CVE-2026-86864

creationtimestamp| type| source ---|---|--- 2026-09-17 17:32:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7vdhr5tusie5q...

exploit-CVE-2016-10034

PHPMailer 5.2.18 Remote Code Execution PHPMailer is the world's most popular transport class, with an estimated 9 million users worldwide. Downloads continue at a significant pace daily. Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more PHPMailer...

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories

Attackers keep finding new keys. The funny part is that defenders keep inventing where to store them. This week, those keys sit in AI tools, exposed services, old bugs, weak logins, and software sold like a monthly subscription. Some attacks use new tricks. Others just reuse what was already lyin...

CVE-2023-24055_PoC

CVE-2023-24055 PoC KeePass 2.5x Bajo discusión y análisis... https://sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b/ https://sourceforge.net/p/keepass/feature-requests/2773/ Un atacante que tenga acceso de escritura al archivo de configuración de KeePass puede modificarlo e inyecta...

CVE-2025-32429-Checker

CVE-2025-32429 Vulnerability Checker A Python-based vulnerability scanner for detecting CVE-2025-32429 SQL injection vulnerability in XWiki platforms. Features Single Target Scanning : Check individual targets with -t option Bulk Scanning : Scan multiple targets from a file with -l option WAF...

CVE-2026-86071

creationtimestamp| type| source ---|---|--- 2026-09-17 17:31:17+00:00| seen| https://gist.github.com/alon710/697691f7d78bb4a6dd022b9c35afe5f3...

GHSA-89M4-43J5-VHHX

creationtimestamp| type| source ---|---|--- 2026-09-17 17:31:17+00:00| seen| https://gist.github.com/alon710/697691f7d78bb4a6dd022b9c35afe5f3...

aftermath

About Aftermath is a Swift-based, open-source incident response framework. Aftermath can be leveraged by defenders in order to collect and subsequently analyze the data from the compromised host. Aftermath can be deployed from an MDM ideally, but it can also run independently from the infected...

aftermath

Acerca de Aftermath es un framework de respuesta a incidentes de código abierto basado en Swift. Aftermath puede ser utilizado por defensores para recolectar y posteriormente analizar los datos del host comprometido. Aftermath puede ser desplegado desde un MDM idealmente, pero también puede...

ntfstool

ntfstool NTFSTool is a forensic tool focused on NTFS volumes. It supports reading partition info MBR, partition table, VBR but also information on Master File Table, Bitlocker encrypted volume, EFS encrypted files, USN journal and more. Download the latest binaries on AppVeyor or by checking the...

ntfstool

ntfstool NTFSTool es una herramienta forense centrada en volúmenes NTFS. Permite leer información de partición MBR, tabla de particiones, VBR así como información sobre Master File Table, volúmenes cifrados con Bitlocker, archivos cifrados con EFS, diario USN y más. Descarga los últimos binarios ...

Arecibo

Arecibo Endpoint para exfiltración fuera de banda DNS y HTTP Autores Juan Manuel Fernández @TheXC3LL y Pablo Martinez @Xassiz Exfiltración DNS Crear un nuevo token: root@kitploit: curl localhost:5000/generatedns "htoken": "c008b5dd22817c50441522f917c66743" Ahora puedes usar este token...

clusterd

clusterd clusterd is an open source application server attack toolkit. Born out of frustration with current fingerprinting and exploitation methods, clusterd automates the fingerprinting, reconnaissance, and exploitation phases of an application server attack. See the wiki for more information...

CVE-2026-76834

creationtimestamp| type| source ---|---|--- 2026-09-17 17:30:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvq6lez25l2f 2026-09-17 18:09:44+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvqas4yzw52r...

COPG

🎮 COPG The most advanced device & CPU spoofer for Android — bypass restrictions and unlock premium graphics, higher FPS and exclusive features on most games and apps. ✨ Why COPG? COPG is a Zygisk module that makes most games and apps believe they are running on a different, fully‑featured flagshi...

hoaxshell

hoaxshell ⚡ The latest version of this project is the HoaxShell standalone listener which comes with refreshed payload templates. Wou can also use it directly from https://revshells.com make sure to choose hoaxshell as the listener. ⚠️ As of 2022-10-18, hoaxshell is detected by AMSI...

linux-4.1.15_CVE-2023-28772

Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...

reconspider

Most Advanced Open Source Intelligence OSINT Framework ReconSpider ReconSpider is most Advanced Open Source Intelligence OSINT Framework for scanning IP Address, Emails, Websites, Organizations and find out information from different sources. ReconSpider can be used by Infosec Researchers,...

Grav: Stored XSS via quoted-attribute bypass in detectXss

Summary A page editor without admin.super can place an event handler after a inside a quoted attribute. Grav accepts and stores the page, then executes the handler in the application origin when a visitor opens it. Details Security::detectXss system/src/Grav/Common/Security.php:253 anchors the...

fulcio

Fulcio A Free-to-Use CA For Code Signing Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect OIDC identity, such as email address. Fulcio only issues short-lived certificates that are valid for 10 minutes. Public Instance Fulcio is in General...