wireshark-forensics-plugin

wireshark-forensics-plugin Wireshark is the most widely used network traffic analyzer. It is an important tool for both live traffic analysis & forensic analysis for forensic/malware analysts. Even though Wireshark provides incredibly powerful functionalities for protocol parsing & filtering, it...

DOCxNGINxFX

WORDLISTxGENERATORxFX Version 1.0 Version 2.0 WORDLISTxGENERATORxFX renamed to DOCxNGINxFX Version 3.0 DOCxNGINxFX I wrote this to give somethink back to the great and powerful open source community all out there that shares their knowledge or frameworks and from whom I have learned so much. The...

Evilginx-Phishing-Infra-Setup

Guía de Configuración de Infraestructura para Campañas de Phishing Nota: Estas son una copia de mis notas personales. Por favor, no te bases completamente en ellas. Tabla de Contenidos Blogs/Charlas Automatización de Infraestructura de Red Team/Phishing Técnicas de Compra y Categorización de...

sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

llm-security-101

Seguridad de LLM 101 Adentrándonos en el ámbito de la seguridad de LLM: una exploración de herramientas ofensivas y defensivas, revelando sus capacidades actuales. A medida que adoptamos los Modelos de Lenguaje de Gran Tamaño LLM en diversas aplicaciones y funcionalidades, es crucial comprender l...

CVE-2026-48530 GFI Archiver < 15.13 Stored XSS via CategorizationPolicyWizard.aspx

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Classification Rules configuration that allows authenticated attackers to inject arbitrary web script or HTML via the rule name and email criteria parameters to /Archiver/CategorizationPolicyWizard.aspx. The...

CVE-2026-48530

CVE-2026-48530 affects GFI Archiver prior to 15.13, with a stored XSS in Classification Rules via CategorizationPolicyWizard.aspx. An authenticated attacker can inject script or HTML through rule name and email criteria parameters; the payload is stored by SaveAllConfigSettings() and executed in ...

PT-2026-64007

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Classification Rules configuration that allows authenticated attackers to inject arbitrary web script or HTML via the rule name and email criteria parameters to /Archiver/CategorizationPolicyWizard.aspx. The...

CVE-2026-33721

MapServer (CVE-2026-33721) has a heap-buffer-overflow in the SLD parser triggered by a crafted SLD containing more than 100 Threshold elements in a ColorMap/Categorize structure, exploitable by an unauthenticated remote attacker via WMS GetMap with SLD_BODY. Affects versions up to 4.2 prior to 8....

SOGo 跨站脚本漏洞

SOGo is a highly fast and scalable modern collaboration suite open source by Alinto. It offers calendar management, address book management, a fully functional webmail client, as well as features for resource sharing and permission handling. Versions of SOGo prior to 5.12.5 contained a cross-site...

PT-2026-24376

Name of the Vulnerable Software and Affected Versions Microsoft Authenticator affected versions not specified Description A condition exists where an unauthorized attacker can disclose information locally. The issue relates to Cwe not being in rca categories. Recommendations At the moment, there ...

Exploit for CVE-2017-0144

ExploitdbPro - Enhanced Edition Enhanced CLI tool for Exploit...

EUVD-2017-15234

Malware in sbrugna...

EUVD-2000-0123

Malware in sbrugna...

EUVD-2008-7263

Malware in sbrugna...

EUVD-2024-25703

Malicious code in bioql PyPI...

EUVD-2024-1886

Malicious code in bioql PyPI...

EUVD-2025-3732

Malicious code in bioql PyPI...

EUVD-2025-13937

Malicious code in bioql PyPI...

WordPress AutoCatSet Cross-Site Request Forgery Vulnerability

AutoCatSet is an automatic post categorization plugin for the WordPress platform. A cross-site request forgery vulnerability exists in AutoCatSet 2.1.4 and earlier versions, which stems from the autocatsetajax function not properly implementing a random number validation mechanism. An attacker ca...