100_days_of_kql_2026

Iniciativa 100 Días de KQL 2026 Requisitos: Crear una cuenta de GitHub Crear un repositorio llamado 100daysofkql Ejemplo: https://github.com/m4nbat/100daysofkql2026 Crear un readme.md y agregar esta línea a tu readme: 100DaysOfKQL2026 Repositorio principal con instrucciones:...

cve_manager

Descripción del proyecto Una colección de aplicaciones Python y scripts de shell para enviar por correo electrónico una hoja de cálculo xlsx de nuevas vulnerabilidades en la base de datos NIST CVE y sus productos asociados, en un horario diario. La hoja de cálculo puede luego interpretarse...

vthunting

VT Hunting VThunting is now featured on VirusTotal. Virus Total Hunting is a tiny tool based on the VT api version 3 to run daily, weekly or monthly report about malware hunting. The report can be send via email, Slack channel or Telegram. The tool can also be used in cli to get a report anytime...

tsusen

Tsusen 津波センサー is a standalone network sensor made for gathering information from the regular traffic coming from the outside i.e. Internet on a daily basis e.g. mass-scans, service-scanners, etc.. Any disturbances should be closely watched for as those can become a good prediction base of...

learn365

Learn365Este repositorio contiene toda la información compartida durante mi Learn 365 Challenge. Learn 365 es un reto para mantener vivo el espíritu de aprendizaje y desafiarme a aprender algo a diario durante todo el año, puede ser cualquier cosa, desde infosec hasta la vida en general. Sígueme ...

EasyEASM

EasyEASM Herramienta de gestión de superficie de ataque de costo cero presentada en Black Hat Arsenal 2023 y Recon Village @ DEF CON 2023. Descripción Easy EASM es eso... la herramienta más fácil de configurar para dar a tu organización visibilidad sobre sus activos externos. La industria está...

2026-100DaysofYARA

100 Días de YARA 2026 Un desafío personal para escribir una regla de YARA cada día durante 100 días como parte de la iniciativa 100DaysofYARA. Más información aquí: https://github.com/100DaysofYARA/2026...

vuln-list

vuln-list Recopila información de vulnerabilidades y guárdala automáticamente en un formato analizable Fuente...

WordPress Daily Prayer Time <2022.03.01 - SQL Injection

WordPress Daily Prayer Time plugin prior to 2022.03.01 contains a SQL injection vulnerability.. It does not sanitise and escape the month parameter before using it in a SQL statement via the getmonthlytimetable AJAX action, available to unauthenticated users, leading to SQL injection. id:...

VN_daily_samples

Este es un repositorio relacionado con muestras maliciosas subidas desde Vietnam...

CVE-2024-24140

CVE-2024-24140: Inyección SQL en la aplicación Daily Habit Tracker Prueba de concepto PoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24140.md Prueba de concepto PoC : https://github.com/BurakSevben/CVE-2024-24140/blob/main/CVE-2024-24140.md...

EUVD-2026-83458

SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without escaping, allowing stored cross-site scripting in the Electron renderer. Attackers can create notebooks with HTML payloads in names that execute JavaScript with Node.js access when the picker opens,...

CVE-2026-93922

SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without escaping, allowing stored cross-site scripting in the Electron renderer. Attackers can create notebooks with HTML payloads in names that execute JavaScript with Node.js access when the picker opens,...

CVE-2026-93922: Improper Neutralization of Input During Web Page Generation

SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without escaping, allowing stored cross-site scripting in the Electron renderer. Attackers can create notebooks with HTML payloads in names that execute JavaScript with Node.js access when the picker opens,...

WordPress Keep Backup Daily plugin <= 2.1.3 - Unauthenticated Sensitive Information Exposure vulnerability

Unauthenticated Sensitive Information Exposure vulnerability discovered by Aurélien BOURDOIS Elymaro in WordPress Plugin Keep Backup Daily versions = 2.1.3...

CVE-2026-90846

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the file /dets/forgot-password.php. The manipulation of the argument email/contactno leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2026-90845

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been...

CVE-2026-90844

A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file /dets/index.php of the component Login. Performing a manipulation of the argument email results in sql injection. Remote exploitation of the attack is possible. The...

EUVD-2026-78241

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the file /dets/forgot-password.php. The manipulation of the argument email/contactno leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2026-90846 PHPGurukul Daily Expense Tracker System forgot-password.php sql injection

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the file /dets/forgot-password.php. The manipulation of the argument email/contactno leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...