224431 matches found
CVE-2025-0108-SCAN
CVE-2025-0108 PAN-OS: Bypass de autenticación en la interfaz web de gestión Un bypass de autenticación en el software PAN-OS de Palo Alto Networks permite que un atacante no autenticado con acceso de red a la interfaz web de gestión omita la autenticación que de otro modo exige la interfaz web de...
quiver
Quiver : A Meta-Tool for Kali Linux Quiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and...
nishang
Nishang Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. By Nikhil Mittal Founder of Altered Security - Hands-on red team and...
frida-wshook
frida-wshook frida-wshook 是一个分析和指令注入工具，它使用 frida.re 来钩取恶意脚本文件（通过 WScript/CScript 运行）常用的函数。 该工具拦截 Windows API 函数，而不在目标脚本语言中实现函数桩或代理。这使得它能够支持分析几种不同的脚本类型，例如： .js（JScript） .vbs（VBScript） .wsf（WSFile）（初步支持/测试。不支持特定作业） 默认情况下，脚本文件使用 cscript.exe 运行，并会输出： COM ProgIds DNS 请求 Shell 命令 网络请求...
ShellShock-CGI-Scan
ShellShock-CGI-Scan Un script, en C, para comprobar si los scripts CGI son vulnerables a CVE-2014-6271 El Bug de Bash. Opciones: -i dirección IP local -p puerto de escucha -l lista de sitios -t tiempo de espera de conexión Por defecto: 15s Ejemplo: $ ./Scanner -i 127.0.0.1 -p 31337 -l sites.txt -...
CVE-2021-40845
CVE-2021-40845 I. VULNERABILIDAD AlphaWeb XE: carga insegura de archivos autenticada que conduce a RCE II. REFERENCIA CVE CVE-2021-40845 III. PROVEEDOR https://www.zenitel.com/ IV. DESCRIPCIÓN La parte web del servidor de audio Zenitel AlphaCom XE hasta la versión 11.2.3.10, denominada AlphaWeb X...
ATP-PowerShell-Scripts
ATP-PowerShell-Scripts Scripts de PowerShell firmados por Microsoft Lista de todos los scripts firmados disponibles en C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection\DataCollection Accediendo al archivo Por defecto, los archivos no se pueden acceder. Necesitas el privilegio ...
Fermion
Fermion Fermion es una aplicación de electron que envuelve frida-node y monaco-editor. Ofrece un entorno totalmente integrado para prototipar, probar y refinar scripts de Frida a través de una única interfaz. Con la integración de Monaco vienen todas las funciones que esperarías de Visual Studio...
MoreImpacketExamples
MoreImpacketExamples Este repositorio contiene algunos scripts cortos de Python creados con la librería Impacket. El objetivo principal de este proyecto es ayudarme a mí mismo y a otros que buscan pasar de usar los ejemplos proporcionados de impacket a modificar/crear sus propios scripts. Estos...
edk2
Проект EDK II Современная, многофункциональная, кроссплатформенная среда разработки прошивок для спецификаций UEFI и PI с сайта www.uefi.org. .. image::...
CVE-2026-103888
The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 4.4.0 . The root cause is insufficient input sanitization and output escaping of the 'woosq-redirect' parameter. Unauthenticated attackers can in...
CVE-2023-46870
CVE-2023-46870 Nordic Semiconductor 的 nRF Sniffer for Bluetooth LE 版本 3.0.0、3.1.0、4.0.0、4.1.0 和 4.1.1 设置了不正确的文件权限，允许攻击者通过修改 bash 和 Python 脚本进行权限提升和代码执行。 关键词： 本地权限提升（LPE）、代码执行 受影响平台： Linux, MacOS 受影响文件： extcap/nrfsnifferble.py, extcap/nrfsnifferble.sh, extcap/SnifferAPI/.py 描述 nRF Sniffer for...
EUVD-2026-91895
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'orderby' parameter in all versions up to, and including, 4.4.7 due to insufficient input sanitization and output escaping. This makes it...
CVE-2026-92538
The LearnPress – WordPress LMS Plugin for WordPress (versions up to and including 4.4.7 ) is vulnerable to Reflected DOM-Based Cross-Site Scripting . The flaw exists in the 'orderby' parameter due to insufficient input sanitization and output escaping. An unauthenticated attacker can inject arbit...
Langflow <= 1.0.12 - Remote Code Execution
Langflow 0.6.19 contains a remote code execution caused by accepting untrusted Python scripts in the /api/v1/customcomponent endpoint, letting remote attackers execute arbitrary code, exploit requires access to the endpoint and untrusted script input. id: CVE-2024-37014 info: name: Langflow =...
CVE-2026-105090
Formbricks versions before 5.4.4 and 6 before 6.0.1 are vulnerable to stored XSS due to an insufficient permission check in the Custom Head Scripts feature. A workspace member with only readWrite permissions can bypass the intended Manage role restriction to configure scripts. These scripts execu...
CVE-2026-105090
Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head Scripts feature did not enforce the documented Manage permission boundary. A workspace member holding only readWrite permission could configure Custom Head Scripts on a survey, an operation the documentatio...
EUVD-2026-91874
Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head Scripts feature did not enforce the documented Manage permission boundary. A workspace member holding only readWrite permission could configure Custom Head Scripts on a survey, an operation the documentatio...
windbg_js_scripts
Scripts de JavaScript para WinDbg Instalar como una galería de WinDbg Clona el repositorio git clone https://github.com/hugsy/windbgjsscripts En windbgjsscripts\config.xml, edita las líneas Setting Name="LocalCacheRootFolder" para que reflejen la ruta local del repositorio. En WinDbg, carga el...