dfirtriage

dfirtriage Herramienta de adquisición forense digital para respuesta a incidentes en Windows. Cómo usar Para ejecutar, coloque dfirtriage.exe en el destino o en una unidad USB conectada y ejecútelo con derechos de administrador; use -h para obtener ayuda. Manual de Usuario de DFIRTriage v6.0...

whids

IMPORTANTE: este README y otra documentación no están actualizados para reflejar los cambios realizados en las últimas versiones beta ya que ocurrieron muchos cambios. Todo esto se actualizará a su debido tiempo cuando se lance una versión estable consulte Hoja de ruta hasta la próxima versión...

aftermath

Acerca de Aftermath es un framework de respuesta a incidentes de código abierto basado en Swift. Aftermath puede ser utilizado por defensores para recolectar y posteriormente analizar los datos del host comprometido. Aftermath puede ser desplegado desde un MDM idealmente, pero también puede...

nuclei-templates

Nuclei Templates Elenco curato dalla community di template per il motore nuclei per individuare vulnerabilità di sicurezza nelle applicazioni. Documentazione • Contributi • Discussione • Comunità • FAQ • Unisciti a Discord I template sono il cuore dello scanner nuclei che alimenta il vero motore ...

pamspy

pamspy -- Recolector de credenciales para Linux pamspy aprovecha las tecnologías eBPF para lograr un trabajo equivalente a 3snake. Rastrea una función particular del espacio de usuario dentro de la biblioteca PAM Módulos de Autenticación Enchufables, utilizada por muchas aplicaciones críticas par...

ssh-audit

ssh-audit ssh-audit es una herramienta para auditoría de servidores SSH. Características soporte de servidores con protocolos SSH1 y SSH2; captura de banner, reconocimiento de dispositivo, software y sistema operativo, detección de compresión; recopilación de algoritmos de intercambio de claves,...

ida-efiutils

Script EFI per IDA Pro Alcuni script IDA per assistere nel reverse engineering di eseguibili EFI. Questo pacchetto contiene i seguenti file: 1. efiutils.py - Modulo IDAPython con alcune funzioni di supporto 2. efiguids.py - Una raccolta di GUID noti per i protocolli EFI 3. efiguidsami.py - Una...

pics

Benvenuti! Poster binari 25 poster 2017-10-30 59 tracciati 2022-28-11 !https://assets.kitploit.com/production/public/readmes/48012/84626...

Linux Distros Unpatched Vulnerability : CVE-2026-106430

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can cause the driv...

EUVD-2026-51992

Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide BOLA...

CVE-2026-84220

The Kirki WordPress plugin prior to version 6.3.2 is vulnerable to unauthenticated arbitrary shortcode execution . The issue occurs because the plugin fails to prevent the execution of shortcodes contained within comments when they are rendered, and it displays these comments regardless of their ...

CVE-2026-98289

A flaw was found in the Linux kernel's UNIX domain socket afunix subsystem. A logic error in the socket garbage collection algorithm can prevent cyclical socket references from being properly identified and reclaimed. A local user could exploit this flaw to cause a resource leak, potentially...

Maryam

OWASP Maryam OWASP Maryam es un marco de trabajo modular de código abierto basado en OSINT y recopilación de datos. Está diseñado para proporcionar un entorno robusto para recolectar datos de fuentes abiertas y motores de búsqueda de forma rápida y exhaustiva. Instalación Sistemas operativos...

AZL-107132 CVE-2026-89091 affecting package ansible 2.17.11-1

A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...

CVE-2026-89091

A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...

CVE-2026-89091 Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution

A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...

CVE-2026-89091

A flaw exists in ansible-core where the archive extractor used in ansible-galaxy collection install validates member paths using lexical path normalization (os.path.abspath ) instead of resolving symbolic links (os.path.realpath ). Because the system performs no containment check on symlink-typed...

DEBIAN-CVE-2026-106430

The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can cause the driver and the calling application to interpret the same name differently. An authenticated actor who can influence a name passed by an...

DEBIAN-CVE-2026-106429

An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint...

CVE-2026-106430

The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can cause the driver and the calling application to interpret the same name differently. An authenticated actor who can influence a name passed by an...