Dagon

Dagon - Manipulación Avanzada de Hashes Llamado así por el príncipe del Infierno, Dagon day-gone es un sistema avanzado de cracking y manipulación de hashes, capaz de realizar fuerza bruta en múltiples tipos de hash, crear diccionarios de fuerza bruta, verificación automática de algoritmos de has...

poro

poro Descripción Escanea activos accesibles públicamente en tu entorno de AWS Servicios cubiertos por esta herramienta: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro también verifica si una etiqueta que especifiques está aplicada en los recursos públicos...

xalgorix

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

CVE-2025-7955

CVE-2025-7955 RingCentral Communications 1.5 - 1.6.8 - Missing Server‑Side Verification to Authentication Bypass via ringcentraladminlogin2faverify Function 🚨 CVE-2025-7955 | RingCentral Communications WordPress Exploit 📝 Vulnerability Overview CVE: CVE-2025-7955 Affected Plugin: RingCentral...

keimpx

Introducción keimpx es una herramienta de código abierto, publicada bajo la Licencia Apache 2.0. Se puede usar para verificar rápidamente credenciales válidas en una red a través de SMB. Las credenciales pueden ser: Combinación de usuario / contraseña en texto plano. Combinación de usuario / hash...

CVE-2024-24139

CVE-2024-24139: Login System with Email Verification SQL Injection Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24139.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24139/blob/main/CVE-2024-24139.md...

CVE-2017-10271

CVE-2017-10271 CVE-2017-10271 Weblogic vulnerability verification PoC Useage: python weblogic.py -u 'http://...:7001/wls-wsat/CoordinatorPortType' -c 'touch /tmp/test' Click me to download the patch...

pulledpork

PulledPork Herramienta de gestión de reglas para Snort y Suricata desde Google code Encuéntranos en Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk y el equipo de PulledPork. ¡Gracias por elegir PulledPork! Este archivo proporciona una guía básica sobre el uso de...

CVE-2023-29409

CVE-2023-29409 $ openssl genrsa -out ca-key.pem 2048 $ openssl req -x509 -new -nodes -key ca-key.pem -sha256 -days 100000 -out ca.pem \ -addext 'keyUsage=keyCertSign' \ -subj '/CN=Root CA' $ go run main.go server in the background $ go run main.go client causes high cpu load on client $ go run...

CVE-2024-24919-Exploit

CVE-2024-24919-Exploit CVE-2024-24919 exploit that checks more files for better visibility...

cosign

cosign Firma di container OCI e altri artefatti utilizzando Sigstore! Cosign mira a rendere le firme infrastruttura invisibile. Cosign supporta: "Firma senza chiave" con l'autorità di certificazione Fulcio del bene pubblico Sigstore e il registro di trasparenza Rekor predefinito Firma hardware e...

mlkem-native

mlkem-native mlkem-native is a secure, fast, and portable C90^C90 implementation of ML-KEM^FIPS203. It is a fork of the ML-KEM reference implementation^REF. All C code in mlkem/src/ and mlkem/src/fips202/ is proved memory-safe no memory overflow and type-safe no integer overflow using CBMC^CBMC...

CVE-2021-26084-Nuclei-template

CVE-2021-26084-Nuclei-template This nuclei template is to verify the vulnerability without executing any commands to the target machine...

PT-2026-110167

hyper-mcp through 0.8.3 contains an improper signature verification vulnerability that allows attackers to load malicious WebAssembly plugins because cosign verify args accepts any signer identity and OIDC issuer by default. Attackers controlling a plugin image reference can sign a malicious imag...

PT-2026-110166

hyper-mcp through 0.8.3 contains a signature verification bypass vulnerability in load wasm in src/wasm/oci.rs that verifies the Cosign signature of a separately resolved tag rather than the loaded manifest. Attackers controlling registry responses for the tag can serve an unsigned malicious...

Detecting-the-patch-of-CVE-2018-1010

Detecting-the-patch-of-CVE-2018-1010 This C++ code developed on Visual Studio 2017. This program works with cmd's commands. In this program first, we check your operating system version and then according to Microsoft's notification checks whether you have installed the patch for CVE-2018-1010...

CVE-2022-21449

CVE 2022 21449 python implementation This project allows you to: Plot an elliptic curve with desired parameters, over a finite field or not Generate a key pair from a given elliptic curve Encrypt / Decrypt a message via ECIES Sign / verify using ECDSA Simulate an exploitation of CVE 2022 21449 Fi...

CVE-2026-106610

Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7...

EUVD-2026-96397

Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads allows Exploitation of Trusted Credentials.This issue affects Sell Downloads: from n/a through 1.2.3...

CVE-2026-106610 WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7...