pcileech

Resumen de PCILeech: PCILeech utiliza dispositivos de hardware PCIe para leer y escribir en la memoria del sistema objetivo. Esto se logra mediante el uso de DMA sobre PCIe. No se necesitan controladores en el sistema objetivo. PCILeech también funciona sin hardware junto con una amplia gama de...

wifi-hacker

Script de shell para atacar conexiones inalámbricas utilizando herramientas integradas de Kali. Soporta todos los tipos de seguridad WEP, WPS, WPA, WPA2 !Imagenhttps://assets.kitploit.com/production/public/readmes/placeholders/f0fc86cfe65f76d40e15aaec61704ec8220a56dc89d4be...

bbot

BEE·bot es un escáner multipropósito inspirado en Spiderfoot, diseñado para automatizar tus tareas de Recon , Bug Bounties y ASM! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 Un escaneo de BBOT en tiempo real - visualización conVivaGraphJS...

Adalanche

Adalanche Código Abierto Visualizador y Explorador de Grafos de Ataque Adalanche ofrece resultados instantáneos, mostrándole qué permisos tienen los usuarios y grupos en un Directorio Activo. Es útil para visualizar y explorar quién puede tomar el control de cuentas, máquinas o el dominio complet...

EUVD-2026-97064

A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function getTreeData of the file src/main/java/com/jeecg/demo/controller/JeecgFormDemoController.java of the component Autocomplete Data Handler. Performing a manipulation of the argument searchVal results in sql...

CVE-2026-108684 erzhongxmu Jeewms Autocomplete Data JeecgFormDemoController.java getTreeData sql injection

A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function getTreeData of the file src/main/java/com/jeecg/demo/controller/JeecgFormDemoController.java of the component Autocomplete Data Handler. Performing a manipulation of the argument searchVal results in sql...

GreeDoS_V2

GreeDoSV2 A Cybersecurity Red Team tool based on DDoS 📫 How to reach me Website , http://mrechofi.github.io/Tanjibportfoliowebsite/ & [email protected] & [email protected] | https://369emon.github.io/Emon-sportfolio/. See the video & listen,...

CVE-2026-108683 zhayujie CowAgent Media Download memory allocation

A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Media Download Handler. Such manipulation leads to uncontrolled memory allocation. It is possible to launch the attack remotely. The exploit has been disclosed...

EUVD-2026-97039

A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Media Download Handler. Such manipulation leads to uncontrolled memory allocation. It is possible to launch the attack remotely. The exploit has been disclosed...

lama

lama Lama, la aplicación que no tiene pelos en la lengua. Descripción Lama es una herramienta GNU Linux para generar listas de palabras. El objetivo es obtener un diccionario de contraseñas personalizado para un objetivo particular, ya sea físico o moral. Por lo tanto, es importante que las...

CVE-2026-108859

mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote unauthenticated attackers to exhaust memory by sending oversized POST bodies. Attackers can send arbitrarily large or many concurrent POST requests, read fully via io.ReadAll befor...

CVE-2026-108860

BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge bearer tokens using the hard-coded Jwt:Key in WebStarter appsettings.json. Attackers can sign tokens with the committed HMAC secret and fixed botsharp issuer and audience t...

CVE-2026-108682

A denial of service vulnerability exists in zhayujie CowAgent versions up to 2.1.6 . The flaw is located in the Web Console component, specifically within the read function of the /upload file. This weakness allows for remote attack initiation. While an exploit has been made available to the publ...

Brutal

Ahora Teensy se puede usar para pentesting Teensy es como un rubber ducky, ¿por qué elegí Teensy? Porque el precio es muy barato para mí. Es extremadamente útil para ejecutar scripts en una máquina objetivo sin necesidad de interacción humano-teclado HID-ATTACK. Cuando insertas el dispositivo, se...

Malicious code in cloudflare_module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a545e1e930894c3320e68c2aee17dd2cec7f20ed03b2e882905056d0eee242 Package [email protected] is a dependency-confusion lure targeting the cloudflare namespace. package.json declares scripts.postinstall: "node...

ditto

Ditto es una pequeña herramienta que acepta un nombre de dominio como entrada y genera todas sus variantes para un ataque homográfico como salida, verificando cuáles están disponibles y cuáles ya están registrados. Dominios PoC https://tᴡitter.com/ https://clᴏudflare.com Usando con Docker La imag...

pig

Pig Pig que puede entenderse como Packet intruder generator es una herramienta de creación de paquetes para Linux. Puedes usar Pig para probar tu IDS/IPS, entre otras cosas. Pig incluye un conjunto de firmas de ataque conocidas listas para usar y puedes ampliar esta colección con cosas más...

CVE-2026-108863 Katanemo Plano through 0.4.37 Missing Authentication on Envoy Admin Interface

Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /configdump endpoint to read configured LLM provider API...

CVE-2026-108860 BotSharp through 5.2.0 Authentication Bypass via Hard-Coded JWT Signing Key

BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge bearer tokens using the hard-coded Jwt:Key in WebStarter appsettings.json. Attackers can sign tokens with the committed HMAC secret and fixed botsharp issuer and audience t...

CVE-2026-108748

Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerability in the chat-scopes WebSocket /chat/routes endpoint that allows unauthenticated remote clients to exhaust server memory. Attackers can send repeated CONNECT frames reusing one chatId, leaving orphaned scope...