rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation installrustbuster echo "Installing latest version o...

CVE-2024-38063

CVE-2024-38063 — Windows IPv6 Stack Vulnerability Analysis & PoC -red Technical analysis and Proof-of-Concept PoC for CVE-2024-38063 , a critical Remote Code Execution RCE vulnerability in the Windows IPv6 stack tcpip.sys. Discovered by KunLun Lab, this issue is zero-click , meaning it can be...

viproy-voipkit

Discontinued Viproy was a PoC VoIP security assessment tool which had several modules and exploits to maintain. However, it was developed as a modules set to Metasploit Framework. As Metasploit Framework had significant updates, Viproy's current modules won't be able to work unless you use legacy...

neto

Project Neto: A Toolkit for Analysing Browser Plugins Overview Project Neto is a Python 3 package conceived to analyse and unravel hidden features of browser plugins and extensions for well-known browsers such as Firefox and Chrome. It automates the process of unzipping the packaged files to...

neto

Project Neto: Un conjunto de herramientas para analizar complementos del navegador Descripción general Project Neto es un paquete de Python 3 concebido para analizar y desvelar características ocultas de complementos y extensiones del navegador para navegadores conocidos como Firefox y Chrome...

gf

gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: ▶ grep -HnrE...

Microsoft FrontPage Extensions - Information Disclosure

Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /vtibin/ virtual directory. id: CVE-2000-0114 info: name: Microsoft FrontPage Extensions - Information Disclosure author: r3naissance,matejsmycka severity...

CVE-2018-6574-go-get-RCE

CVE-2018-6574-go-get-RCE El problema se debe a que al instalar un paquete, Golang compila extensiones nativas. Esto se puede usar para pasar banderas adicionales al compilador y obtener ejecución de código. Por ejemplo, se puede usar CFLAGS. Puedes compilarlo usando el siguiente comando: $ gcc...

[SECURITY] Fedora 45 Update: caja-extensions-1.28.0-13.fc45

Extensions for the caja file-browser, open-terminal, image-converter, sendto and share...

permhash

Permhash es un marco extensible para calcular el hash de los permisos declarados aplicados a las extensiones de navegador basadas en Chromium y a los APK, lo que permite agrupamiento, búsqueda y pivoteo similar al hash de importaciones y al hash de cabeceras rich. Permhash actualmente es capaz de...

SCAT

SCAT HP SiteScope Credential Acquisition Tool What is this? A tool that abuses a remote code execution vulnerability in default HP SiteScope v11.32 et al installations to steal credentials stored in SiteScope. What remote code execution vulnerability? HP SiteScope by default enables Java Manageme...

ExtensionHijack

ExtensionHijacker Un posible método de persistencia de malware. Secuestro de extensiones registradas para el usuario actual. Leer más aquí proxyapp - una aplicación proxy, utilizada para manejar las extensiones secuestradas hijackerapp - instala la aplicación proxy y redirige el manejo de...

CVE-2026-4813

CVE-2026-4813 CVSS-B 9.4 CRÍTICO RCE autenticado mediante inyección XSLT en Lutece Core Explicaciones y más en mi sitio web...

CVE-2022-28281

CVE-2022-28281: Escritura fuera de límites en Mozilla Firefox debido a extensiones WebAuthN inesperadas Este es un error que puede desencadenarse desde un proceso de renderizado de Firefox en Windows comprometido. Si un proceso de contenido comprometido envía un número inesperado de extensiones...

cve-2024-32002-hook

Extensiones Avanzadas de Rendimiento Optimizaciones esenciales para cargas de trabajo de procesamiento de datos...

Cross-Site Scripting (XSS)

org.apache.wicket, wicket-extensions is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to AjaxEditableChoiceLabel and related components writing attacker-influenced renderer or overridden defaultNullLabel values directly into the page markup without HTML escaping, which allows a...

Chromium CVE-2026-93373: Use after free in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

AlmaLinux 9.2 [TuxCare] Security Update: podman / podman-docker / podman-gvproxy / podman-plugins / etc (ALMALINUX9.2:CLSA-2026:1784308178)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784308178 advisory. - When adding a key to a remote agent constraint extensions such as [email protected] were not serialized in the request...

Rocky Linux 9 [CIQ] Security Update: fence-agents-aliyun / fence-agents-all / fence-agents-amt-ws / etc Multiple Vulnerabilities (crlsa-2026_13672)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202613672 advisory. cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves CVE-2026-26007 pyjwt: PyJWT accepts unknown crit header...

Rocky Linux 9.6 [TuxCare] Security Update: podman / podman-docker / podman-plugins / podman-remote / etc (ALMALINUX9.6:CLSA-2026:1784133840)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784133840 advisory. - When adding a key to a remote agent constraint extensions such as [email protected] were not serialized in the request...