wig

wig - Recopilador de Información de Aplicaciones Web wig es una herramienta de recopilación de información de aplicaciones web, que puede identificar numerosos Sistemas de Gestión de Contenidos y otras aplicaciones administrativas. La identificación de aplicaciones se basa en sumas de verificació...

CVE-2025-45467

CVE-2025-45467: Verificación insegura de firmware en Unitree Go1 Resumen Se ha descubierto una vulnerabilidad crítica CVE-2025-45467 en el perro robótico Unitree Go1 todas las versiones de firmware ≤ Go120220511, donde el mecanismo de actualización de firmware se basa únicamente en comprobaciones...

MCExtractor

MCExtractor Herramienta de extracción de microcódigo Intel, AMD, VIA y Freescale Canal de noticias de MC Extractor Tema de discusión de MC Extractor Repositorios de microcódigo de CPU Intel, AMD, VIA y Freescale A. Acerca de MC Extractor MC Extractor es una herramienta que analiza binarios de...

fastfinder

FastFinder A lightweight incident response tool for threat hunting and forensic triage ✨ Overview FastFinder is a powerful, lightweight incident response tool designed for cybersecurity professionals conducting threat hunting, live forensics, and endpoint triage. Built for both Windows and Linux...

pulledpork

PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...

pulledpork

PulledPork Herramienta de gestión de reglas para Snort y Suricata desde Google code Encuéntranos en Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk y el equipo de PulledPork. ¡Gracias por elegir PulledPork! Este archivo proporciona una guía básica sobre el uso de...

shortscan

🌀 Shortscan Una herramienta de enumeración de nombres cortos de archivos en IIS. Funcionalidad Shortscan está diseñado para determinar rápidamente qué archivos con nombres cortos existen en un servidor web IIS. Una vez identificado un nombre corto, la herramienta intentará identificar...

dhcpoptinj

Inyector de opciones DHCP ¿Alguna vez has querido interceptar peticiones DHCP e insertar algunas opciones DHCP adicionales, sin que el remitente lo sepa? Probablemente no. Sin embargo, si alguna vez surge la necesidad, dhcpoptinj con suerte te ayudará. Por qué Puede haber muchas razones para...

kit

kit Gestor de registros de herramientas -- gestiona cadenas de herramientas de desarrolladores desde registros basados en git, sobre mise. Qué es kit resuelve versiones de herramientas a través de múltiples registros, genera configuración de mise, verifica sumas de comprobación SHA-256 contra...

IOBitUnlockerUnlocker

Intro 0 day Moves or Copies any file. Bypasses previous patch with a checksum trick. Writup: https://nathan2.com/files/iobit.pdf Overall info: https://nathan2.com/posts/iobit/ I discovered this without knowing that this there was another previous exploit that discovered this first. However, this...

go-mal-pkgs

go-mal-pkgs A security tool to detect malicious Go packages by verifying checksums in go.sum against the original source code, bypassing the Go Module Proxy cache. Overview This tool helps protect against supply chain attacks that exploit the Go Module Proxy cache, as recently demonstrated by the...

WPS-CVE-2022-24934

Advertencia ESTE PROGRAMA USA GENERIC QUE FUE INTRODUCIDO EN GO 1.18, ¡ACTUALIZA TU COMPILADOR! CVE-2022-24934 Servidor web para explotar esta vulnerabilidad utilizando wpsupdate.exe PoC de servidor falso de actualización de WPS Solo con fines de investigación. Descargar archivo Establece el...

CVE-2026-79900 Heap overflow in KSL checksum initialization

boksksllogsd accepts a checksum algorithm name in the MD field of an authenticated KSL start message. Affected releases verify that OpenSSL recognizes the digest name but do not verify that the value fits in a fixed 16-byte checksum context field before copying it. An authenticated KSL client can...

CVE-2026-79900

The boks_ksllogsd component is vulnerable to a heap overflow during KSL checksum initialization. The issue occurs because affected releases verify that OpenSSL recognizes a digest name provided in the MD field of an authenticated KSL start message but fail to validate that the name fits within a ...

CLEANSTART-2026-TD83938 malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation

Security vulnerability affects the kube-state-metrics-fips package. A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation...

Rocky Linux 9.6 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc (ALMALINUX9.6:CLSA-2026:1770216227)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1770216227 advisory. - When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operatio...

AlmaLinux 9.2 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc (ALMALINUX9.2:CLSA-2025:1761084810)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1761084810 advisory. - When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation...

AlmaLinux 9.6 [TuxCare] Security Update: rsync / rsync-daemon / rsync-rrsync (ALMALINUX9.6:CLSA-2026:1776873915)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776873915 advisory. - A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue...

AlmaLinux 9.6 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc (ALMALINUX9.6:CLSA-2026:1770216227)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1770216227 advisory. - When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation...

CentOS Linux 7 [TuxCare] Security Update: rsync (CENTOS7:CLSA-2026:1777544655)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1777544655 advisory. - A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs...