wifit3

wifit3 A standalone USB Wi-Fi auditor for Linux, Windows, and macOS. At least one of the supported USB adapters is required. Why? Cross-Platform: Runs identically on Linux, macOS, and Windows. Wireless Driver Heaven: Built-in wireless stack avoids kernel driver versioning hell and Windows' NDIS...

CVE-2021-36934

CVE-2021-36934 Implementación en C de CVE-2021-36934, también llamado HiveNightmare/SeriousSAM, con analizador integrado...

renovate-operator

Renovate: la forma nativa de Kubernetes Ejecuta Renovate en tu propia infraestructura con programación basada en CRD, ejecución en paralelo, autodescubrimiento y una interfaz de usuario integrada. Si autoalojas Renovate y ya ejecutas Kubernetes, este operador te brinda el control y la...

UACME

UACMe Derrotando el Control de Cuentas de Usuario de Windows abusando de la puerta trasera AutoElevate incorporada de Windows. Este proyecto demuestra varias técnicas de evasión de UAC y sirve como recurso educativo para comprender los mecanismos de seguridad de Windows. ⚠️ Advertencia : Esta...

pgedge-anonymizer

pgEdge Anonymizer Documentación: Introducción Mejores prácticas Instalación Configuración Inicio rápido Uso Patrones personalizados Patrones incorporados Ejemplo de configuración Solución de problemas Notas de la versión...

Priv2Admin

The idea is to "translate" Windows OS privileges to a path leading to: 1. administrator, 2. integrity and/or confidentiality threat, 3. availability threat, 4. just a mess. Privileges are listed and explained at: https://learn.microsoft.com/en-us/windows/win32/secauthz/privilege-constants If the...

CVE-2023-3519

CVE-2023-3519 Porque puedes ejecutar powershell en el PC de tu mamá sin tener que instalar NMAP ni PYTHON ni contarle a nadie que usas ARCH! ; x...

CVE-2026-38056

A local privilege escalation vulnerability exists in the iDirect iQ200 VSAT terminal running firmware 23.0.1.0. The iQ200 is a rackmount satellite modem deployed across oil and gas, maritime, defense, and remote infrastructure as the primary, and often sole communications link for offshore rigs,...

EUVD-2026-66296

A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page...

CVE-2026-15366

A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page...

CVE-2026-15366

A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page...

CVE-2026-15366

A control logic defect in a specific built-in webpage of Kids Mode on vivo devices allows users to view local gallery photos directly within that page. The vulnerability is scored CVSS 4.0 base 2.4 (LOW) with a physical attack vector , indicating proximity access is required and no privileges or ...

Astra Linux – Vulnerability in Firefox

A website was able to detect when a user took a screenshot of a page using the built-in Screenshot functionality in Firefox. This vulnerability affects Firefox versions less than 127...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tick/nohz: unexport init-annotated ticknohzfullsetup EXPORTSYMBOL and init are a bad combination because the .init.text section is freed after initialization. As a result, modules cannot use symbols annotated with init. Accessing...

CVE-2026-19200 Velociraptor Analyst overwrites live built-in artifacts through verify()

The Velociraptor verify VQL function allows a user to verify an artifact for syntatic and other issues. Due to an implementation fault in this VQL function, the global artifact repository is used which allows callers to overwrite existing artifacts without the required permissions. The attacker...

Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet

Cybersecurity researchers have flagged a new malware family that's specifically designed to infect Android-based vehicle head unit firmware developed by DoFun. Kaspersky, which discovered the threat in June 2026, said the end goal of the malware is to serve a multi-stage downloader to enable ad...

CVE-2026-74789 Scriban before 7.0.0 LoopLimit Bypass via Built-in Operations

Scriban before 7.0.0 affected = 6.6.0 applies its LoopLimit constraint only to script loop statements and not to expensive iteration performed inside built-in operators and functions. As a result, a single expression such as 1..1000000 | array.size — or a memory-amplification expression such as '...

CVE-2026-19352

CVE-2026-19352 affects mifi lossless-cut (up to 3.69.0) in the Built-in HTTP API Service, specifically the file src/main/httpServer.ts. The issue enables server-side request forgery (SSRF) when a manipulated request is processed, requiring access to the local network. Exploit complexity is descri...

CVE-2026-19352 mifi lossless-cut Built-in HTTP API Service httpServer.ts server-side request forgery

A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unknown functionality of the file src/main/httpServer.ts of the component Built-in HTTP API Service. Executing a manipulation can lead to server-side request forgery. The attack requires access to the...

EUVD-2026-54920

A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affected by this issue is some unknown functionality of the file src/main/httpServer.ts of the component Built-in HTTP API Service. Executing a manipulation can lead to server-side request forgery. The attack requires access to the...