CVE-2026-50751

CVE-2026-50751 Escáner IKEv1 de Check Point Un escáner de vulnerabilidades multihilo para CVE-2026-50751 , una vulnerabilidad crítica de omisión de autenticación IKEv1 que afecta a los Check Point Quantum Security Gateways. Resumen Los sistemas VPN de acceso remoto de Check Point con IKEv1...

ADCollector

ADCollector ADCollector es una herramienta ligera que enumera el entorno de Active Directory para identificar posibles vectores de ataque. Te dará una comprensión básica de la configuración/despliegue del entorno como punto de partida. Notas: ADCollector no es una alternativa al potente PowerView...

CVE-2022-21907

CVE-2022-21907 Description root@kitploit: POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability. create by Malwareman at 2022-09-17. Detail root@kitploit: HTTP Protocol Stack Remote Code Execution Vulnerability. Similar to...

Log4j-JNDIServer

Log4j-JNDIServer This project will help to test the Log4j CVE-2021-44228/CVE-2021-45046 vulnerabilities. Installation and Building Load the project on Intellij Idea Select JDK in "Projects Settings" CTRL + ALT + SHIFT + S In "Project Settings", create the Artifact - "Artifacts" - "Create JAR from...

BWASP

BWASP The BoB Web Application Security Project BWASP is an open-source, analysis tool to support for Web Vulnerability Manual Analysis hackers. The BWASP tool basically provides predicted information through vulnerability analysis without proceeding with an attack. BWASP supports performing...

Excalibur

Excalibur pronto se actualizará para utilizar Metasploit sobre Bashbunny. Excalibur Excalibur es un exploit basado en Eternalblue en "PowerShell" para el proyecto Bashbunny. Su propósito es reflexionar sobre cómo una unidad USB "simple" puede ejecutar las 7 etapas de la cadena de ciberataque...

CVE-2022-21907

CVE-2022-21907 Descripción - POC para CVE-2022-21907: Vulnerabilidad de ejecución remota de código de la pila de protocolo HTTP. - Creado por antx en 2022-01-17. Detalle - Vulnerabilidad de ejecución remota de código de la pila de protocolo HTTP. - Similar a...

Additive-Vulnerability-Analysis-CVE-2021-41773

Additive-Vulnerability-Analysis-CVE-2021-41773 Apache: un servicio web convencional convertido en un vector de ataque para la ejecución remota de código...

CVE-2026-9147-uproot-rce

CVE-2026-9147: uproot Code Injection via TStreamerInfo Metadata Severity: High, CVSS 4.0 8.5 , CVSS 3.1 7.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected: uproot = 5.7....

CVE-2026-21962

🔥 CVE-2026-21962 — Oracle HTTP Server Detection Toolkit Safe, non-exploitative detection tools for identifying Oracle HTTP Server and WebLogic Proxy Plug-in instances affected by CVE-2026-21962. 🧠 Vulnerability Overview CVE: CVE-2026-21962 Severity: Critical Attack Vector: Network Authentication...

Fedora 44 : mingw-gstreamer1 / mingw-gstreamer1-plugins-bad-free / etc (2026-e6ca27403f)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-e6ca27403f advisory. Update to 1.28.6. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

windows-smb-vulnerability-framework-cve-2025-33073

Windows SMB Client Vulnerability Research Framework Author: cyberseallll Created: 2025 Overview I developed this research framework to analyze and understand CVE-2025-33073, a critical Windows SMB Client Elevation of Privilege vulnerability. This implementation provides comprehensive tools for...

cve-2026-21509-mitigation

CVE-2026-21509 Mitigation Script Traditional Chinese version: READMEzh-TW.md Overview This script applies a registry-based mitigation to protect against CVE-2026-21509 Microsoft Office security feature bypass vulnerability, which has been exploited in the wild. CVE ID: CVE-2026-21509 Severity:...

CVE-2026-84840

A missing authentication flaw in tsi-coop tsi-dpdp-cms (up to 0.5.0 ) affects the file InterceptingFilter.java within the Bootstrap Setup Endpoint . A remote, unauthenticated attacker can exploit this to achieve low integrity and availability impact (CVSS 3.1 score 6.5, Medium ). A public proof-o...

CVE-2025-492026

Security Advisory: CVE-2025-492026 Summary A vulnerability has been identified in Copilot AI that causes an unintended hyperlink to be included in the "link source" section whenever Copilot retrieves a web query. This issue resulted in users clicking on links to https://www.collectingflags.com ev...

msdt-follina

msdt-follina Microsoft MS-MSDT Follina 0-day Vulnerability CVE-2022-30190 Attack Vector...

CVE-2021-44228

CVE-2021-44228 El 9 de diciembre de 2021 el mundo conoció una nueva falla de seguridad relacionada con Log4J. La puntuación CVSSv3 Common Vulnerability Scoring System de la vulnerabilidad fue evaluada en 10, lo que la convierte en nivel crítico https://nvd.nist.gov/vuln/detail/CVE-2021-44228...

Linux Distros Unpatched Vulnerability : CVE-2026-82209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute...

cve-2018-6574

cve-2018-6574 gcc -shared -o attack.so -fPIC attack.c...

EUVD-2026-68485

A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected by this issue is some unknown functionality of the file /cgi-bin/usbdevice.cgi of the component CGI Handler. Such manipulation of the argument fupsip leads to os command injection. The attac...