CVE-2022-30190_Temporary_Fix_Source_Code

🩹CVE-2022-30190 Solución Temporal🩹 Código Fuente Estos son los códigos fuente de dos scripts de Python compilados para aplicar fácil y rápidamente una protección temporal contra la vulnerabilidad CVE-2022-30190 Follina Ambos se pueden programar mejor, pero esto es solo para implementarlo lo más...

dnsdiag

DNS Measurement, Troubleshooting and Security Auditing Toolset Have you ever wondered if your ISP is intercepting your DNS traffic? Have you noticed any unusual behavior in your DNS responses, or been redirected to the wrong address and suspected something might be off with your DNS? We offer a...

mtr

¿QUÉ ES MTR? mtr combina la funcionalidad de los programas 'traceroute' y 'ping' en una sola herramienta de diagnóstico de red. Al iniciar mtr, investiga la conexión de red entre el host donde se ejecuta mtr y un host de destino especificado por el usuario. Envía sondas al destino con valores de...

CVE-2018-0952-SystemCollector

SystemCollector PoC for Privilege Escalation in Windows 10 Diagnostics Hub Standard Collector Service Affected Products Windows 10 Windows Server Windows Server 2016 Visual Studio 2015 Update 3 Visual Studio 2017 Summary The Diagnostics Hub Packaging library, used by Windows Standard Collector...

rack-bug

Rack::Bug Code Climate Repositorio: http://github.com/brynary/rack-bug Descripción Rack::Bug añade una barra de herramientas de diagnóstico a las aplicaciones Rack. Cuando está habilitada, inyecta un div flotante que permite explorar el registro, las consultas a la base de datos, los tiempos de...

NETworkManager

NETworkManager ¡Una potente herramienta de código abierto para gestionar redes y solucionar problemas de red! Optimiza y simplifica la administración y solución de problemas de tu red con NETworkManager. Conéctate, monitorea y soluciona problemas de tu infraestructura de red y servidores utilizan...

CVE-2022-3699

CVE-2022-3699 El control de acceso incorrecto para el controlador Lenovo Diagnostics Driver permite que un usuario con pocos privilegios pueda emitir IOCTLs del dispositivo para realizar lecturas/escrituras arbitrarias de memoria física/virtual. Gracias a ch3rn0byl por ayudar con esto y le robé...

Shellcode-Test-Harness

Herramienta de Prueba de Shellcode Un entorno de prueba ligero diseñado para acelerar el desarrollo de shellcode, proporcionando un entorno de ejecución con diagnóstico de fallos integrado y redirección de salida de depuración. Características Ejecuta shellcode mediante module stomping Usa VEH pa...

CVE-2026-47097

AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static AES passphrase embedded in obfuscated form within the firmware. Attackers can reverse engineer the publicly...

CVE-2026-47097 AJA HELO Plus < 2.1.7 Hardcoded AES Passphrase for Diagnostics Export Bundle

AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static AES passphrase embedded in obfuscated form within the firmware. Attackers can reverse engineer the publicly...

EUVD-2026-89967

AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static AES passphrase embedded in obfuscated form within the firmware. Attackers can reverse engineer the publicly...

CVE-2026-47097

The AJA HELO Plus firmware (versions before 2.1.7 ) is vulnerable to an information disclosure vulnerability. The root cause is a static AES passphrase embedded in an obfuscated form within the firmware, which can be recovered via reverse engineering of the publicly available firmware image. Unau...

CVE-2026-47097 AJA HELO Plus < 2.1.7 Hardcoded AES Passphrase for Diagnostics Export Bundle

AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static AES passphrase embedded in obfuscated form within the firmware. Attackers can reverse engineer the publicly...

VMware NSX SD-WAN Edge - Command Injection

VMware NSX SD-WAN Edge formerly VeloCloud Edge before 3.1.2 contains an unauthenticated command injection in the local web UI diagnostic tools Ping/Traceroute. This template detects it reliably by injecting 'id', 'whoami', and a random marker. id: CVE-2018-6961 info: name: VMware NSX SD-WAN Edge ...

ztewaste

Prueba de concepto de volcado de diagnóstico de ZTE Extrae una cantidad preocupante de información del usuario de dispositivos ZTE con Unisoc mediante CVE-2022-38694. !CAUTION Por favor, no hagas un enlace permanente aquí!!!!! Es casi seguro que el nombre del repositorio cambiará en el futuro. En...

pfsense-security-research

Lectura Arbitraria de Archivos Autenticada en pfSense 2.8.0 a través de la Interfaz Web de Diagnóstico ID de CVE: CVE-2025-53392 Fecha: 2025-06-27 Autor: Seth Kraft Página web del proveedor: https://www.netgate.com/ Registro de cambios del proveedor:...

lua-ffi-libinjection

Name lua-resty-libinjection - LuaJIT FFI bindings for libinjection Status This library is in active development and is production ready Description This library provides FFI bindings for libinjection, a SQL/SQLi and XSS tokenizer and analyzer. Installation Install this library as you would any...

CVE-2026-86841 Bookly 23.2 - 28.2 - Bookly Administrator+ PHP Object Injection via Diagnostics Advanced Options

The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not prevent deserialization of untrusted input and does not correctly restrict a privileged maintenance feature to administrators, allowing users granted a custom booking-management capability, which an...

CVE-2026-86841

The Online Scheduling and Appointment Booking System (Bookly) WordPress plugin, versions 23.2 through 28.2 , is vulnerable to a PHP Object Injection vulnerability. The root cause is the failure to prevent the deserialization of untrusted input and the improper restriction of a privileged maintena...

CVE-2026-86841 Bookly 23.2 - 28.2 - Bookly Administrator+ PHP Object Injection via Diagnostics Advanced Options

The Online Scheduling and Appointment Booking System WordPress plugin before 28.3 does not prevent deserialization of untrusted input and does not correctly restrict a privileged maintenance feature to administrators, allowing users granted a custom booking-management capability, which an...