Versions OliveTin versions prior to 3000.11.1 Description OliveTin allows access to predefined shell commands from a web interface. A flaw exists in the RestartAction functionality where a low-privileged authenticated user can execute actions they are...
EUVD-2021-26491
Malware in sbrugna...
EUVD-2018-4669
Malware in sbrugna...
EUVD-2021-22930
Malware in sbrugna...
EUVD-2018-0242
Malware in sbrugna...
EUVD-2012-4023
Malware in sbrugna...
EUVD-2021-8872
Malicious code in bioql PyPI...