spamscanner

Spam Scanner is the best anti-spam, email filtering, and phishing prevention service. Spam Scanner is a drop-in replacement and the best alternative to SpamAssassin, rspamd, SpamTitan, and more. !NOTE Spam Scanner is actively maintained and used in production at Forward Email to protect millions ...

cve-2022-31692

Demo de CVE-2022-31692 Overview Una aplicación Spring Boot simple que demuestra una configuración vulnerable a CVE-2022-31692. Esta vulnerabilidad puede llamar la atención por su severidad - tiene una puntuación base CVSS 3.x de 9.8, ya que permite la omisión de autenticación. El propósito de est...

gtunnel

Documentation can be found at: https://hotnops.gitbook.io/gtunnel/...

iox

iox Inglés | 中文 Herramienta para reenvío de puertos y proxy de intranet, al igual que lcx/ew, pero mejor ¿Por qué escribir? lcx y ew son geniales, pero se pueden mejorar. Cuando los usé por primera vez, no podía recordar durante mucho tiempo estos parámetros complicados, como tran, slave, rcsocks...

DFShell

██████╗ ███████╗███████╗██╗ ██╗███████╗██╗ ██╗ ██╔══██╗██╔════╝██╔════╝██║ ██║██╔════╝██║ ██║ ██║ ██║█████╗ ███████╗███████║█████╗ ██║ ██║ ██║ ██║██╔══╝ ╚════██║██╔══██║██╔══╝ ██║ ██║ ██████╔╝██║ ███████║██║ ██║███████╗███████╗███████╗ ╚═════╝ ╚═╝ ╚══════╝╚═╝ ╚═╝╚══════╝╚══════╝╚══════╝ 介绍 D3Ext...

bluffs

BLUFFS Introducción Este repositorio contiene código relacionado con BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses. Resumen del artículo Bluetooth es una tecnología omnipresente para la comunicación inalámbrica. Miles de millones de dispositivos lo utilizan en aplicaciones...

CVE-2023-27163-lab

CVE-2023-27163 — Laboratorio de SSRF en Request-Baskets Proyecto: Laboratorio de Investigación y Reproducción de Vulnerabilidades — CVE-2023-27163 Autor: Amulya Kaushik Rol: Candidato a Prácticas en I+D de Ciberseguridad y Desarrollo de Contenido para Laboratorios Server-Side Request Forgery en...

FShell

FShell Descripción FShell es mi implementación de un Forward Shell. Está diseñado para obtener una tty interactiva usando ejecución remota de código a través de un protocolo sin estado p. ej. HTTP. ¿Por qué debería usar un forward shell? El servidor remoto no puede acceder a internet, no hay...

CVE-2026-91777

A flaw was found in FasterXML jackson-databind. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing specially crafted JSON input to an application that deserializes it into an identity-enabled collection or map. The flaw occurs due to inefficient processing o...

Linux Distros Unpatched Vulnerability : CVE-2026-63045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper validation of FTP PASV reply address in modproxyftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

CVE-2026-63045

Improper validation of FTP PASV reply address in modproxyftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FTP server to cause the proxy to open a data connection to an arbitrary third-party host via a crafte...

CVE-2026-31908

CVE-2026-31908 - Exploit de Inyección de Cabeceras en Apache APISIX 📋 Descripción General Este es un exploit de Prueba de Concepto PoC para CVE-2026-31908 , una vulnerabilidad crítica de inyección de cabeceras descubierta en Apache APISIX versiones 2.12.0 hasta 3.15.0. La vulnerabilidad existe en...

CVE-2026-63045 Apache HTTP Server: mod_proxy_ftp PASV address handling

Improper validation of FTP PASV reply address in modproxyftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FTP server to cause the proxy to open a data connection to an arbitrary third-party host via a crafte...

CVE-2026-63045 Apache HTTP Server: mod_proxy_ftp PASV address handling

Improper validation of FTP PASV reply address in modproxyftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FTP server to cause the proxy to open a data connection to an arbitrary third-party host via a crafte...

CVE-2026-63045

Improper validation of FTP PASV reply address in modproxyftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FTP server to cause the proxy to open a data connection to an arbitrary third-party host via a crafte...

PT-2026-103934

Improper validation of FTP PASV reply address in mod proxy ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FTP server to cause the proxy to open a data connection to an arbitrary third-party host via a...

AlmaLinux 9.6 [TuxCare] Security Update: exim / exim-greylist / exim-mon / exim-mysql / exim-pgsql Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1787315165)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787315165 advisory. - Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because...

CVE-2026-63045: Improper Access Control

Improper validation of FTP PASV reply address in modproxyftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FTP server to cause the proxy to open a data connection to an arbitrary third-party host via a crafte...

GHSA-CXP5-3PX4-PW24 jackson-databind quadratic forward-reference completion

Summary When an @JsonIdentityInfo collection or map first creates N unresolved object-ID references and later resolves the same IDs in reverse order, jackson-databind scans the remaining pending-reference accumulator for each resolution. A shallow JSON document whose size grows linearly can...