hashID

hashID | hash-identifier Identifica los diferentes tipos de hashes utilizados para cifrar datos y, especialmente, contraseñas. Esto reemplaza a hash-identifier , ¡que está desactualizado! hashID es una herramienta escrita en Python 3 que permite identificar más de 220 tipos de hash únicos mediant...

json_cve_2020_10663

Solución alternativa para CVE-2020-10663 vulnerabilidad en la gema json La gema json tiene una vulnerabilidad de seguridad CVE-2020-10663. Al analizar ciertos documentos JSON, la gema json puede ser forzada a crear objetos arbitrarios en el sistema de destino. Se recomienda encarecidamente a los...

RTSPServer-Code-Execution-Vulnerability

Vulnerabilidad de ejecución de código en Live Networks LIVE555 streaming media RTSPServer lookForHeader CVE-2018-4013 Resumen Existe una vulnerabilidad de ejecución de código explotable en la funcionalidad de análisis de paquetes HTTP de la biblioteca del servidor RTSP de LIVE555. Un paquete...

CVE-2024-34102

CVE-2024-34102 Las versiones 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 y anteriores de Adobe Commerce se ven afectadas por una vulnerabilidad de Restricción Incorrecta de Referencia a Entidades Externas XML 'XXE' que podría resultar en la ejecución de código arbitrario. Un atacante podría explotar esta...

CVE-2026-92238

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

shadow

shadow :: jemalloc 之奥秘 shadow 是一个 jemalloc 堆漏洞利用框架。它的设计目标是独立于使用 jemalloc 作为堆分配器的目标应用程序（无论是 Android 的 libc、Firefox、FreeBSD 的 libc、独立 jemalloc，还是其他任何实现）。当前版本（2.0）已在以下目标上进行了广泛测试： Android 6-9 libc（ARM32 和 ARM64） Firefox（x86 和 x86-64）运行于 Windows 和 Linux 除了工具的源代码之外，此仓库还包含关于设置 Android 用户态调试环境以使用 shadow...

bandiview-7.05-vuln-PoC

bandiview-7.05-vuln-PoC Este repositorio contiene un PoC para las vulnerabilidades descubiertas en Bandiview 7.05 mediante fuzzing CVE-2024-45870 Vulnerabilidad DoS al analizar archivos JXR CVE-2024-45871 Vulnerabilidad DoS al analizar archivos PSD CVE-2024-45872 Desbordamiento de búfer en la pil...

CVE-2026-92239

CVE-2026-92239 is a buffer overrun vulnerability in Thunderbird's IMAP handling. A maliciously constructed IMAP line can trigger an out-of-bounds buffer read , potentially exposing sensitive data to an attacker who controls the IMAP response. The issue was fixed in Thunderbird 140.16 . Additional...

EUVD-2026-79242

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16...

CVE-2026-92238

CVE-2026-92238 affects Thunderbird , the Mozilla email client. The vulnerability involves ambiguous parsing of mail headers , where a maliciously constructed header could cause multiple fields to be parsed as a single field, or lead to potential memory safety violations . The issue was fixed in T...

CVE-2026-92238 Ambiguous parsing of mail headers

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2025-47917

Exploit CVE-2025-47917 Use-After-Free en mbedTLS Autor : Byte Reaper Telegram : @ByteReaper0 CVE : CVE-2025-47917 Vulnerabilidad : Use-After-Free UAF en el análisis de nombres de mbedTLS 3.6.4 Descripción Este repositorio contiene un exploit que apunta a una vulnerabilidad Use-After-Free en la...

zeek-elf

Un paquete ELF de Zeek Este paquete implementa: ELF ¡En resumen! Si tienes zkg y ya has ejecutado... root@kitploit: zkg autoconfig ... entonces puedes instalar este paquete así: root@kitploit: sudo zkg install zeek-elf Ahora, en cualquier script de Zeek, solo carga el plugin y "simplemente...

zeek-openvpn

zeek::openvpn ESTO ESTÁ OBSOLETO EN FAVOR DE https://github.com/corelight/zeek-spicy-openvpn Un plugin para detectar y analizar OpenVPN en los siguientes modos: UDP con TLS UDP con TLS y TLS Auth TCP con TLS TCP con TLS y TLS Auth Hasta ahora esto no detectará el modo de clave compartida para UDP...

CVE-2026-92177

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-92178

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...

CVE-2026-92179

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-19886

OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-19885

OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the targ...

CVE-2026-19781

Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the targe...