AIP

Attacker IP Prioritization AIP Tool The Attacker IP Prioritization AIP is a tool to generate efficient and economic IP blocklists based on network traffic captured from honeypot networks. With the advent of 5G, IoT devices are directly connected often without firewall protection. Therefore we nee...

The Quantum Ad-List

The Quantum Ad-List Next-Generation AI-Powered Ad & Tracker Blocking 📜 Table of Contents 1. Legal & Ethical Notice 2. Project Overview Maintainers Technical Architecture Motivation Security & Privacy 3. Installation Hosts File Integration Ad-Blocker Compatibility Pi-hole Integration 4. Issue...

CVE-2023-22524

Atlassian Companion RCE Vulnerability Proof of Concept CVE-2023-22524 Overview This repository contains a proof of concept PoC for the recently discovered remote code execution vulnerability in Atlassian Companion for macOS, identified as CVE-2023-22524. This critical issue allows attackers to...

Stevos-AI-Blocklist

Stevo's AI Blocklist A filter list for uBlock Origin and AdGuard that hides specific website features that use Generative AI and content labeled as AI generated. Available for PC/Linux Firefox, Edge, Chrome, Brave, macOS Firefox, Edge, Chrome, Safari, Android Firefox, and iOS/iPadOS Safari, Brave...

simplewall

simplewall Definitely for advanced users. Description: Simple tool to configure Windows Filtering Platform WFP which can configure network activity on your computer. The lightweight application is less than a megabyte, and it is compatible with Windows 7 SP1 and higher operating systems. You can...

hosts

!IMPORTANT Cloning this repository can take a long time! You probably just want to start with the latest version, not its whole history since 2018. Therefore you probably want to use git clone --depth 1 ... to save significant time. !NOTE With the exception of issues and PRs regarding changes to...

uBlockOrigin-HUGE-AI-Blocklist

uBlockOrigin & uBlacklist Lista Negra Masiva de IA Una lista negra masiva de sitios seleccionados manualmente más de 1000 que contienen contenido generado por IA, con el propósito de limpiar los motores de búsqueda de imágenes Google Search, DuckDuckGo y Bing usando uBlock Origin o uBlacklist...

debianopenssl

debianopenssl Claves privadas vulnerables al fallo de OpenSSL en Debian CVE-2008-0166 En 2008, un fallo en el paquete OpenSSL de Debian y Ubuntu provocó la generación de claves privadas predecibles. Aunque el número de claves es limitado, se necesitan algunas consideraciones para crear una lista...

CVE-2026-61424

CVE-2026-61424 — DJ-Classifieds = 3.11.1 Tarea imageupload → Sin autenticación → Bypass del filtro de 3 cadenas Resumen Carga arbitraria de archivos sin autenticación en DJ-Classifieds para Joomla. El endpoint de la tarea imageupload procesa las cargas de archivos sin autenticación y se basa en u...

CVE-2026-61699

nebula-mesh (forgekeep) is a self-hosted control plane for the Slack Nebula mesh VPN. Prior to v0.7.1 , the agent-side poller decodes the per-CA revocation blocklist from the server but discards it — it never writes pki.blocklist into the local config.yml, and the config generator has no field to...

CVE-2026-61699 nebula-mesh: Certificate revocation is never enforced at the mesh

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.7.1, revocation is the only in-band mechanism that isolates a compromised/offboarded host from a Nebula mesh. Because the blocklist never reaches any peer's config.yml, a Blocked host retains full overlay...

CVE-2026-53602 nebula-mesh - Host revocation is not durable: blocked/offboarded hosts can regain a valid certificate

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.7, two related authorization gaps let a host that should no longer be trusted obtain a fresh, valid Nebula certificate, because nebula-mgmt does not re-evaluate revocation/authorization state at certificate...

CVE-2026-53602 nebula-mesh - Host revocation is not durable: blocked/offboarded hosts can regain a valid certificate

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.7, two related authorization gaps let a host that should no longer be trusted obtain a fresh, valid Nebula certificate, because nebula-mgmt does not re-evaluate revocation/authorization state at certificate...

CVE-2026-53602

CVE-2026-53602 affects nebula-mesh , a self-hosted control plane for Slack Nebula mesh VPN (github.com/forgekeep/nebula-mesh), prior to version 0.3.7 . The core issue is that host revocation is not durable : blocked or offboarded hosts can regain a fresh, valid Nebula certificate because nebula-m...

chyrp-lite-rce-poc

chyrp-lite-rce-poc CVE-2026-53767 + CVE-2026-53768 - RCE autenticado en Chyrp Lite ≤ 2026.01 "Iriomote" Ataque encadenado: bypass de la lista negra de uploadspath CVE-2026-53768 + falta de validación de la extensión de archivo en adminupdateupload CVE-2026-53767 → Ejecución remota de código como...

CVE-2026-71197

A flaw was found in OpenStack Glance. The web-download image import method can bypass host-based blocklist filtering. When an operator configures disallowedhosts with IP addresses to block access to internal services, an attacker can circumvent this protection by using a hostname that resolves to...

trackers

El rastreo web es la práctica mediante la cual los sitios web identifican y recopilan información sobre los usuarios. Esto suele adoptar la forma de un subconjunto del historial de navegación web. Con cada vez más personas usando servicios de streaming, dispositivos móviles, portátiles, wearables...

CVE-2026-85175 SiYuan before v3.8.2 TLS Private Key Disclosure via getFile

SiYuan versions = 3.8.1 fixed in v3.8.2 contain an incomplete blocklist in the IsForbiddenAbsPath function kernel/util/pathguard.go, which only blocks conf/conf.json by exact match and does not restrict the TLS private key conf/key.pem or CA private key conf/ca.key stored in the same conf/...

CVE-2026-85175

SiYuan versions ≤ 3.8.1 contain an incomplete blocklist in the IsForbiddenAbsPath() function (kernel/util/path_guard.go) that only blocks conf/conf.json by exact match but fails to restrict the TLS private key (conf/key.pem) and CA private key (conf/ca.key). Because the getFile handler skips the ...

CVE-2023-24329-Exploit

Intro The URL parsing functions focus on splitting a URL string into its components, or on combining URL components into a URL string. urllib.parse.urlparse Simply urllib.parse used for parsing urls, we can bypass it with adding blanks before the url. This happens in python 3.11.4 and before. PoC...