CVE-2026-108770 Appwrite Browser Screenshot Service Get.php PublicHostname server-side request forgery

A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request...

CVE-2026-108769 zhayujie CowAgent Markdown Rendering Markdown.tsx denial of service

A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation results in denial of service. It is possible to launch the attack remotely. The exploit has been released to the public...

CVE-2025-29093-Arbitrary-File-Upload

CVE-2025-29093-Arbitrary-File-Upload This repository reveals a security vulnerability discovered in Motivian Content Management System v.41.0.0. CVE-2025-29093: Arbitrary File Upload This vulnerability was reported to the vendor in accordance with responsible disclosure practices, and to MITRE,...

CVE-2025-32407

CVE-2025-32407 Proof of concept for CVE-2025-32407: a misconfiguration in the TLS certificate validation of the Samsung Galaxy Watch app "Samsung Internet for Galaxy Watch" version 5.0.9. Description The Galaxy Watch app "Samsung Internet for Galaxy Watch" version 5.0.9, available up until Samsun...

nuvola

nuvola nuvola con la n minúscula es una herramienta para volcar y realizar análisis de seguridad automáticos y manuales sobre configuraciones y servicios de entornos AWS, utilizando reglas predefinidas, extensibles y personalizadas creadas con una sintaxis YAML simple. La idea general detrás de...

CVE-2025-70342

CVE-2025-70342: Intercepción de Credenciales mediante Named Pipe en erase-install Resumen erase-install anterior a v40.4 commit 2c31239 escribe la salida de credenciales de swiftDialog en una ruta fija /var/tmp/dialog.json. En Macs con Apple Silicon, las credenciales de administrador ingresadas...

CVE-2023-1326-PoC

CVE-2023-1326-PoC A proof of concept for CVE-2023–1326 in apport-cli 2.26.0 This vulnerability is privilege escalation in apport-cli 2.26.0, similar to CVE-2023–26604, this vulnerability only works if assign in sudoers: A privilege escalation attack was found in apport-cli 2.26.0 and earlier whic...

CVE-2023-38408

CVE-2023-38408 Slide and source code for CS-782 attack presentation...

CVE-2023-46954

CVE-2023-46954 SQL Injection vulnerability in Relativity Server 2022 v.12.1.537.3 Patch 2 and earlier allows a remote attacker to execute arbitrary code via the name parameter. Vulnerability Type SQL Injection Vendor of Product Relativity ODA LLC Affected Product Code Base Relativity Server 2022...

reconspider

El Marco de Inteligencia de Fuentes Abiertas OSINT Más Avanzado ReconSpider ReconSpider es el marco de Inteligencia de Fuentes Abiertas OSINT más avanzado para escanear direcciones IP, correos electrónicos, sitios web, organizaciones y obtener información de diferentes fuentes. ReconSpider puede...

CVE-2018-5353

CVE-2018-5353 Zoho ManageEngine ADSelfServicePlus Client Privilege Escalation/RCE Information Vendor: Zohocorp Product: ManageEngine ADSelfServicePlus Versions Affected: Before 5.5 build 5517 Researcher: Jason Juntunen aka @missing0x00 https://github.com/missing0x00 CVSS: 8.8 Description The cust...

EUVD-2026-97122

A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the function json.loads of the component Streaming Tool-Call Argument Handler. The manipulation leads to allocation of resources. It is possible to initiate the attack remotely. The exploit is publicly...

android_hid

androidhid Usa Android como Rubber Ducky contra un dispositivo Android o PC objetivo Ataque HID usando Android Usando Android como Rubber Ducky contra Android o Windows. Esta no es una técnica nueva, solo una demostración de cómo realizar un ataque HID usando Android en lugar de un rubber ducky...

noir

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface. Documentation • Installation • Usage • Github Action • Contributing • Changelog Noir is a SAST tool that reads source code and extracts the endpoints an application exposes — paths, methods, parameters, headers, cookies...

CVE-2022-37703

Suggested description In Amanda 3.5.1, an information leak vulnerability was found in calcsize SUID binary. The attacker can abuse the vulnerability to know if a directory exist or not anywhere in the fs. The binary will use opendir as root directly without checking the path, letting the attacker...

frogy2.0

Orbis - Inteligencia de Superficie de Ataque Inteligencia de Superficie de Ataque de Espectro Completo Orbis mapea automáticamente toda la superficie de ataque orientada a internet de su organización, subdominios, puertos abiertos, aplicaciones web, infraestructura en la nube, certificados TLS,...

thc-ipv6

THC-IPV6-ATTACK-TOOLKIT c 2005-2022 [email protected] https://github.com/vanhauser-thc/thc-ipv6 Licenciado bajo AGPLv3 ver archivo LICENSE INTRODUCCIÓN Este código fue inspirado cuando entré en contacto con IPv6, aprendí más y más sobre él, y luego no encontré herramientas para jugar léase:...

CVE-2026-19739

The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/llsw/ullllcpconnupd.c retains the received RX node while a Connection Update / Connection Parameter procedure waits for its instant, so the node can later carry the host notification llcprxnoderetain, which marks it...

CVE-2018-3639

CVE-2018-3639 Speculative Store Bypass CVE-2018-3639 proof of concept for Linux Download git clone [email protected]:mmxsrup/CVE-2018-3639.git Build cd CVE-2018-3639 make Run ./specter Output $ ./spectre idx: 0, highest:P, hitrate:21.340000 idx: 1, highest:A, hitrate:15.520000 idx: 2,...

CVE-2026-9147-uproot-rce

CVE-2026-9147: uproot Code Injection via TStreamerInfo Metadata Severity: High, CVSS 4.0 8.5 , CVSS 3.1 7.8 assigned by VulnCheck, the CNA Vector v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected: uproot = 5.7....