vulscan

vulscan - Escaneo de vulnerabilidades con Nmap Introducción Vulscan es un módulo que mejora nmap para convertirlo en un escáner de vulnerabilidades. La opción -sV de nmap habilita la detección de versiones por servicio, la cual se utiliza para determinar posibles fallos según el producto...

tofu

tofu Una herramienta modular para hackear sistemas de archivos Windows sin conexión y omitir pantallas de inicio de sesión. Puede realizar volcados de hashes, puertas traseras OSK, enumeración de usuarios y más. Cómo funciona : Cuando una máquina Windows se apaga, a menos que tenga Bitlocker u ot...

analyzer

Este proyecto automatiza las tareas diarias del rol de Analista de Inteligencia de Amenazas internamente sin interacción con recursos externos. Analiza, visualiza y estructura archivos sensibles Malware o datos extrayendo características, artefactos e IoC usando diferentes módulos. La salida de...

raven

Raven - Mapa Avanzado de Amenazas Cibernéticas Simplificado, personalizable y adaptable. Usa D3.js con TOPO JSON, tiene 247 países, 100,000 ciudades, y puede usarse en un entorno aislado ¡sin búsquedas externas! Estructura Sin conexión - Demo Firefox, Chrome o Safari En vivo - Regresión 500 ataqu...

bofhound

ESTE REPO YA NO ESTÁ ACTIVO ⛔🚧 Este repo ya no tiene mantenimiento. Para enviar un issue, pull request, u obtener la versión más reciente, dirígete a https://github.com/coffeegist/bofhound 🚧⛔ | / / / | /| | | | / \ | | | | | \ | | | \ | | | | | | | | | | || | | | | | | | | | | | | | .--. | | | | ...

EUVD-2026-96767

The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to delete arbitrary WordPress options, which can take the site offline and strip every user of their role...

CVE-2026-85121

The Insurify WordPress plugin, in versions through 1.0 , is vulnerable to unauthenticated arbitrary option creation and overwriting. The root cause is a lack of authorisation and nonce checks on an AJAX action, specifically identified in the context of saveemailtemplatedesign. An attacker can use...

pmkidcracker

Crackeador de PMKID WPA2 Este programa es una herramienta escrita en Python para recuperar la clave precompartida de una red WiFi WPA2 sin necesidad de desautenticación ni requerir que haya clientes en la red. Aprovecha la debilidad de ciertos puntos de acceso que anuncian el valor PMKID en el...

mfoc

MFOC è un'implementazione open source dell'attacco "offline nested" di Nethemba. Questo programma consente di recuperare le chiavi di autenticazione dalle carte MIFARE Classic. Si prega di notare che MFOC è in grado di recuperare le chiavi dal target solo se dispone di una chiave nota: quella...

CVE-2026-85121: Missing Authorization

The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to create and overwrite arbitrary WordPress options with request data, which can take the site offline and deactivate all of its Insurify WordPress...

PT-2026-110038

Name of the Vulnerable Software and Affected Versions Insurify WordPress plugin version 1.0 Description An issue exists where an AJAX action lacks authorization and nonce checks. This allows unauthenticated users to create or overwrite arbitrary WordPress options using request data, which can...

PT-2026-110041

Name of the Vulnerable Software and Affected Versions Insurify WordPress plugin version 1.0 Description An issue exists where an AJAX action lacks authorization and nonce checks. This allows unauthenticated users to delete arbitrary WordPress options, which can result in the website being taken...

CVE-2026-106230

An incorrect reference resolution flaw was found in the Offline component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/520507737...

CVE-2026-107623

A flaw was found in the OIDC Dynamic Client Registration DCR component of Keycloak. A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses. When a client performs a standard update, this missing information causes the settin...

CVE-2026-107623

A flaw was found in the OIDC Dynamic Client Registration DCR component of Keycloak. A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses. When a client performs a standard update, this missing information causes the settin...

CVE-2026-107623

A flaw exists in the OIDC Dynamic Client Registration (DCR) component of Keycloak . A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses. When a client performs a standard update, this missing information causes the settin...

EUVD-2026-95034

A flaw was found in the OIDC Dynamic Client Registration DCR component of Keycloak. A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses. When a client performs a standard update, this missing information causes the settin...

CVE-2026-107623 Keycloak-services: keycloak-services: oidc dcr read-modify-write silently disables offline token revocation

A flaw was found in the OIDC Dynamic Client Registration DCR component of Keycloak. A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses. When a client performs a standard update, this missing information causes the settin...

CVE-2026-107623

A flaw was found in the OIDC Dynamic Client Registration DCR component of Keycloak. A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses. When a client performs a standard update, this missing information causes the settin...

CVE-2026-107623: Missing Authorization

A flaw was found in the OIDC Dynamic Client Registration DCR component of Keycloak. A bug in the response serialization causes the backchannel logout offline token revocation setting to be omitted from responses. When a client performs a standard update, this missing information causes the settin...