CVE-2026-81908 Missing Authorization in Concrete CMS 9.2.0 to 9.5.2 REST API Groups List Endpoint Allows Authenticated Users to Enumerate All Groups

Concrete CMS 9.2.0 to 9.5.2 contain a missing authorization vulnerability in the REST API Groups list endpoint. The listGroups method in concrete/src/Api/Controller/Groups.php registers a permissions checker callback that unconditionally returns true, so no per-object tree node authorization is...

RLSA-2026:66355 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

About Elevation of Privilege - Windows Ancillary Function Driver for WinSock (CVE-2026-68820) vulnerability

About Elevation of Privilege - Windows Ancillary Function Driver for WinSock CVE-2026-68820 vulnerability. The Ancillary Function Driver AFD is a Windows component that supports Windows Sockets applications and is contained in the afd.sys file. The afd.sys driver runs in kernel mode and manages t...

malware-ioc

Lucid The Lucid Phishing-as-a-Service PhAAS platform, developed by the XinXin group, facilitates large-scale phishing campaigns targeting global organizations, including postal and courier services. Utilizing advanced technologies like RCS and iMessage, the group employs automated tools and evasi...

GPOCrack

GPOCRACK.py Descifrador/decifrador de cpassword de Preferencias de Directiva de Grupo de Active Directory. Cómo usar python2 gpocrack.py cGc4817iMQclr1Ssixv35UpaH/FXy+1s5FnM2RqD4BI...

CVE-2023-37597

CVE-2023-37597 — issabel-pbx 4.0.0-6: Falsificación de Petición en Sitios Cruzados CSRF — Eliminar grupo de usuarios Aviso: Este repositorio está destinado únicamente a fines educativos y de investigación de seguridad autorizada. No use este exploit contra ningún sistema que no posea o para el cu...

TeleGram-Scraper

Telegram Group Scraper • Configuración de API Ve a http://my.telegram.org e inicia sesión. Haz clic en API development tools y completa los campos requeridos. Pon el nombre de la app que quieras y selecciona 'other' en plataforma Ejemplo : Copia "apiid" y "apihash" después de hacer clic en create...

knxmap

KNXmap A tool for scanning and auditing KNXnet/IP gateways on IP driven networks. KNXnet/IP defines Ethernet as physical communication media for KNX EN 50090, ISO/IEC 14543. KNXmap also allows to scan for devices on the KNX bus via KNXnet/IP gateways. In addition to scanning, KNXmap supports othe...

columbus-server

Columbus server This repository is deprecated! ‼️ The server component is moved to https://github.com/elmasy-com/columbus. Columbus Project is an API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features. Columbus returned 638 subdomains of tesla.co...

PT-2026-89846

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in UserGroups::setGroup name that fails to sanitize group name input. Administrators with canAdminUserGroups permission can inject malicious HTML and JavaScript that executes i...

secuimag3a

A partir de una falla o vulnerabilidad, ya sea propuesta por el profesor o elegida por ustedes que debe estar relacionada con el tema propuesto: root@kitploit: Indicar cuál es el servicio o programa comprometido, cuál es el tipo de compromiso Explicar la vulnerabilidad, describir el mecanismo que...

Berserko

Berserko - Kerberos authentication for Burp Suite Released as open source by NCC Group Plc - http://www.nccgroup.trust/ Developed by Richard Turnbull, richard dot turnbull at nccgroup dot com http://www.github.com/nccgroup/Berserko Released under AGPL, see LICENSE for more information ❗ Important...

Baskerville

Baskerville Reads from files or interface and writes to files in specified directory with filename based on unixtime of first packet in each file. Certain protocols can be suppressed, in which case only the first N packets are recorded to disk. This reduces disk usage saving data which is of litt...

binja_sensei

binjasensei Educational tools for Binary Ninja This plugin provides resources for beginners to learn reverse engineering using Binary Ninja. It automatically installs several other plugins, and provides examples that showcase the features of these plugins. Origins This project is a product of NCC...

BurpSuiteHTTPSmuggler

Burp Suite HTTP Smuggler A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques. This extension has been developed by Soroush Dalili @irsdl from NCC Group. The initial release v0.1 only supports the Encoding capability that can be quite...

burp-reflux

Burp Proxy reflux log parser: Burp proxy text log converter to CSV and SQLLite Reflux for Burp log parsing and conversion Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com...

creep-web-app-scanner

creep-web-app-scanner Un escáner de sitios web muy primitivo actualmente en desarrollo por un empleado de NCC Group y graduado universitario con un 20% de tiempo de investigación. creep actualmente rastrea un sitio y busca información potencialmente interesante dentro de cada página. creep...

ConMachi

Conmachi Container Scanner ¿Está mal recoger capacidades en un contenedor? Conmachi es una herramienta escrita en Golang diseñada para recopilar información sobre el entorno de un contenedor y enumerar posibles problemas de seguridad. Se puede compilar de forma estática para que pueda introducirs...

easyda

EasyDA - Easy Windows Domain Access Script Easy Windows Domain Access Script Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniel Compton, daniel dot compton at nccgroup dot com https://github.com/nccgroup/easyda Released under AGPL see LICENSE for more...

fips203

NCC Group: FIPS 203 Module-Lattice-Based Key-Encapsulation Mechanism Standard FIPS 203 Initial Public Draft Module-Lattice-Based Key-Encapsulation Mechanism Standard written in pure Rust for server, desktop, browser and embedded applications. The source repository includes examples demonstrating...