198449 matches found
security-lab
Este repositorio no tiene un README...
extra_recipe
Este repositorio no tiene un README...
fastjson-cve
Proyecto de Reproducción de CVE-2026-16723 Descripción General Este proyecto reproduce CVE-2026-16723 — una vulnerabilidad crítica de Ejecución Remota de Código RCE en fastjson 1.2.68 hasta 1.2.83. La vulnerabilidad permite RCE bajo configuración predeterminada sin requerir la habilitación de...
CVE-2022-38599
Este repositorio no tiene un README...
Firmware-analysis
Este repositorio no tiene un README...
exploits
Este repositorio no tiene un README...
ACF
Análisis Forense de Conexiones Android Este software permite a un investigador forense mapear cada conexión con su proceso de origen. No requiere privilegios root en el sistema, pero sí requiere adb y depuración USB. Sistemas operativos compatibles ACF actualmente solo funciona en Linux Ubuntu...
obike
Descripción del Protocolo oBike BLE/HTTP Este documento proporciona un análisis de los protocolos de comunicación de oBike a partir de enero de 2018. Los resultados se han presentado en insomni'hack security conference 2019: diapositivas grabación así como en AREA41 security conference 2018:...
CVE-2018-6574
Este repositorio no tiene un README...
Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token
Reflected XSS via a forged cursor pagination token Failure mode Special:Ask accepts a cursor query parameter for keyset pagination added in 7.0.0. The token is decoded by CursorEncoder, which is an unsigned base64url-encoded JSON blob, so its contents are fully attacker-controlled. When the...
RockLoader-source
Este repositorio no tiene un README...
CVE-2018-6574-PoC
Este repositorio no tiene un README...
exploits
This repository does not have a README...
CVE-2026-23744-PoC
Este repositorio no tiene un README...
CVE-2026-92745
A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management RHSM offline token. The token is exposed when it is passed as a command-line argument to a helper script during the...
CVE-2026-92747
A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect running processes to expose sensitive guest virtual machine VM credentials, such as rootPassword and userPassword. This occurs when the installmachine.py script passes these credentials as...
CVE-2026-91202
A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link symlink and then using the privileged "Paste as owner" function. This allows for arbitrary file ownership changes outside the intended pasted directory,...
CVE-2026-91203
A flaw was found in cockpit-files. This vulnerability allows a local attacker to exploit a timing issue, known as a symlink race condition, during privileged file operations such as changing file ownership or permissions. By manipulating directory entries and winning this race, the attacker can...
CVE-2026-93534 spatie Scotty Self Update SelfUpdater.php update code download
A vulnerability was identified in spatie Scotty up to 1.4.2. Affected is the function SelfUpdater::update of the file app/Updater/SelfUpdater.php of the component Self Update Handler. Such manipulation leads to download of code without integrity check. It is possible to launch the attack remotely...