Nuclei_Templates

🎯 Nuclei Templates A large personal collection of 50,000+...

cve-2017-12149-playground

Muchas industrias críticas banca, atención médica y manufactura dependen de middleware heredado que fue construido para ejecutarse específicamente en JBoss 5 o 6. Debido a que estas aplicaciones suelen ser demasiado frágiles para migrar a versiones modernas de WildFly el sucesor de JBoss, las...

cve-2025-55182-test-lab-windows

CVE-2025-55182 React2Shell Prueba ⚠️ Advertencia : Contiene una vulnerabilidad de ejecución remota de código RCE que funciona realmente. 📋 Índice Resumen Información de la vulnerabilidad Inicio rápido Demostración real del ataque Entorno de prueba Reglas de defensa WAF Estructura de archivos...

faraday v5.25.0

Open Source Vulnerability Manager Security has two difficult tasks: designing smart ways of getting new information, and keeping track of findings to improve remediation efforts. With Faraday, you may focus on discovering vulnerabilities while we help you with the rest. Just use it in your termin...

CVE-2025-55182

🚨 CVE-2025-55182 — React2Shell CVE-2025-55182 es una vulnerabilidad crítica de Ejecución Remota de Código RCE que afecta a los Componentes del Servidor de React RSC. 📌 Resumen Esta vulnerabilidad permite a atacantes no autenticados ejecutar código arbitrario en servidores vulnerables. El problema...

whitelist-bypass

Omisión de Lista Blanca Tuneliza el tráfico de internet a través de plataformas de videollamadas VK Call, Yandex Telemost, WB Stream para eludir la censura de listas blancas gubernamentales. Configuración Guía de configuración paso a paso en ruso: docs/SETUP.md Cómo funciona Hay dos modos de túne...

CVE-2025-64720-PoC

CVE-2025-64720: Desbordamiento de Búfer en libpng en la Premultiplicación de Paleta Estado : Corregido Gravedad : Alta ID CVE : CVE-2025-64720 Fecha de Descubrimiento : 2025-11-XX Divulgación Pública : 2025-11-21 Resumen Resumen Existe una vulnerabilidad de lectura fuera de los límites en la...

upb-any-recursion-audit

upb Any-recursion audit Ruby / PHP / C bindings Status: Complete. Six recursion-guard checks across three independent implementations Ruby/PHP shared upb core, C's separate managed implementation, all falsified except the one already-public, already-patched Python CVE this audit was checking...

react-cve-2025-55182-lab

Configuración: git clone https://github.com/alexandre-briongos-wavestone/react-cve-2025-55182-lab cd react-cve-2025-55182-lab sudo docker build -t react-rsc-lab . sudo docker run -p 3000:3000 react-rsc-lab Explotación: curl --path-as-is -i -s -k -X $'POST' \ -H $'Host: localhost:3000' -H...

adaptix-serverless-c2

Adaptix Serverless C2 Plugin de transporte C2 sin servidor para AdaptixC2 v1.2 que utiliza AWS Lambda + DynamoDB como infraestructura de retransmisión. El tráfico del agente aparece como HTTPS saliente hacia endpoints de AWS, sin requerir puertos entrantes ni IPs públicas en el servidor C2...

D-Link - Remote Command Execution

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file id: CVE-2021-45382 info: name: D-Link - Remote Command Execution author: king-alexander severity: critic...

pentest-lab-metasploitable2

Isolated Network Pentest Lab Author: Daniel Stefan de Jesus dos Reis Date: September/2026 Environment: Personal KVM lab on isolated virtual network pentestlab Scope and Authorization Notice This test was conducted exclusively against a self-owned, intentionally vulnerable virtual machine ,...

ddc

ddc — DEX → Java decompiler in Rust English | 简体中文 ddc decompiles Android DEX bytecode back into readable Java — at real-world app scale, queryable like a database, and javac-verified : every one of the 909,689 files it emits across seven real-world APKs parses cleanly. Highlights Fast — a 226 MB...

avdroot

avdroot Obtén root en un emulador de Android Studio parcheando su ramdisk con Magisk — en Go puro. English · 简体中文 avdroot lleva un AVD desde un arranque en frío hasta un shell con root funcional con un solo comando. Todo ocurre en el host: el ramdisk se descomprime, se reescribe para que el init ...

The Price of Privacy: Randomness Complexity of Graph-Based Multi-Secret Sharing

We study the randomness required to share possibly correlated secret bits among parties connected by a graph. A dealer places shares on the edges so that each party can recover its own secret from its incident shares and learn nothing about the others beyond what its own secret reveals. Anilkumar...

CVE-2026-42616

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file...

CVE-2026-42617

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsirtoib in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...

EUVD-2026-94377

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsindexwalkdown in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file metadata...

CVE-2026-42618

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsdecompress in compress.c that allows an attacker to corrupt one byte of heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file...

CVE-2026-46569

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsibcopytail, in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...