Anthropic-Cybersecurity-Skills

Anthropic Cybersecurity Skills La biblioteca de habilidades de ciberseguridad de código abierto más grande para agentes de IA !Hermes...

ngrev

ngrev Herramienta gráfica para la ingeniería inversa de proyectos Angular. Permite navegar en la estructura de tu aplicación y observar la relación entre los diferentes módulos, proveedores y directivas. La herramienta realiza análisis estático de código , lo que significa que no necesitas ejecut...

LinuxForensics

Linux Forensics Todo lo relacionado con Linux Forensics Nota: para una mejor navegación, visite la página principal del repositorio aquí Índice Charlas Talleres Miembros actuales del equipo: Ali Hadi, Twitter Mariam Khader, Twitter, 2019 - presente Alayna Cash, Entornos GUI de Linux, 2022 -...

2023

100 Days of YARA Parte 2 - Electric Detectaloo Disculpas de antemano por el terrible nombre, ¡pero bienvenido a 100 Days of YARA! Este repositorio actuará como almacén de todas las ideas YARA creadas durante este tiempo. Cualquier script, herramienta o regla divertida que escribas puede enviarse ...

CVE-2025-70152: Improper Neutralization of Special Elements used in an SQL Command

code-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQL Injection in the admin user management endpoints /admin/saveuser.php and /admin/updateuser.php. These endpoints lack authentication checks and directly concatenate user-supplied POST parameters firstname, lastname,...

CVE-2025-70152

code-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQL Injection in the admin user management endpoints /admin/saveuser.php and /admin/updateuser.php. These endpoints lack authentication checks and directly concatenate user-supplied POST parameters firstname, lastname,...

EUVD-2011-1909

Malware in sbrugna...

EZSA-2018-007 User data disclosure

More info at http://share.ez.no/community-project/security-advisories/ezsa-2018-007-user-data-disclosure...

Debian DLA-432-1 : postgresql-8.4 update

Several bugs were discovered in PostgreSQL, a relational database server system. The 8.4 branch is EOLed upstream, but still present in Debian squeeze. This new LTS minor version contains fixes that were applied upstream to the 9.1.20 version, backported to 8.4.22 which was the last version...

Debian DLA-252-1 : postgresql-8.4 update

Several bugs were discovered in PostgreSQL, a relational database server system. The 8.4 branch is EOLed upstream, but still present in Debian squeeze. This new LTS minor version contains the fixes that were applied upstream to the 9.0.22 version, backported to 8.4.22 which was the last version...

DLA-252-1 postgresql-8.4 - bugfix update

Bulletin has no description...

Cross site request forgery (csrf)

JasperServer in JasperReports Server Community Project 3.7.0 and 3.7.1 uses a predictable flowExecutionKey parameter, which makes it easier for remote attackers to conduct cross-site request forgery CSRF attacks via a brute-force approach...

CVE-2011-1911

CVE-2011-1911 affects JasperReports Server Community Project (JasperServer) versions 3.7.0 and 3.7.1. The root cause is a predictable _flowExecutionKey parameter, enabling CSRF via brute-forcing across requests. Impact described includes the ability for an attacker, tricking an authenticated user...

CVE-2011-1911: Cross-Site Request Forgery (CSRF)

JasperServer in JasperReports Server Community Project 3.7.0 and 3.7.1 uses a predictable flowExecutionKey parameter, which makes it easier for remote attackers to conduct cross-site request forgery CSRF attacks via a brute-force approach...