cpanel-control-plane-exposure-check

Verificación de Exposición del Plano de Control de cPanel Utilidad ligera de validación de seguridad para identificar interfaces administrativas de cPanel, WHM y webmail expuestas a internet en superficies de ataque externas. La utilidad realiza validación de servicios, clasificación de exposició...

CTT-enhanced-Apache-mod_auth_digest-timing-attack-exploit

CTT-enhanced-Apache-modauthdigest-timing-attack-exploit CTT-Enhanced Apache modauthdigest Timing Attack — CVE-2026-33006 Remote Digest Authentication Bypass → 33-Layer Temporal Timing Attack Original vulnerability: Apache HTTP Server 2.4.66 modauthdigest timing leak CTVSS Original: 4.8 Medium...

CVE-2026-26717

CVE-2026-26717: HMAC Timing Attack in OpenFUN Richie LMS Author: Elvin Latifli CVE ID: CVE-2026-26717 Severity: Medium CVSS 3.1: 4.8 — AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Product: OpenFUN Richie all versions prior to commit a1b5bbd Affected Component: src/richie/apps/courses/api.py —...

CVE-2024-53522

CVE-2024-53522 Exploit PoC for CVE-2024-53522 This repository contains the Proof of Concept PoC for CVE-2024-53522 , a vulnerability discovered by Safecloud Co., Ltd. For detailed information about the vulnerability, please refer to our blog post: CVE-2024-53522: HOSxP Software 0day Discover &...

firewall-cve

firewall-cve Vulnerabilidad de omisión de la función de seguridad de las reglas de firewall de AppContainer de Windows CVE-2021-41338 Vulnerabilidad de seguridad publicada: 12 de octubre de 2021 CNA asignado: Microsoft MITRE CVE-2021-41338 CVSS:3.1 5.5 / 5.0 Vector de ataque Local Complejidad de...

CVE-2021-46702

CVE-2021-46702 Descripción: Tor Browser 9.0.7 en Windows 10 build 10586 es vulnerable a la divulgación de información. Esto podría permitir a atacantes locales eludir la función de anonimato prevista y obtener información sobre los servicios onion visitados por un usuario local. Esto se puede...

CVE-2026-25050

CVE-2026-25050 – Authentication Timing Attack This repository contains a Proof of Concept demonstrating a timing attack affecting the NativeAuthenticationStrategy.authenticate method. This PoC is provided as a technical demonstration for blog / research purposes. Vulnerability The authentication...

sdwan-scanner-CVE-2026-20127

Escáner de Exposición Cisco SD-WAN CVE-2026-20127 Una herramienta especializada de fingerprinting pasivo diseñada para identificar instancias de Cisco SD-WAN vManage / Viptela expuestas a internet. Esta herramienta ayuda a investigadores de seguridad y administradores de sistemas a gestionar su...

Linux Distros Unpatched Vulnerability : CVE-2026-92413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdfopenfilter of the file...

Ubuntu 22.04 LTS / 24.04 LTS : GNU Guix vulnerability (USN-8773-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8773-1 advisory. It was discovered that GNU Guix incorrectly made build outputs accessible to local users before their file metadata was finalized. A local...

The vulnerability of the MikroTik RouterOS operating system, related to errors in verifying the cryptographic signature, allows a hacker to replace the TLS server.

The vulnerability of the MikroTik RouterOS operating system is related to errors in verifying the cryptographic signature. Exploiting this vulnerability allows a malicious actor to perform TLS server substitution remotely...

CVE-2026-91839

credential newline injection permits local root code execution...

alsa-1.2.16.1-2.1 on GA media (moderate)

alsa-1.2.16.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:11783-1 Rating: moderate Cross-References: CVE-2026-90781 CVSS scores: CVE-2026-90781 SUSE : 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L CVE-2026-90781 SUSE : 4.8...

Linux Distros Unpatched Vulnerability : CVE-2026-92472

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gfnodedeactivateex of the file src/scenegraph/basescenegraph.c of the...

copy_fail_mitigation

copyfailmitigation 1. Este script intentará mitigar el ataque copyfail. CVE-2026-31431 2. Funciona en todas las plataformas basadas en Debian/Ubuntu y Arch, es decir, Kali, ParrotSec, BlackArch Uso: 3. cd 4. chmod +x copyfailmitigation.sh 5. Se recomienda ejecutarlo como root 6...

redsun-bluehammer-undefend-detection-pack

Paquete de Detección RedSun, BlueHammer, UnDefend y CrossFamily IMPORTANTE: Todo el código y la lógica de detección en este repositorio es generado por IA. No hay garantía de que estos scripts sean correctos, completos, seguros o adecuados para cualquier entorno. Utilice estos scripts completamen...

CVE-2026-5006

A flaw was found in HashiCorp Vault. An authenticated attacker can manipulate identity values in templated policy paths by injecting slash characters. This manipulation allows Vault to misinterpret policy paths, leading to unintended access to Vault resources and potential privilege escalation...

WinFlesher

Como si PingCastle saliera a tomar algo con Bloodhound, y de verdad decidieran ponerse a trabajar. 🍷 WinFlesher es un framework avanzado de evaluación de la superficie de ataque diseñado para analizar, evaluar y reportar sobre posturas de seguridad, rutas de ataque y estrategias de remediación en...

CVE-2026-92581 AVideo through 29.0 Like Counter Desynchronization via Array Parameter

In AVideo through 29.0, Like::construct performs counter arithmetic on raw request values before validation, allowing array-typed parameters to desynchronize stored votes from counters. Authenticated attackers can send array-typed like parameters followed by ordinary requests to drive video like...

windows-smb-vulnerability-framework-cve-2025-33073

Marco de Investigación de Vulnerabilidades del Cliente SMB de Windows Autor: cyberseallll Creado: 2025 Descripción General Desarrollé este marco de investigación para analizar y comprender CVE-2025-33073, una vulnerabilidad crítica de Elevación de Privilegios en el Cliente SMB de Windows. Esta...