RustScan

➡️ Discord | Guía de instalación | Guía de uso ⬅️ Rápido, inteligente, efectivo. 🤔 ¿Qué es esto? El escáner de puertos moderno. Encuentra puertos rápidamente 3 segundos en su máxima velocidad. Ejecuta scripts a través de nuestro motor de scripting compatible con Python, Lua, Shell. 🛠️ Instalación...

GraphQLmap

GraphQLmap GraphQLmap es un motor de scripting para interactuar con un endpoint GraphQL con fines de pruebas de penetración. Instalación Características y ejemplos Volcar un esquema GraphQL Interactuar con un endpoint GraphQL Ejecutar consultas GraphQL Autocompletar consultas Fuzzing de campos...

CVE-2024-43044-jenkins

Introducción Este es un exploit para CVE-2024-43044, una lectura arbitraria de archivos que permite a un agente obtener archivos del controlador. El exploit utilizará la vulnerabilidad para leer archivos y falsificar una cookie de remember-me para una cuenta de administrador y obtener acceso al...

nmap-nse-vulnerability-scripts

NMAP vulnerability scanning scripts A collection of nmap vulnerability scanning scripts to aid afforable detection and remediation. Background These scripts use the Nmap Scripting Engine NSE to implement checks for various vulnerabilities. References: https://nmap.org/book/man-nse.html...

sandmap

sandmap Description • How To Use • Command Line • Configuration • Requirements • Other • Contributing • License • Wiki Description sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning...

CVE-2025-49844

🚨 CVE-2025-49844 — “RediShell” Ejecución Remota de Código Crítica en la Tienda en Memoria Más Rápida del Mundo La programación Lua de Redis se convierte en la zona de aterrizaje perfecta post-autenticación. Atacante autenticado → script Lua manipulado → escape del sandbox → RCE total en el host ⚠️...

CVE-2023-27350

PaperCut NG/MG RCE CVE-2023-27350 A streamlined Bash exploit for CVE-2023-27350. This script automates authentication bypass, environment preparation, and command injection via the PaperCut printer scripting engine. Visual Proof Basic rce: Triggering a reverse shell: Quick Start root@kitploit:...

CVE-2018-8353-POC

CVE-2018-8353 POC Simple poc of CVE-2018-8353 Microsoft Scripting Engine Use After Free saurce : https://bugs.chromium.org/p/project-zero/issues/detail?id=1506...

CVE-2019-1367

0x00 Antecedentes Internet Explorer es un navegador web desarrollado por Microsoft Corporation. Cuenta con una enorme base de usuarios. El 23 de septiembre, Microsoft lanzó una actualización de seguridad de emergencia para corregir una vulnerabilidad de ejecución remota de código que afecta al...

CVE-2020-5902-NSE

This repository does not have a README...

nmap-nse-scripts

Repositorio para el desarrollo de NSE Nmap Scripting Engine. Encontrarás mis scripts incluyendo los no oficiales, librerías, recursos y otro material relacionado de mis talleres. TODO Finalizando la librería NSE de SMB2 Actualmente trabajando en la funcionalidad de modificación de contraseñas...

Linux Distros Unpatched Vulnerability : CVE-2026-18708

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to cause code they control to be executed withi...

Redis < 6.2.20 / 7.0.x < 7.2.11 / 7.4.x < 7.4.6 / 8.0.x < 8.0.4 / 8.2.x < 8.2.2 RCE (RediShell)

The version of Redis installed on the remote host is prior to 6.2.20, 7.0.x prior to 7.2.11, 7.4.x prior to 7.4.6, 8.0.x prior to 8.0.4, or 8.2.x prior to 8.2.2. It is, therefore, affected by a vulnerability as referenced in the security advisory. - A use-after-free vulnerability in the Lua...

Astra Linux – Vulnerability in Chromium

The use of after-free in V8 in Google Chrome before version 147.0.7727.55 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

EUVD-2026-62937

In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook while that action is listed as read-only, which could allow for command execution or other changes on a target system...

CVE-2026-76372

In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode playbook while that action is listed as read-only, which could allow for command execution or other changes on a target system...

CVE-2026-72712

A flaw was found in Nmap. A remote attacker can exploit this denial of service vulnerability by sending a specially crafted packet that includes a zero-length Transmission Control Protocol TCP option. This malformed packet forces the application to enter an infinite loop during packet processing,...

CVE-2026-18708

An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to cause code they control to be executed within the query scope of other users, through a specially crafted stored value processed during an internal maintenance cycle. This could...

CVE-2026-65813

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:06+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-12 01:01:02+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-12 12:49:33+00:00| seen|...

CVE-2026-18708

The CVE-2026-18708 issue affects MongoDB Server’s JavaScript scripting engine. An authenticated user with write privileges can cause code they control to run within the query scope of other users via a specially crafted stored value processed during an internal maintenance cycle. This can lead to...