feroxbuster

!WARNING Security Notice – Domain Impersonation The domain feroxbuster.com is NOT affiliated with this project, its maintainers, or any official feroxbuster releases. Official feroxbuster downloads are distributed ONLY through: https://github.com/epi052/feroxbuster open source...

AirWatch

AirWatch ¿Qué es AirWatch? AirWatch es una aplicación simple en la barra de menús que ayuda a prevenir ataques de arrebato de dispositivos. Como ejemplo, tal ataque fue llevado a cabo contra Ross Ulbricht. Un agente agarró su dispositivo y corrió, impidiéndole reiniciarlo. ¿Cómo funciona? AirWatc...

CVE-2023-23397

CVE-2023-23397 Patch for MS Outlook Critical Vulnerability - CVSS 9.8 3 PowerShell scripts are included in the Patch folder. If your patch management software uses an evaluation and a remediation script, use the respective files/scripts. The All In One script will evaluate the current version of...

CVE-2022-43110

CVE-2022-43110 Further Information Voltronic Viewpower/Pro and rebrands/derivatives The UPS management software is supposed to only allow a properly Authenticated and Authorized admin user using a web interface to configure the system. Due to CWE-425: Direct Request 'Forced Browsing' an...

CVE-2020-5148

CVE-2020-5148 Forced Authentication in the SonicWall UTM SSO Agent The SonicWall SSO Agent identifies the user behind a given IP address by probing that workstation with NetAPI the default or WMI. It does not validate the workstation before initiating the NTLM authentication, and it continues...

CVE-2026-32202

Zero-click forced authentication: viewing a folder with the crafted .lnk triggers UNC resolution during icon render, coercing the victim into an attacker-directed outbound connection that leaks and enables relay of their Net-NTLMv2 credentials. Emerged due to an incomplete patch of CVE-2026-21510...

CVE-2026-7527

The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is affected by an Open Redirect vulnerability in all versions up to and including 7.0.02 . The root cause is insufficient validation of user input, specifically through the redirect_to parameter. An unauthenticated attacke...

EUVD-2026-83054

btrbk is a tool for creating snapshots and remote backups of Btrfs subvolumes. From 0.29.0 until 0.32.7, btrbk's sshfilterbtrbk.sh constructs allowstreammatch with a start anchor but without an end-of-string anchor for the complete command. A user restricted through an authorizedkeys forced comma...

CVE-2026-40532

A direct request 'forced browsing' vulnerability in Wallpaper Path in Synology DiskStation Manager DSM before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authenticated users to obtain sensitive information...

EUVD-2026-82788

A direct request 'forced browsing' vulnerability in Wallpaper Path in Synology DiskStation Manager DSM before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authenticated users to obtain sensitive information...

hi_my_name_is_keyboard

Hola, me llamo Keyboard Este repositorio contiene scripts de prueba de concepto para CVE-2023-45866, CVE-2024-21306 y CVE-2024-0230. Puedes encontrar más detalles en la publicación del blog. Prueba de concepto| Descripción ---|--- Inyección de teclado en Android| Fuerza el emparejamiento de un...

MAL-002

MAL-002: Force System Restart via Installed Windows MSIs Once a software is successfully installed on the system, one or more trusted MSI files will appear in the “C:\Windows\Installer” folder and may allow a low privilege user to perform “repair” and/or “modify” actions as the “NT...

dnscrypt-autoinstall

dnscrypt-autoinstall This project has been archived, see last comment in 108. A script for installing and automatically configuring DNSCrypt on Linux-based systems. Description DNSCrypt is a protocol for securing communications between a client and a DNS resolver by encrypting DNS queries and...

Linux Distros Unpatched Vulnerability : CVE-2026-90231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apparmor: fix unconfined user namespace restriction forced stack If a task is already confined by a stack the unprivileged transition restriction on unconfined ...

CVE-2020-17530

CVE-2020-17530 Prueba de concepto rápida para CVE-2020-17530. En Apache Struts versiones 2.0.0 - 2.5.25, una evaluación forzada del Lenguaje de Navegación de Grafos de Objetos OGNL sobre la entrada de usuario sin procesar en atributos de etiquetas puede conducir a la ejecución remota de código RC...

CVE-2026-90231

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unconfined user namespace restriction forced stack If a task is already confined by a stack the unprivileged transition restriction on unconfined is not correctly, applied. This results in an escape if two transitio...

CVE-2026-90231

CVE-2026-90231 is a flaw in the Linux kernel's AppArmor subsystem. When a task is already confined by a profile stack , the unprivileged user-namespace transition restriction on the unconfined profile is not correctly enforced. This allows a confinement escape if two transitions through an unconf...

EUVD-2026-81824

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unconfined user namespace restriction forced stack If a task is already confined by a stack the unprivileged transition restriction on unconfined is not correctly, applied. This results in an escape if two transitio...

EUVD-2026-81279

In AVideo through 29.0, the autoCSRFGuard function maintains a hardcoded allowlist of exempt basenames tested without directory context, allowing plugin files matching core filenames to inherit CSRF exemptions. The LoginWordPress plugin file login.json.php inherits an exemption and unconditionall...

CVE-2026-92579 AVideo through 29.0 Broken Access Control via CSRF Exemption Basename Collision

In AVideo through 29.0, the autoCSRFGuard function maintains a hardcoded allowlist of exempt basenames tested without directory context, allowing plugin files matching core filenames to inherit CSRF exemptions. The LoginWordPress plugin file login.json.php inherits an exemption and unconditionall...