CVE-2026-45585

🔑 CVE-2026-45585 - YellowKey 🔓 Mitigación avanzada para CVE-2026-45585 YellowKey 📌 ¿Qué es la Vulnerabilidad YellowKey? YellowKey CVE-2026-45585 es una vulnerabilidad de ataque físico de día cero descubierta en mayo de 2026 que permite a atacantes con acceso físico eludir completamente el cifrado...

CVE-2020-23587

CVE-2020-23587 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" A vulnerability found in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" allows an unauthenticated, remote attacker to conduct a...

CVE-2020-13885

Título del Exploit: Citrix Workspace app anterior a 1912 para Windows - Escalada de Privilegios 1 Fecha: 2020-06-07 Autor: Andrew Hess Enlace del software: https://www.citrix.com/downloads/workspace-app/legacy-workspace-app-for-windows/workspace-app-for-windows-1911.html/ Boletín:...

CVE-2026-76105

Dell Container Storage Modules, versions prior to 1.18.0 contains an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

CVE-2026-105950

A security vulnerability has been detected in getformwork formwork up to 2.3.12. Impacted is the function DomSanitizer::sanitizeNodeAttribute of the file formwork/src/Sanitizer/DomSanitizer.php of the component URI Sanitizer. Such manipulation of the argument formaction leads to cross site...

tanstack-compromise-checker

tanstack-compromise-checker Detect indicators of the TanStack npm supply-chain attack on a developer machine, a repository, or a CI runner. Bash script, Docker image, and GitHub Action — same engine, three entry points. CVE-2026-45321 /GHSA-g7cv-rxg3-hmpx On May 11 2026, attackers published 84...

Nosql-Exploitation-Framework

Nosql-Exploitation-Framework Un Framework para escaneo y explotación de NoSQL NoSQL Exploitation Framework 2.02b liberado Autor NoSQL Exploitation Framework creado por Francis Alexander Wiki Wiki de NoSQL Exploitation Framework sobre instalación y uso -...

CVE-2018-13257

Blackboard Learn CAS Ticket Host Header Spoofing An authentication module within Blackboard Learn is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation. A CAS service ticket is intended for only a specific service , but Blackboard Learn do...

hashcrack

hashcrack unpacks some hash types, picks sensible options and invokes hashcat NVIDIA drivers here: http://www.nvidia.co.uk/Download/index.aspx?lang=en-uk alt email: [email protected] if you need support I'm not sure if anyone at NCC will be looking after this, but I'll be doing active dev in...

awspx

auspex ˈau̯s.pɛks noun: An augur of ancient Rome, especially one who interpreted omens derived from the observation of birds. Overview awspx is a graph-based tool for visualizing effective access and resource relationships within AWS. It resolves policy information to determine what actions affect...

dnsmasq-cve-2026

dnsmasq CVE-2026 QA Verification Tool Automated black-box tool for verifying 6 dnsmasq vulnerabilities May 2026. Sends attack packets to a live DUT and reports PASS/FAIL — no source code access needed. Quick Start Set DUT DNS to your laptop's WAN IP via GUI first, then: sudo python3...

CVE-2026-55168

CVE-2026-55168 This repository contains a simple PoC for CVE-2026-55168 in Runtipi. The issue is an authenticated arbitrary file write that can be reached through the backup restore flow. A crafted backup archive can plant a symlink into restored application data, and a later normal config update...

CVE-2025-27591-below-

CVE-2025-27591 – Privilege Escalation in Below 1 Introduction Below is a Linux tool for recording and displaying system data such as hardware utilization and cgroup metrics. In versions prior to v0.9.0 , Below’s systemd service runs with root privileges and creates world-writable log directories...

web-check

Web-Check Comprehensive, on-demand open source intelligence for any website 🌐web-check.xyz Kindly supported by: NinjaPear API to get a full B2B profiles from any URL | Hostinger Deploy Web-Check with one click on Hostinger | Warp Built for coding with multiple AI agents ---|---|--- Contents About...

CVE-2026-105950 getformwork URI Sanitizer DomSanitizer.php sanitizeNodeAttribute cross site scripting

A security vulnerability has been detected in getformwork formwork up to 2.3.12. Impacted is the function DomSanitizer::sanitizeNodeAttribute of the file formwork/src/Sanitizer/DomSanitizer.php of the component URI Sanitizer. Such manipulation of the argument formaction leads to cross site...

CVE-2026-105950

The getformwork formwork component, in versions up to 2.3.12 , is vulnerable to cross-site scripting (XSS) due to an issue in the URI Sanitizer component. Specifically, the DomSanitizer::sanitizeNodeAttribute function located in formwork/src/Sanitizer/DomSanitizer.php fails to properly handle the...

flashsploit

Framework de Explotación para Ataques HID con ATtiny85 Twitter - Telegram - Blog Disponible en Flashsploit es un Framework de Explotación para Ataques usando Dispositivos HID ATtiny85 como la Placa de Desarrollo USB Digispark. Flashsploit genera Scripts Compatibles con Arduino IDE .ino basados en...

CVE-2026-63689

Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

DigiTrack

DigiTrack En 30 segundos, este ataque puede aprender a qué redes se ha conectado una computadora MacOS anteriormente, y plantar un script que rastrea la dirección IP actual y la red Wi-Fi cada 60 segundos. Ahora incluye: Hardtracker - Digispark anulador de VPN para enviar la dirección IP y el...

ditto

Ditto es una pequeña herramienta que acepta un nombre de dominio como entrada y genera todas sus variantes para un ataque homográfico como salida, verificando cuáles están disponibles y cuáles ya están registrados. Dominios PoC https://tᴡitter.com/ https://clᴏudflare.com Usando con Docker La imag...