golddigger

Gold Digger Search files for gold Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. Installation Gold Digger requires Python3. virtualenv -p python3...

fusionauth-samlv2

fusionauth-samlv2 Este repositorio contiene las implementaciones de SAML v2.0 en Java mediante JAXB. Usarías esta librería para procesar solicitudes y respuestas SAML. Consulta los tests para ver ejemplos de código. Divulgaciones de seguridad Si encuentras una vulnerabilidad u otro bug relacionad...

DOCxNGINxFX

WORDLISTxGENERATORxFX Version 1.0 Version 2.0 WORDLISTxGENERATORxFX renamed to DOCxNGINxFX Version 3.0 DOCxNGINxFX I wrote this to give somethink back to the great and powerful open source community all out there that shares their knowledge or frameworks and from whom I have learned so much. The...

resolvers

Resolvers The most exhaustive list of reliable DNS resolvers resolvers.txt: A simple list of resolver IP addresses, which you can pass directly to your DNS enumeration tool. resolvers-extended.txt: All of the resolvers in resolvers.txt with additional information about each server, including the...

BadExclusionsNWBO

BadExclusions Now With Better Opsec BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR. How it works? BadExclusionsNWBO copies and runs HookChecker.exe in all folders and subfolders of a given path. You need to have HookChecker.exe ...

twitter-advanced-search

🔍 Advanced Search on Twitter These operators work on Web, Mobile, Tweetdeck. There is some overlap, but largely these will not work for v1.1 Search, Premium Search, or v2 Search APIs. Adapted from TweetDeck Help, @lucahammer Guide, @eevee Twitter Manual, @pushshift and Twitter / Tweetdeck itself...

morty

Morty Web content sanitizer proxy as a service Morty rewrites web pages to exclude malicious HTML tags and attributes. It also replaces external resource references to prevent third party information leaks. The main goal of morty is to provide a result proxy for searx, but it can be used as a...

Log4j_CVE-2021-44228

Log4j CVE-2021-44228 Solutions Think about if you actually really require Log4j2 Core. Most likely, your own code or some 3rd-party library you depend on only need Log4j's Logging API façade - but can log to another back-end. You could therefore simply completely exclude the...

Defender_Exclusions-BOF

Exclusiones de Defender BOF Qué Un BOF para determinar las exclusiones de Windows Defender: Extensiones Procesos Carpetas Por qué Ejemplos de uso del compilador C++ para crear BOFs sin necesidad de las desreferencias intermedias de vtable. Compilación cd src make all Uso 1. Cargar...

TimeException

Aviso legal Esta herramienta se proporciona únicamente con fines educativos. Cualquier acción y actividad relacionada con el material contenido en este repositorio es responsabilidad exclusiva tuya. El uso indebido de esta herramienta puede dar lugar a cargos penales contra las personas en...

ffufw

ffufw ffuf con esa salsa especial Instalación go install github.com/puzzlepeaches/ffufw@latest ¿Por qué? ffufw es un envoltorio de ffuf que hace que el ataque de fuerza bruta a directorios sea más fácil e inteligente. La herramienta tiene las siguientes características: Ejecución multihilo de...

AlmaLinux 9.2 [TuxCare] Security Update: python3-setuptools / python3-setuptools-wheel (ALMALINUX9.2:CLSA-2026:1786468462)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786468462 advisory. - setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList...

NPM: Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges

NPM: Axios: CIDR-form NOPROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges vulnerability discovered by ? in WordPress Npm axios versions = 1.15.0, 1.20.0...

Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges

Summary Axios supports proxy environment variables and evaluates NOPROXY exclusions in the Node.js adapter. CIDR-form NOPROXY entries such as 127.0.0.0/8, 10.0.0.0/8, or 169.254.169.254/32 are not interpreted as IP ranges. As a result, a request to an IP address inside a configured CIDR exclusion...

PT-2026-103485

Summary Axios supports proxy environment variables and evaluates NO PROXY exclusions in the Node.js adapter. CIDR-form NO PROXY entries such as 127.0.0.0/8, 10.0.0.0/8, or 169.254.169.254/32 are not interpreted as IP ranges. As a result, a request to an IP address inside a configured CIDR exclusi...

CentOS Linux 7 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-devel / etc (CENTOS7:CLSA-2024:1730141462)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1730141462 advisory. - In PHP versions 8.1. before 8.1.30, 8.2. before 8.2.24, 8.3. before 8.3.12, erroneous parsing of multipart form data contained in an HTTP POST...

CVE-2026-16652

Temporal Server did not bound the work performed while searching for a Schedule's next action time. An authenticated caller with namespace write permission could create or update a Schedule that combines a fine-grained cadence with an exclusion calendar that rejects every candidate time, causing...

CVE-2026-16652 Temporal Server Schedule exclusion search can cause excessive CPU consumption

Temporal Server did not bound the work performed while searching for a Schedule's next action time. An authenticated caller with namespace write permission could create or update a Schedule that combines a fine-grained cadence with an exclusion calendar that rejects every candidate time, causing...

EUVD-2026-83884

Temporal Server did not bound the work performed while searching for a Schedule's next action time. An authenticated caller with namespace write permission could create or update a Schedule that combines a fine-grained cadence with an exclusion calendar that rejects every candidate time, causing...

CVE-2026-16652

Temporal Server is vulnerable to excessive CPU consumption in its Schedule component. An authenticated caller with namespace write permission can create or update a Schedule that combines a fine-grained cadence with an exclusion calendar rejecting every candidate time, causing the server to evalu...