callstranger-detector

Paquete Zeek que detecta intentos de CallStranger CVE-2020-12695 http://callstranger.com/ Este paquete intenta detectar intentos de explotación y exfiltración de datos de CallStranger CVE-2020-12695. Lo hace buscando tres elementos clave: 1. Comandos UPnP SUBSCRIBE con una URL de Notify que...

Bootloader_Unlock_Anbernic_T820

Anbernic Unisoc T820 Guía de Desbloqueo del Bootloader - TheGammaSqueeze - https://github.com/TheGammaSqueeze El desbloqueo del bootloader es necesario antes de flashear cualquier firmware personalizado o correcciones personalizadas. Puede que te interese esta corrección de sensibilidad del...

r4ven

이 GitHub 저장소가 유용하다고 생각하시면, 별표를 눌러주세요! ⭐️ ▶️ 동영상 보기 - 사용 방법! 이 프로젝트는 사용자가 명시적으로 권한을 부여할 때 현대 웹 브라우저가 어떻게 위치 데이터, 카메라 접근, IP 주소, 장치 정보 를 노출할 수 있는지 보여주기 위해 설계된 보안 연구 및 인식 도구입니다. 이 도구는 데모 목적으로 합법적인 콘텐츠를 포함하는 제어된 웹 페이지를 제공합니다. 사용자가 자발적으로 브라우저 권한을 허용하면 애플리케이션은 GPS 좌표, IP 정보, 장치 세부 정보, 카메라 입력 과 같은 사용 가능한...

CVE-2026-71183

An authorization vulnerability in Apache DolphinScheduler allows authenticated users to obtain information about data sources they are not authorized to access through the /unauth-datasource and /authed-datasource endpoints. These endpoints fail to enforce the required data source access controls...

CVE-2026-71895

An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes configuration data intended for administrator-managed cluster configuration. The exposed kubeconfig data contains credentials that may allow users to authenticate directly to the...

CVE-2026-12260

SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques. Exploitation allows attacke...

exim-cve-2019-10149-data

Recopilación de Datos de CVE de Exim Recopilación de Datos Relacionada con las Vulnerabilidades de Exim CVE-2019-10149, CVE-2019-15846, CVE-2019-16928 Anuncio de CVE: https://vulners.com/cve/CVE-2019-10149 Detalles del Exploit: https://www.exploit-db.com/exploits/46974 Cronología del Problema:...

CVE-2025-66516-POC

⚠️ LEA EL DESCARGO DE RESPONSABILIDAD ANTES DE USAR ⚠️ Solo pruebas educativas/autorizadas | Licencia | Política de seguridad Acerca de este PoC Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2025-66516 , una vulnerabilidad de inyección de entidad externa XML XXE en...

php-encryption

php-encryption composer require defuse/php-encryption Esta es una librería para cifrar datos con una clave o contraseña en PHP. Requiere PHP 5.6 o superior y OpenSSL 1.0.1 o superior. Recomendamos usar una versión de PHP que aún tenga soporte de seguridad, lo que al momento de escribir esto...

buster

Descripción Buster es una herramienta OSINT avanzada utilizada para: Obtener cuentas sociales de un correo electrónico usando múltiples fuentes gravatar, about.me, myspace, skype, github, linkedin, brechas anteriores Obtener enlaces a donde se encontró el correo usando google, twitter, darksearch...

CVE-2025-51867

CVE-2025-51867 Descripción de la vulnerabilidad Deepfiction AI es una empresa de entretenimiento con inteligencia artificial cuya misión es revolucionar la narración de historias personalizadas. Deepfiction AI ofrece una aplicación web para crear historias mediante chats con un LLM, que es...

CVE-2024-1071-PoC-Script

CVE-2024-1071 Script de Explotación 🚀 🌟 Aviso Legal Esta Prueba de Concepto POC está realizada únicamente con fines educativos y de pruebas éticas. El uso de esta herramienta para atacar objetivos sin consentimiento mutuo previo es ilegal. Es responsabilidad del usuario final cumplir con todas la...

CVE-2026-71183 Apache DolphinScheduler: Missing Authorization Checks Allow Disclosure of Data Source Information and Passwords

An authorization vulnerability in Apache DolphinScheduler allows authenticated users to obtain information about data sources they are not authorized to access through the /unauth-datasource and /authed-datasource endpoints. These endpoints fail to enforce the required data source access controls...

EUVD-2026-94808

An authorization vulnerability in Apache DolphinScheduler allows authenticated users to obtain information about data sources they are not authorized to access through the /unauth-datasource and /authed-datasource endpoints. These endpoints fail to enforce the required data source access controls...

CVE-2026-71183

An authorization vulnerability in Apache DolphinScheduler (versions before 3.4.3 ) allows authenticated users to access data sources they are not authorized to view. The /unauth-datasource and /authed-datasource endpoints fail to enforce proper access controls, potentially leaking sensitive conne...

Exploit for CVE-2026-21589

CVE-2026-21589 — Atlassian pre-auth arbitrary file read Pytho...

kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()

A flaw was found in the Linux kernel's IPv6 Routing Protocol for Low-Power and Lossy Networks RPL segment routing header SRH decompression function, ipv6rplsrhdecompress. An integer overflow occurs when processing a specially crafted IPv6 packet, causing the header length calculation to truncate...

kernel: ipv6: fix use-after-free in ip6_finish_output2()

A flaw was found in the Linux kernel's IPv6 networking stack. A use-after-free vulnerability exists in the ip6finishoutput2 function, where a cached pointer to the IPv6 destination address can become stale after memory reallocation. An attacker could potentially exploit this to leak sensitive...

CVE-2024-9465

CVE-2024-9465: Inyección SQL no autenticada en Palo Alto Expedition Prueba de concepto para explotar CVE-2024-9465 en dispositivos vulnerables. Publicación del blog Causa raíz e indicadores de compromiso aquí:...

EUVD-2026-94803

SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter is vulnerable to blind attacks based on Boolean, error, time-based and UNION techniques. Exploitation allows attacke...