EUVD-2026-93388

An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. An incomplete fix for CVE-2026-15307 in Django spatial lookups allows an attacker who can supply bytes values to cause the Django process to make network requests via a crafted VRT document referencing an...

CVE-2026-87890 Potential request forgery via spatial lookup byte values

An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. An incomplete fix for CVE-2026-15307 in Django spatial lookups allows an attacker who can supply bytes values to cause the Django process to make network requests via a crafted VRT document referencing an...

CVE-2026-87890

Django versions 6.1 before 6.1.2 , 6.0 before 6.0.9 , and 5.2 before 5.2.18 are vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is an incomplete fix for CVE-2026-15307 in spatial lookups , where providing bytes values can trigger the Django process to make network requests via...

CVE-2017-11882

CVE-2017-11882 43b El script original proviene de https://github.com/embedi/CVE-2017-11882 109b El script original proviene de https://github.com/unamer/CVE-2017-11882/ mis respetos, ahora el código de unamer ya puede ejecutar shellcode CVE-2017-11882:...

PoC-CVE-2021-41773

CVE-2021-41773 PoC Proof of concept to check if hosts are vulnerable to CVE-2021-41773. Description https://vulners.com/cve/CVE-2021-41773 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49-2.4.50. An attacker could use a path traversal attack to map URLs to file...

dangerzone

Dangerzone Toma PDFs, documentos de oficina o imágenes potencialmente peligrosos y conviértelos en un PDF seguro. | ---|--- Dangerzone funciona así: le entregas un documento del que no sabes si puedes confiar por ejemplo, un archivo adjunto de correo electrónico. Dentro de un sandbox, Dangerzone...

The vulnerability of the R7-Officer corporate server’s document editor, related to the failure to take measures to neutralize special elements, allows a perpetrator to execute arbitrary code.

The vulnerability of the R7-Officer corporate server’s document editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow for the execution of arbitrary code...

ThreatHunting

ThreatHunting I am publishing GPL v3 tools for hunting for threats in your organisations. Nexthink modules Threat hunting - Potential malware downloads v1.0.xml This is a report which shows all calls to internet domains from common malware document techniques. Most endpoint malware - such as...

CTF_WRITEUPS-TryHackMe-CVE-2021-41773-

CTFWRITEUPS-TryHackMe-CVE-2021-41773- CTFWRITEUPS/TryHackMe /CVE-2021-41773/ CVE-2021-41773/42013 A small explanation of an Apache path traversal bug and an incomplete fix Task 1: A Bit of Background... A Brief History On the 5th of October 2021, a CVE detailing a path traversal attack on Apache...

wifi-hacker

Shell Script For Attacking Wireless Connections Using Built-In Kali Tools. Supports All Securities WEP, WPS, WPA, WPA2 !Imagehtt...

IRFuzz

IRFuzz - Escáner simple con reglas Yara IRFuzz es un escáner simple con reglas Yara para archivos de documentos o cualquier archivo. Instalación 1. Requisitos previos Linux o OS X Yara: simplemente use el código fuente de la última versión, compílelo e instálelo o instálelo mediante pip install...

vexhub-crawler

VEX Hub Crawler vexhub-crawler is a component of the VEX Hubvexhub that automatically retrieves VEX documents from source repositories. Overview The crawler identifies source repositories from registered PURLs Package URLspurl and copies VEX documents into VEX Hub. This process ensures that VEX H...

CVE-2026-39781

Unauthenticated Cross Site Scripting XSS in Document Gallery = 5.1.1 versions...

weakpass

Weakpass Here, you can find the list of tools and example of API server from weakpass.com for password and hash cracking in one place. 📂 Folder Structure tools A collection of password and hash cracking tools. Check them out: Kraker-js Lookup Passcheck Passgen libs Links to the libraries used in...

MSDT_CVE-2022-30190

MSDTCVE-2022-30190 This Repository Talks about the Follina MSDT from Defender Perspective Index About Timeline Understanding the Exploit List of IOCs Detection Strategy Testing and Researching Mitigation Plans References About The bug is a Microsoft Windows Support Diagnostic Tool MSDT remote cod...

ntlm_theft

ntlmtheft Una herramienta para generar múltiples tipos de archivos de robo de hash NTLMv2. ntlmtheft es una herramienta Python3 de código abierto que genera 21 tipos diferentes de documentos de robo de hash. Se pueden utilizar para phishing cuando el objetivo permite el tráfico SMB fuera de su re...

CVE-2026-39781 WordPress Document Gallery plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Document Gallery = 5.1.1 versions...

CVE-2026-39781

The Document Gallery plugin for WordPress, affecting versions

EUVD-2026-93029

Unauthenticated Cross Site Scripting XSS in Document Gallery = 5.1.1 versions...

diario-commandline-tools

diario-commandline-client What is this? Assumptions Installation Setup project Usage What is this? A utiliy repository created to ease bulk diario API consumption. Currently these functions are fully implemented: Upload a file PDF or Microsoft Office document Upload a complete directory of files...