CVE-2026-71460

/api/v2/config/ is protected only by IsAuthenticated. licenseinfo accountnumber, subscriptionid, poolid, sku, supportlevel, instance counts returned to any authenticated user. The superuser/auditor gate only covers projectbasedir/projectlocalpaths/customvirtualenvs, not licenseinfo. Enables socia...

CVE-2026-71460

/api/v2/config/ is protected only by IsAuthenticated. licenseinfo accountnumber, subscriptionid, poolid, sku, supportlevel, instance counts returned to any authenticated user. The superuser/auditor gate only covers projectbasedir/projectlocalpaths/customvirtualenvs, not licenseinfo. Enables socia...

Rainfall

Rainfall Rainfall is an iso challenge slightly more complex than Snow Crash. You will have to dive deep into reverse engineering, learn to reconstruct a code, and understand it to detect faults. Will you reach the last level? Description Rainfall is a project from the cybersecurity branch of 42,...

Linux Distros Unpatched Vulnerability : CVE-2026-91714

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to leak sensitive information vi...

Linux Distros Unpatched Vulnerability : CVE-2026-91732

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in AppManifest in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged...

CVE-2026-93386

A flaw was found in Google Chrome. This user interface UI misrepresentation vulnerability in WebAppInstalls allows a remote attacker, through social engineering, to spoof UI elements by tricking a user into visiting a specially crafted HTML page. This could lead to users being deceived by...

CVE-2026-93384

A flaw was found in Omnibox in Google Chrome. This server-side request forgery SSRF vulnerability allows a remote attacker, through social engineering and crafted network traffic, to trick the application into making requests to unintended locations. This can lead to a bypass of system access...

fluxion

Fluxion es el futuro de los ataques MITM WPA Fluxion es una reescritura de linset por vk496 con con suerte menos errores y más funcionalidad. Es compatible con la última versión de Kali rolling. Las últimas compilaciones estable y beta se pueden encontrar aquí aquí...

IIITA-IoT-Security-Research

IIIT Allahabad – Prácticas de Investigación en Seguridad IoT Resumen Este repositorio muestra el trabajo realizado durante mis Prácticas de Investigación en el Indian Institute of Information Technology, Allahabad IIIT Allahabad en el Laboratorio de Criptografía y Seguridad de Redes CNS. Durante...

ASM-Obfuscator

ASM-Obfuscator Ofuscador avanzado de ensamblador x86-64. Descripción El Ofuscador de Código Ensamblador es una herramienta potente y versátil diseñada para mejorar la seguridad de tu código ensamblador x86-64. Protege tus proyectos de la ingeniería inversa y el análisis mediante el empleo de una...

RTFM

RTFM RTFM. Copyright © 2013 de Ben Clark Todos los derechos reservados. Ninguna parte de esta obra puede reproducirse o transmitirse de ninguna forma ni por ningún medio, sin el permiso previo por escrito del titular de los derechos de autor. ISBN-10: 1494295504 ISBN-13: 9 7 8-1494295509 Editor...

Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server Liberty is affected by an XML External Entity Injection vulnerability due to Apache CXF (CVE-2026-65432)

Summary There is a vulnerability in the Apache CXF library that affects IBM WebSphere Application Server Liberty with jaxws-2.2, xmlWS-3.0, xmlWS-4.0, wsSecurity-1.1 or wsAtomicTransaction-1.2 enabled. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server Liberty is affected by uncontrolled resource consumption vulnerabilities due to Apache Neethi (CVE-2026-66142, CVE-2026-66143, CVE-2026-66144)

Summary There is a vulnerability in the Apache Neethi library that affects IBM WebSphere Application Server Liberty with the jaxws-2.2, xmlWS-3.0, and xmlWS-4.0 enabled. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...

Detection-Rules

APT29 Detection Engineering Production-ready Sigma detection rules developed from analysis of 196,071 Sysmon events in the MITRE ATT&CK Evaluations APT29 dataset. Overview This repository contains validated detection rules for adversary behaviors observed during APT29 simulation. Each rule was...

Cisco-ASA-vulnerability-research

LINAFULLRE — Ingeniería inversa de cobertura completa de lina Creado: 2026-08-12 Objetivo: labasav9-12-4-67/lina ASAv 9.12467, ELF x86-64, PIE; base de imagen Ghidra 0x100000; 112,687 funciones , 167 MB mapeados, 642,707 símbolos Meta de la vía: cobertura RE sistemática y completa del binario lin...

cve-2020-8617

This repository does not have a README...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2023-001353)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001353 advisory. In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to localize messages at all,...

MSMQ-Vulnerability

MSMQ Security Lab This repository documents a controlled lab review of Microsoft Message Queuing security exposure, focusing on defensive validation, detection evidence, and remediation planning. The project is positioned as a portfolio artefact: it shows how vulnerability research can be...

LinusWare-Source-Code-Internal

Linusware 1.2 — Arquitectura del Código Fuente y del Motor Reconstruido, Ingeenería Inversa y Documentado por tekkenbugatti Plataforma objetivo: Linux x8664 / Luau / Motor de ejecución de Roblox Descripción general Linusware 1.2 es una extensión de runtime nativa para Linux x8664 y un motor de...

Enigma-

Enigma Reimplementación en C++ del núcleo analítico de Ghidra SoftwareModeling + Utility, despojado de dependencias de Java/JVM. Construido para integración con IA, rendimiento y capacidad de incrustación. Parte del proyecto Enigma Engine. Enigma Engine Una reimplementación en C++ del núcleo...