CVE-2019-6693

CVE-2019-6693 Descifrar secretos de configuración de FortiGate Aviso original Aviso del proveedor Para appliances/VM de Fortigate con versiones inferiores a 6.2.0, 6.0.0 a 6.0.6, 5.6.10, los secretos de configuración se almacenan cifrados con una clave única. Para versiones superiores, el parámet...

CVE-2026-101919

A flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration kubeconfig secrets directly into the privileged control plane namespace without proper validation or sanitization. An authenticated user with cluster and secret creation permissions can exploit...

CVE-2026-101919

A flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration kubeconfig secrets directly into the privileged control plane namespace without proper validation or sanitization. An authenticated user with cluster and secret creation permissions can exploit...

CVE-2026-43867

camel-pqc Reproducción de deserialización insegura de metadatos de claves de AWS Secrets Manager CVE-2026-43867 Este proyecto demuestra una vulnerabilidad de deserialización en Java en el componente camel-pqc de Apache Camel, registrada como CVE-2026-43867...

jwt-cracker

jwt-cracker Simple cracker de fuerza bruta para tokens JWT HS256, HS384 y HS512. Efectivo solo para vulnerar tokens JWT con secretos débiles. Recomendación : utiliza secretos largos y fuertes o tokens RS256. Instalación Con npm: npm install --global jwt-cracker Uso Desde la línea de comandos:...

nhi-zero-trust-bypass

Proyecto: Explotación de Vulnerabilidades de Protocolo para Manipular Secretos NHI y Bypass de Políticas de Confianza Cero Capturas de Pantalla A continuación se muestran capturas de pantalla reales de la demostración. Para más, consulte screenshots/README.md. 1. Exploit DNS Caída de BIND A...

botb

Salir de la Caja BOtB BOtB es una herramienta de análisis y explotación de contenedores diseñada para ser utilizada por pentesters e ingenieros, además de ser compatible con CI/CD usando tecnologías CI/CD comunes. ¿Qué hace? BOtB es una herramienta de línea de comandos que te permite: Explotar...

SMBSR

¡ALTO AHÍ! ¡Esta herramienta ya no se mantiene! Se ha decidido fusionar las funcionalidades de SMBSR y RSMBI. Por favor, consulta SMBAT SMBSR - ¿Qué es eso? Bueno, SMBSR es un script de Python que, dado un CIDR/IP/archivoIP/HOSTNAMEs, enumera todos los servicios SMB en escucha 445 entre los...

POC_CVE-2026-42880

CVE-2026-42880 — Exposición de Secretos de ArgoCD mediante ServerSideDiff Un entorno de laboratorio para reproducir y detectar CVE-2026-42880 , una vulnerabilidad crítica en Argo CD donde el manejador gRPC ServerSideDiff expone datos de Secretos de Kubernetes a usuarios de solo lectura. Resumen d...

EUVD-2026-92131

A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function processsinglesecret of the file src/handler.py of the component AssumeRole Handler. Such manipulation of the argument externalid leads to incorrect permission assignment. The attack can be...

CVE-2026-105165

A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function processsinglesecret of the file src/handler.py of the component AssumeRole Handler. Such manipulation of the argument externalid leads to incorrect permission assignment. The attack can be...

CVE-2026-105165 devopspolis secrets-replicator AssumeRole handler.py process_single_secret permission assignment

A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function processsinglesecret of the file src/handler.py of the component AssumeRole Handler. Such manipulation of the argument externalid leads to incorrect permission assignment. The attack can be...

CVE-2026-105165 devopspolis secrets-replicator AssumeRole handler.py process_single_secret permission assignment

A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function processsinglesecret of the file src/handler.py of the component AssumeRole Handler. Such manipulation of the argument externalid leads to incorrect permission assignment. The attack can be...

CVE-2026-105165

The devopspolis secrets-replicator (versions up to 0.4.0 ) is vulnerable to an issue in the AssumeRole Handler component. Specifically, the process_single_secret function in src/handler.py allows for incorrect permission assignment due to the manipulation of the external_id argument. This vulnera...

SrHollow

SrHollow LSA secrets extraction, reuse a preexisting VSS shadow copy + inline regf parser + AES-256 LSA decrypt via bcrypt.dll. Chain in 6 steps 1. Enumerate\GLOBAL?? via NtOpenDirectoryObject + NtQueryDirectoryObject. Pick the highest-numbered HarddiskVolumeShadowCopyN. 2. If none exists , fall...

Windmill < 1.603.3 - SQL Injection

Windmill versions 1.276.0 through 1.603.2 contain an authenticated SQL injection vulnerability in the folder owner management endpoint. The addowner API endpoint passes user-supplied input directly into a SQL query without sanitization, enabling JSONB path injection. An authenticated user with...

Pre-Auth Takeover of Build Pipelines in GoCD

GoCD contains a critical information disclosure vulnerability whose exploitation allows unauthenticated attackers to leak configuration information including build secrets and encryption keys. id: CVE-2021-43287 info: name: Pre-Auth Takeover of Build Pipelines in GoCD author: dhiyaneshDk severity...

Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-url` Annotation

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-url Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets...

PT-2026-104651

A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function process single secret of the file src/handler.py of the component AssumeRole Handler. Such manipulation of the argument external id leads to incorrect permission assignment. The attack can be...

Metasploit-Module-TFM

Módulo Personalizado de Metasploit para CVE 2023-2728 y CVE 2024-3177 Descripción Este módulo personalizado explota CVE 2023-2728 y CVE 2024-3177 en versiones de Kubernetes que son vulnerables a cada uno de ellos por ejemplo, v1.27.2 es vulnerable a ambos, ambos relacionados con la evasión de la...