evtx

EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...

pulledpork

PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...

zBang

zBang es una herramienta especial de evaluación de riesgos que detecta posibles amenazas de cuentas privilegiadas en la red escaneada. Las organizaciones y los equipos rojos pueden utilizar zBang para identificar posibles vectores de ataque y mejorar la postura de seguridad de la red. Los...

Invoke-SessionHunter

Invoke-SessionHunter Retrieve and display information about active user sessions on remote computers. No admin privileges required. The tool leverages the remote registry service to query the HKEYUSERS registry hive on the remote computers. It identifies and extracts Security Identifiers SIDs...

CVE-2020-0665

CVE-2020-0665 - Bypass de Filtro SID Prueba de Concepto para CVE-2020-0665, que permite eludir el Filtrado SID en Bosques de Active Directory Ataque entre Bosques. Requisitos para el ataque La máquina Controladora de Dominio objetivo no debe tener parches posteriores a febrero de 2020. Haber...

wodat

wodat Windows Oracle Database Attack Tool Puerto simple de la popular Oracle Database Attack Tool ODAT https://github.com/quentinhardy/odat a C .Net Framework. Créditos a https://github.com/quentinhardy/odat ya que gran parte de la funcionalidad está portada desde su código. Realizar ataques...

CVE-2024-3495-POC

CVE-2024-3495-POC El complemento Country State City Dropdown CF7 de WordPress versiones hasta 2.7.2 es vulnerable a inyección SQL a través de los parámetros 'cnt' y 'sid'. El escape insuficiente y la falta de preparación en la consulta SQL permiten a atacantes no autenticados añadir consultas,...

GlobalUnProtect

GlobalUnProtect Herramienta PoC para descifrar y recopilar la configuración de GlobalProtect, cookies y archivos HIP de instalaciones de cliente en Windows. Entrada de blog: https://rotarydrone.medium.com/4a1d8fc7773e Uso Ejecutar como standalone o en memoria mediante execute-assembly o...

PT-2026-90354

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the setuid or setgid bit set and is written to, the VFS strips those bits and issues a setattr with ATTR KILL SUID/ATTR KILL...

CVE-2026-81576

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

CVE-2026-81576 Improper Authentication of Session Handles

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

CVE-2026-81576 Improper Authentication of Session Handles

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

EUVD-2026-66983

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

CVE-2026-81576

CodeMeter Runtime (WIBU), when configured as a server in versions before 8.41a and 9.10 , issues a per-connection session handle and relies on a cryptographically weak SID as the sole authenticator. An attacker with network access can brute-force the SID , recover another session's handle number,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: SELinux: The use of both GFPKERNEL and GFPATOMIC in convertcontext was enabled. The following warning was triggered in a hardware environment: SELinux: Converting 162 SID table entries... BUG: The sleeping function was called...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100498)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100498 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099718)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099718 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: harden POSIX SID length parsing posixinfosidsize reads sid1 to obtain the subauthori...

DEBIAN-CVE-2026-68097

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities setntacldacl validates sid.numsubauth before copying an ACE, but does not verify that the declared ACE size contains all sub-authorities described by that field. An undersized...

UBUNTU-CVE-2026-68097

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities setntacldacl validates sid.numsubauth before copying an ACE, but does not verify that the declared ACE size contains all sub-authorities described by that field. An undersized...

CVE-2026-68097

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities setntacldacl validates sid.numsubauth before copying an ACE, but does not verify that the declared ACE size contains all sub-authorities described by that field. An undersized...