PT-2026-107862

An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details and state of managed Brocade Fabric OS FOS switches. This results in the unauthorized disclosure of the customer's SAN fabric...

PT-2026-108114

FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ff rtsp connect in libavformat/rtsp.c that follows RTSP 3xx redirects without validating the Location URL. Malicious RTSP servers can redirect FFmpeg to internal hosts and ports under other schemes,...

goscan

GoScan 은 자동 완성 기능을 갖춘 대화형 네트워크 스캐너 클라이언트로, nmap에 대한 추상화와 자동화를 제공합니다. 처음에는 @golang을 배우기 위해 만든 작은 사이드 프로젝트로 시작했지만, 현재 GoScan은 은밀성이 우선순위가 아니고 시간이 제한된 상황CTF, OSCP, 시험 등뿐만 아니라 구성 설정을 약간 조정하면 전문적인 업무 중에도 호스트 발견, 포트 스캐닝, 서비스 열거를 수행하는 데 사용할 수 있습니다. GoScan은 또한 불안정한 환경불안정한 네트워크 연결, screen 부재 등에 특히 적합합니다. 스...

Network-Detection-Engine

version: 0.001 Motor de Detección de Red Un 'Motor de Detección de Intrusiones de Red' ligero que captura Tráfico en Vivo y detecta ataques reales en tiempo real Zig0.15.2. Características - Captura de paquetes en vivo usando libpcap - Análisis personalizado de paquetes: - Ethernet - IPv4 - TCP /...

openclaw-technical-analysis

Análisis Técnico de OpenClaw Este repositorio contiene mis revisiones técnicas exhaustivas y auditorías de código de la plataforma OpenClaw AI centrándose específicamente en las compilaciones del 15 de febrero y 25 de febrero de 2026. Estas revisiones se basan en análisis de arquitectura sin...

CVE-2026-92543

A flaw was found in Docker Engine. This vulnerability can lead to information disclosure or container image tampering by allowing an attacker to intercept unencrypted registry traffic. The flaw exists because the engine disables Transport Layer Security TLS certificate verification if any resolve...

CVE-2026-92542

A flaw was found in Moby. Firewall rules for encrypted Swarm overlay networks fail to distinguish between authentic kernel traffic and packets crafted by user processes. A local attacker can exploit this flaw by sending forged Virtual Extensible LAN VXLAN datagrams matching the overlay network...

BitLeak

BitLeak BitLeak es una herramienta en Python que verifica y muestra descargas de torrents vinculadas a una dirección IP determinada. git clone https://github.com/AnkhCorp/BitLeak.git pip3 install -r requirements.txt python bitleak.py...

GHSA-322M-FF4G-9VX9 Ghost: Server-Side Request Forgery in Bookmark Fetching

Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result in any response data being returned. Vulnerable versions This...

Ghost: Server-Side Request Forgery in Bookmark Fetching

Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result in any response data being returned. Vulnerable versions This...

Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network on some network configurations. A successful attack would not result in any response data being returned...

CVE-2024-38063

CVE-2024-38063 Vulnerabilidad de Windows que permite llevar a cabo actividad no autorizada a través de la red: ejecución remota de código en Windows TCP/IP. Dos máquinas virtuales —una víctima y un atacante— están listas para simular el ataque. En la máquina víctima se utilizó una herramienta de...

CVE-2019-0708-Batch-Blue-Screen

CVE-2019-0708-Batch-Blue-Screen Reescritura del script de pantalla azul del 0708 escrito por un experto, modificado para provocar pantallazos azules en lote por segmento de red. Uso: python3 poc.py 192.168.20 64 Ataca en lote a todos los hosts 1-255 del segmento de red 192.168.20 provocando...

Security Bulletin:React Router SSR Error Handling Vulnerability in Versions 6.4.0 to 7.17.0

Summary React Router is a router for React. In versions 6.4.0 through 7.17.0, if application code was written in a way that allows attacker-supplied input to overwrite certain aspects of errors caught by the SSR process, then it was possible for an attacker to trigger unexpected constructor...

Security Bulletin:Improper Enforcement of Message Integrity in Erlang/OTP SSL: Vulnerability in tls_gen_connection Module Allows Unauthenticated Data Injection

Summary Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl tlsgenconnection module allows a network-positioned attacker to inject unauthenticated plaintext that the TLS client application later treats as authenticated server...

DEBIAN-CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

CVE-2026-106557

Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package did not sufficiently validate TechDocs Markdown extension configuration. An authenticated user who can register or modify documentation sources may cause a TechDo...

CVE-2021-37152

CVE-2021-37152 Explota el acceso a clientes de red enviando paquetes en wirless TP-LINK y preparándose para un ataque MITM exploit Este exploit está diseñado para acceder y escanear clientes de red y podrá acceder fácilmente y prepararse para un ataque MITM, el exploit atacará en las capas tres y...

CVE-2026-92542 Blind VXLAN injection into encrypted overlay networks from cluster peer

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...