elegant-bouncer

ELEGANTBOUNCER ELEGANTBOUNCER es una herramienta de detección de exploits móviles basados en archivos. Emplea un enfoque innovador para la identificación avanzada de amenazas basadas en archivos, eliminando la necesidad de muestras in-the-wild y superando a los métodos tradicionales basados en...

cred_scanner

credscanner A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkin...

CVE-2024-5522

EN A PoC exploit scanner for CVE-2024-5522 vulnerability in WordPress websites. This tool helps identify and exploit the vulnerability by scanning a list of target URLs and attempting a specific payload to determine if the site is vulnerable. Features Automatic Vulnerability Scanning : Scans targ...

log4shell_sentinel

Log4Shell Sentinel - A Smart CVE-2021-44228 Scanner Introduction While there have some excellent tools released to help organizations scan their environments for applications vulnerable to the critical Log4J / CVE-2021-44228 vulnerability, I felt that: none of the tools I ran into were made for...

cve-2019-2725

Run with python3 1. Place detection targets in the ip.txt file, format: 192.168.1.18:7001 2. Run the script directly; results with vulnerabilities are saved in the ok.txt file...

Astra Linux – Vulnerability in Tomcat9

Path Equivalence: The use of ‘file.Name’ an internal dot notation can lead to Remote Code Execution, information disclosure, or the addition of malicious content to uploaded files via the write-enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat versions as follows: 11.0.0-...

CVE-2026-59292

PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to $java.io.tmpdir/spring-integration/metadata-store.properties with world-readable permissions. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring...

Amazon Linux 2023 : perl-DBI, perl-DBI-tests (ALAS2023-2026-2006)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2006 advisory. DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some...

Amazon Linux 2 : perl-DBI, --advisory ALAS2-2026-3851 (ALAS-2026-3851)

The version of perl-DBI installed on the remote host is prior to 1.627-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3851 advisory. DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text. DBI::SQL::Nano, DBI's...

PT-2026-62050

Data::RoaringBitmap::Shared versions before 0.02 for Perl allow an out-of-bounds read via an unvalidated container offset and cardinality in rb contains locked. The attach-time validator rb validate header checks the header scalars and region layout against the file size, but does not validate th...

Exploit for Deserialization of Untrusted Data in Apache Camel

camel-pqc Key-Lifecycle Unsafe Deserialization Reproducer CVE...

PYSEC-2026-2449 Django has a Race Condition vulnerability

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in Django allows an attacker to cause file system objects to be created with incorrect permissions via concurrent requests, where one thread's...

Django has a Race Condition vulnerability

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29.Race condition in file-system storage and file-based cache backends in Django allows an attacker to cause file system objects to be created with incorrect permissions via concurrent requests, where one thread's...

PT-2026-59118

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in Django allows an attacker to cause file system objects to be created with incorrect permissions via concurrent requests, where one thread's...

Exploit for Deserialization of Untrusted Data in Apache Camel

camel-pqc FileBasedKeyLifecycleManager Unsafe Deserialization...

GO-2026-5728 goshs has a file-based ACL authorization bypass in goshs state-changing routes in github.com/patrickhener/goshs

goshs has a file-based ACL authorization bypass in goshs state-changing routes in github.com/patrickhener/goshs...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop in the seek function of the tarfile module when processing tar archives in streaming mode. An attacker can cause the process to enter an infinite loop and exhaust system resources by providing a specially crafted archive...

Exploit for Use of Incorrectly-Resolved Name or Reference in Apache Tomcat

CVE-2025-24813 - Apache Tomcat Partial PUT + Deserialization R...

CVE-2026-46491

SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module. Prior to version 7.0.3, simplesamlphp-module-casserver builds file paths for the file-based CAS ticket store by directly concatenating the configured ticket directory with an attacker-controll...

CVE-2026-23679

libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength...