CVE-2025-31702

CVE-2025-31702 — Herramientas de investigación y material DFIR Repositorio con herramientas, exploits y artefactos de investigación relacionados con el análisis y descubrimiento de CVE-2025-31702 y problemas relacionados. Más información y análisis en profundidad:...

CVE-2020-3153

CVE-2020-3153 Cisco AnyConnect 4.8.02042 通过路径遍历实现权限提升 漏洞描述 Cisco AnyConnect 的自动更新功能受到路径遍历漏洞的影响。攻击者可以利用此漏洞获得系统级别的权限。 更多细节，请参阅： 原始公告 SSD公告 我的笔记 漏洞利用 此漏洞利用采用了原始公告和SSD文章中描述的“劫持由Cisco签名二进制加载的DLL”攻击场景。不过，本漏洞利用使用的是 vpndownloader.exe（也受到同样DLL劫持漏洞影响的Cisco签名二进制），而不是 cstub.exe。此外，我在C代码中嵌入了Base64编码的...

PloitKit

PloitKit La Caja de Herramientas del Hacker PloitKit es una herramienta GUI basada en Python diseñada como una ventanilla única para todos los demás softwares. Me enfrentaba a este tipo de problemas, cuando necesitaba cambiar a un sistema diferente, o perdía mi pen-drive. Tenía que ir a Google,...

toolkit

English | English Indetectables Toolkit Diseñado como una navaja suiza, este conjunto de herramientas es invaluable para analistas de malware, crackers y expertos en ciberseguridad. Está meticulosamente elaborado para apoyar tanto a usuarios novatos como experimentados. Es el complemento perfecto...

CVE-2025-56513-NiceHash-Update-Chain-Compromise

CVE-2025-56513 Vulnerabilidad Crítica en la Cadena de Suministro del Mecanismo de Actualización de NiceHash QuickMiner Autor: Prince T Philip Rol: Investigador de Seguridad Independiente Gravedad: CRÍTICO — CVSS 9.8 Impacto: Ejecución Remota de Código / Compromiso de la Cadena de Suministro Estad...

CVE-2026-25961-SumatraPDF-3.5.0---3.5.2-RCE

PoC de Actualización Insegura de SumatraPDF CVE-2026-25961 – Ejecución Remota de Código mediante un Servidor de Actualización Malicioso Autor: Mohammed Idrees Banyamer Fecha: Febrero de 2026 CVE: CVE-2026-25961 GHSA: GHSA-xpm2-rr5m-x96q CVSS v3.1: 7.5 Alta AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H...

Astra Linux – Vulnerability in Firefox and Thunderbird

If a user installed an extension of a particular type, the extension might automatically update itself. During this process, it could bypass the prompt that grants the new version the newly requested permissions. This vulnerability affects Firefox 97, Thunderbird 91.6, and Firefox ESR 91.6...

CVE-2026-22306

CVE-2026-22306 is a CRITICAL (CVSS 10.0) vulnerability in OZOLS ERP (Ozols Grupa) on Windows, caused by an abandoned auto-update domain . The affected components include the OzolsSQL client update path , the _update SQL Server Agent job (@subsystem = N'ActiveScripting'), and serv_update.vbs . The...

CVE-2026-22306 Critical flaw impacting OZOLS ERP's automatic update channel

Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols Grupa OZOLS on Windows caused by an abandoned auto-update domain. Affected component: the automatic update channel...

PT-2026-78641

Name of the Vulnerable Software and Affected Versions Ozols Grupa OZOLS versions prior to 1.1.1233 Description The software contains a flaw in its automatic update channel, specifically affecting the OzolsSQL client update path, the serv update.vbs file, and the update SQL Server Agent job using...

MAL-2026-13363 Malicious code in @cliphijack/santaclaude (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a4fa42a55635225fb914eaea97cbc9699efb6cc197445eacf32e6592b60675 The santaclaude bin opens a persistent WebSocket connection to https://santaclaude.app and long-polls /api/control/claim. Messages received from the...

MAL-2026-10741 Malicious code in netcontrol-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967b375e5686bd1eab74838f00cd21c2a8e15291f03a8140b494a83052fd2a92 netcontrol-agent.js implements a remote agent that long-polls a configured server URL and pipes the returned bytes directly into an interactive shell...

CVE-2026-34050

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the Settings/Updates Livewire component does not check isInstanceAdmin in its mount method, allowing non-admin users to access the Updates settings page and potentially...

GO-2026-5633 Portainer Has an Arbitrary File Read via Git Symlink Injection in Stack Auto-Update in github.com/portainer/portainer

Portainer Has an Arbitrary File Read via Git Symlink Injection in Stack Auto-Update in github.com/portainer/portainer. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...

CVE-2026-41431

Zen is a firefox-based browser. Prior to 1.19.9b, Zen Browser ships a Mozilla Application Resource MAR updater org.mozilla.updater that has had all MAR signature verification stripped from the Firefox codebase it was forked from. The MAR files served to users contain zero cryptographic signatures...

Malicious code in fca-official-uzair-rajput (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c96ed99bb1a48e80228ec0ca012c1dbb7817fe1dbbd492fcb3d2927805f29e fca-official-uzair-rajput is a Facebook chat API library whose only documented entry point, login, invokes an auto-update routine on every call when...

GHSA-RPGQ-M5FP-32WR Portainer Has an Arbitrary File Read via Git Symlink Injection in Stack Auto-Update

Summary Portainer supports deploying stacks from Git repositories. When a Git-backed stack is created or updated, Portainer clones the repository using go-git v5, which translates Git blob entries with mode 0o120000 symlink into real OS symlinks on the host filesystem via os.Symlink. The only ent...

CVE-2026-41431 Zen Browser MAR updater ships with signature verification removed — unsigned updates accepted

Zen is a firefox-based browser. Prior to 1.19.9b, Zen Browser ships a Mozilla Application Resource MAR updater org.mozilla.updater that has had all MAR signature verification stripped from the Firefox codebase it was forked from. The MAR files served to users contain zero cryptographic signatures...

CVE-2026-41431

Zen Browser ships a MAR updater (org.mozilla.updater) with signature verification removed, leaving MAR files unsigned and the updater without verification code. Prior to version 1.19.9b, this enables arbitrary unsigned updates if the update server or GitHub release pipeline is compromised. The is...

CVE-2026-41431

Zen is a firefox-based browser. Prior to 1.19.9b, Zen Browser ships a Mozilla Application Resource MAR updater org.mozilla.updater that has had all MAR signature verification stripped from the Firefox codebase it was forked from. The MAR files served to users contain zero cryptographic signatures...