Project-Pwnag0dchi

Project Pwnag0dchi 创建这个项目是因为很多人都询问我使用的自定义插件和配置。按照本指南，你的 Pwnagotchi 将在约5分钟内与我在社交媒体和 YouTube 视频中的外观 完全 一致。 你还会在这里找到一份完整的 Pwnagotchi 新手构建指南以及一些常见的故障排除方法。 我会尽可能持续更新。如果你有任何建议或在使用本项目时遇到问题，请提交一个 GitHub Issue，我们可以一起讨论！ 目录 Project Pwnag0dchi 修改 功能特性 展示与教程视频 安装 Project Pwnag0dchi 登录凭据 Web UI 需要更改的初始设置...

RLSA-2026:74457 Moderate: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter...

wifit3

wifit3 Un auditor Wi-Fi USB independiente para Linux, Windows y macOS. Se requiere al menos uno de los adaptadores USB compatibles. ¿Por qué? Multiplataforma: Se ejecuta de forma idéntica en Linux, macOS y Windows. El paraíso de los controladores inalámbricos: La pila inalámbrica integrada evita ...

CVE-2025-58179-Check

CVE-2025-58179-Check CVE-2025-58179-Check es un script simple de Python para verificar la vulnerabilidad SSRF Server-Side Request Forgery / Content Spoofing en el endpoint /image del framework Astro. Esta vulnerabilidad se rastrea como GHSA-qpr4-c339-7vq8 y CVE-2025-58179. Antecedentes de la...

pi-pwnbox-rogueap

Pi-PwnBox 🚀 -RogueAP 📡 基于树莓派与Alfa WiFi USB适配器的自製（无头）PwnBox / RogueAP WiFi黑客速查表与思维导图 💡 设计用途： 现场红队演练 WiFi安全评估 WiFi攻击练习 目录 Pi-PwnBox-RogueAP 使用设备 WiFi USB适配器概览 要求与兼容性 安装 PwnBox网络配置 无线专用管理网络 局域网（无线或有线） PwnBox远程访问 使用说明 WiFi黑客速查表与思维导图 故障排除 可能升级 设备使用 树莓派 3 B+、树莓派 4 或 树莓派 5 Micro SD存储卡 64 GB（建议Class...

pico-usb-wifi

= pico-usb-wifi :toc: macro :toclevels: 3 :idprefix: :idseparator: - pico-usb-wifi es un firmware para la Raspberry Pi Pico W que la convierte en un adaptador USB Wi-Fi sin controlador, enumerándose como un dispositivo USB CDC-NCM. :figure-caption: Slop de IA .Diagrama de pico-usb-wifi...

Astro Cloudflare Adapter - Server Side Request Forgery

Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optimization endpoint doesn't check the URL...

GO-2026-6505 vulnerabilities

Vulnerabilities for packages: minio, db-operator, argocd-image-updater, ksops, amazon-cloudwatch-agent-operator, clickhouse-operator, datadog-operator, sqlexporter, tekton-pipelines, net-kourier, argo-rollouts, kuma, azuredisk-csi, kots, dex, percona-server-mongodb-operator, istio,...

Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak System

Summary Multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-44486 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios’ Node.js HTTP adapter can leak proxy credentials to ...

CVE-2026-104411

Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scripts by uploading files served with extension-derived content types on the default local storage adapter. Attackers can upload script-bearing files to the site's domain to...

CVE-2026-104411

Ghost versions 6.22.1 before 6.64.0 are vulnerable to a stored cross-site scripting (XSS) vulnerability. The flaw exists because the default local storage adapter allows staff users to upload files served with extension-derived content types , enabling them to host malicious scripts. An attacker ...

EUVD-2026-91422

Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scripts by uploading files served with extension-derived content types on the default local storage adapter. Attackers can upload script-bearing files to the site's domain to...

CVE-2026-104411 Ghost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploads

Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scripts by uploading files served with extension-derived content types on the default local storage adapter. Attackers can upload script-bearing files to the site's domain to...

Moderate: Red Hat Security Advisory: ghostscript security update

An update for ghostscript is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter

A flaw was found in Ghostscript. This heap-based buffer overflow vulnerability in the JPEG 2000 output adapter allows an attacker to cause memory corruption by supplying a specially crafted PDF file. The crafted PDF contains a JPEG 2000 image with mismatched component subsampling factors...

RHEL 9 : ghostscript (RHSA-2026:74457)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:74457 advisory. The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats...

quick-fix-cve-2024-38063

quick-fix-cve-2024-38063 Script rápido de PowerShell para corregir cve-2024-38063 Donación Si quieres apoyar mi trabajo, puedes donarme en la siguiente dirección de Monero: 4B9WQivaHfd3miDfPKEfCianocGpBx9d8FXycz2vmNW3aBDVKHgkBd9Gmapt4RBVEpTwnehujsiUBBehUiLvnEHs7VFstCC O usando PayPal:...

Moderate: Red Hat Security Advisory: ghostscript security update

An update for ghostscript is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter

A flaw was found in Ghostscript. This heap-based buffer overflow vulnerability in the JPEG 2000 output adapter allows an attacker to cause memory corruption by supplying a specially crafted PDF file. The crafted PDF contains a JPEG 2000 image with mismatched component subsampling factors...

CVE-2026-37236 affecting package prometheus-adapter for versions less than 0.12.0-10

CVE-2026-37236 affecting package prometheus-adapter for versions less than 0.12.0-10. A patched version of the package is available...