Updated perl-HTML-FormHandler packages fix a security vulnerability

HTML::FormHandler versions through 0.40068 for Perl allow attacker selected method dispatch and resource exhaustion because applyactions and adderror use error message text built from request data as a Locale::Maketext bracket notation template...

WordPress FS Poster plugin <= 8.0.1 - Authenticated (Subscriber+) Remote Code Execution via FFmpeg Path Setting vulnerability

Authenticated Subscriber+ Remote Code Execution via FFmpeg Path Setting vulnerability discovered by Sullo - Hack LLC in WordPress Plugin FS Poster versions = 8.0.1...

Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set

While monitoring Mirage Kitten activity, we uncovered a previously undocumented malware family that we dubbed NodeRabbit. We identified the first sample on a system in Afghanistan. Further threat hunting revealed two additional, more advanced, variants: one on a system in Egypt and another on a...

CVE-2022-41445

CVE-2022-41445 Cross Site Scripting en el Sistema de Gestión de Registros de Profesores usando CodeIgnitor Descripción sugerida Una vulnerabilidad de cross-site scripting XSS en el Sistema de Gestión de Registros que usa CodeIgniter 1.0 permite a los atacantes ejecutar scripts web arbitrarios o...

meg

meg meg is a tool for fetching lots of URLs but still being 'nice' to servers. It can be used to fetch many paths for many hosts; fetching one path for all hosts before moving on to the next path and repeating. You get lots of results quickly, but non of the individual hosts get flooded with...

webvm

WebVM This repository hosts the source code for https://webvm.io, a Linux virtual machine that runs in your browser. Try out the new Alpine / Xorg / i3 graphical environment: https://webvm.io/alpine.html WebVM is a server-less virtual environment running fully client-side in HTML5/WebAssembly. It...

CVE-2016-6366

CVE-2016-6366 Repositorio público de mejoras para el exploit EXTRABACON, una ejecución remota de código para Cisco ASA escrito por Equation Group NSA y filtrado por Shadow Brokers. Hay shellcode mejorado, un script para encontrar offsets de LINA, un módulo de Metasploit y extrabacon-2.0. Estamos...

Masscan-Report

Generador de Informes de Masscan Una herramienta Python que genera visualizaciones HTML interactivas basadas en React a partir de la salida JSON de masscan, con un gráfico de red dirigido por fuerzas de D3.js. Captura de pantalla Características Gráfico de Red Interactivo Visualización dirigida p...

cve-2022-42889-text4shell-docker

Instalar Maven - maven-linux 1. Instalación de Maven para crear el fat jar root@kitploit: mvn clean install 2. Construcción de Docker root@kitploit: docker build --tag=text4shell . 3. Ejecución de Docker root@kitploit: docker run -p 80:8080 text4shell 4. Probar la aplicación root@kitploit:...

CVE-2017-8225

CVE-2017-8225 Install Python3 root@kitploit: apt-get install git pip3 install requests pip3 install colorama sudo apt update apt-get install python3 Installation: root@kitploit: git clone https://github.com/kienquoc102/CVE-2017-8225.git Code Exploit: root@kitploit: cd CVE-2017-8225 python3...

CVE-2025-6019-Exploitation

CVE-2025-6019 – UDisks2 ResizeFilesystem Vulnerability Educational Reproduction This repository documents an educational reproduction of CVE-2025-6019 performed in a controlled lab environment Ubuntu VM, non-production. 🛡️ Security Notice This research reproduces CVE-2025-6019 in a sandboxed Ubunt...

CVE-2023-6289

CVE-2023-6289 Swift Performance Lite = 2.3.6.14 - Falta de autorización para la exportación de configuraciones no autenticada Descripción El plugin Swift Performance Lite para WordPress es vulnerable a acceso no autorizado a datos debido a una falta de verificación de capacidad en la funcionalida...

cve-2019-14206-poc

CVE-2019-14206 - Adaptive Images para WordPress - Eliminación Arbitraria de Archivos 📋 Índice 1. Sobre la Vulnerabilidad 2. Requisitos Previos 3. Instalación 4. Métodos de Prueba Prueba Rápida Prueba Completa con Docker Prueba con Nuclei Prueba Manual 5. Interpretando Resultados 6. Limpieza 7...

CVE-2025-61228

CVE-2025-61228 Alerta Este problema parece ser peor de lo que el desarrollador sugiere, así que no quiero que esta parte se pierda en la maleza. El desarrollador señaló en su blog: Esto solo puede suceder si un programa que se ejecuta en su sistema está buscando a SuperDuper para realizar una...

CVE-2023-31853

CVE-2023-31853 Existe un ataque de cross-site scripting XSS reflejado en la interfaz de gestión basada en web del Cudy LT400. La página /cgi-bin/luci/admin/network/bandwidth tiene XSS reflejado a través del parámetro icon. Los métodos de explotación implican enviar una solicitud especialmente...

CVE-2024-3400-POC

CVE-2024-3400 RCE Test Script Overview This Python script is designed to test for a remote code execution RCE vulnerability, specifically CVE-2024-3400, which affects certain Palo Alto Networks GlobalProtect portals. The vulnerability allows unauthorized command execution via cookie manipulation...

glib2 security update

An update is available for glib2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GLib provides the core application building blocks for libraries and applicatio...

exploits

Exploits Exploits y código de prueba de concepto del equipo de Hacker House.| Nombre de archivo | Descripción | | :------------------------------------------: | :------------------------------------------------------------------------------------------------ | | AirWatchMDMJailbreakBypass.txt |...

SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities

1 CVE-2026-83548 - Pre-authentication SSRF via unintended forward-proxy A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...