LazyMesh

LazyMesh Sistema de enrutamiento de malla que soporta el uso de un proxy OpenDHT como backend, para que los nodos puedan comunicarse directamente a través de internet. Muy temprano pre alfa, prueba de concepto, podría no funcionar realmente, etc. Está pensado tanto para casos de uso de hobby/HAM,...

vallumd

vallumd Este programa te permite centralizar y distribuir listas negras de IP. Si mantienes un servidor en Internet, es muy probable que te hayas encontrado con uno o más ataques de fuerza bruta. No hay problema, solo instala fail2ban. Hecho. Pero si tienes varios servidores, cada uno ejecutando ...

CVE-2023-33246_RocketMQ_RCE_EXPLOIT

CVE-2023-33246 RocketMQ 远程代码执行漏洞利用 CVE-2023-33246 RocketMQ 远程代码执行漏洞利用 概述 RocketMQ 是一个分布式消息传递和流媒体平台。 RocketMQ 5.1.0 及以下版本存在任意代码注入漏洞。Broker 组件暴露在外网且缺乏权限验证。攻击者可以通过使用更新配置功能，以运行 RocketMQ 的系统用户身份执行命令。此外，攻击者还可以通过伪造 RocketMQ 协议内容达到同样的效果。 通过 Docker 搭建本地 RocketMQ 环境 root@kitploit: docker pull...

Apache ActiveMQ 6.x < 6.1.2 - Broken Access Control

Apache ActiveMQ 6.x contains an unauthenticated API web context caused by default configuration lacking security measures in the Jetty server, letting anyone interact with broker APIs and messaging layers, exploit requires no authentication. id: CVE-2024-32114 info: name: Apache ActiveMQ 6.x 6.1....

RemoteAssistance-Cpp

RemoteAssistance-Cpp RemoteAssistance como TeamViewer, versión C++ https://dydtjr1128.github.io/RemoteAssistance-Cpp/ También se creó una versión de Java Swing = Enlace Esta versión solo está implementada hasta el mirroring local, que aún no utiliza red. Tareas pendientes - x Captura de pantalla...

cve-2017-5638

CVE-2017-5638 是的，就是那个数据经纪商安全漏洞的演示应用。包含漏洞利用代码。 基本用法（启动） root@kitploit: mvn jetty:run 然后访问 http://localhost:8080/basic-struts/index.action。 你应该会看到 欢迎使用 Struts 2！ 这条消息。 漏洞扫描 root@kitploit: mvn site 致谢 漏洞利用代码改编自 immun.io 的仓库。...

CVE-2026-19607

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...

CVE-2026-19607 Keycloak-services: keycloak-services: broker-originated username collision causes account lockout

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...

EUVD-2026-80855

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...

CVE-2026-19607

A flaw in the first-broker-login flow of the keycloak-services component in Red Hat build of Keycloak allows an attacker to register a matching username on an external identity provider, triggering a username collision that locks out the legitimate user. The root cause is insufficient validation ...

keycloak-services: keycloak-services: Broker-originated username collision causes account lockout

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...

CVE-2026-19607

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...

Broker_ApacheMQ

BrokerApacheMQ CVE-2023-46604 - ApacheMQ Version 5.15.5 漏洞 机器: Broker...

EUVD-2026-80173

A flaw was found in the first broker login flow of Keycloak. When a user confirms an account-linking request from a different browser, a temporary proof is created to validate the link. However, this proof is not properly cleared after the link is established or when the user later manually remov...

CVE-2026-92358

Keycloak 's first broker login flow contains a flaw where a temporary proof created during a cross-browser account-linking request is not properly cleared after the link is established or manually removed. An attacker who controls the external identity can exploit this residual proof to silently ...

CVE-2026-92358

A flaw was found in the first broker login flow of Keycloak. When a user confirms an account-linking request from a different browser, a temporary proof is created to validate the link. However, this proof is not properly cleared after the link is established or when the user later manually remov...

[SECURITY] Fedora 44 Update: sblim-sfcb-1.4.9-40.fc44

Small Footprint CIM Broker sfcb is a CIM server conforming to the CIM Operations over HTTP protocol. It is robust, with low resource consumption and therefore specifically suited for embedded and resource constrained environments. sfcb supports providers written against the Common Manageability...

[SECURITY] Fedora 45 Update: sblim-sfcb-1.4.9-44.fc45

Small Footprint CIM Broker sfcb is a CIM server conforming to the CIM Operations over HTTP protocol. It is robust, with low resource consumption and therefore specifically suited for embedded and resource constrained environments. sfcb supports providers written against the Common Manageability...

CVE-2026-87264

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Integration Broker. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

EUVD-2026-79916

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Integration Broker. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...