m365_groups_enum

Enumerar grupos de Microsoft 365 en un inquilino con sus metadatos Descripción El script allgroups.py permite enumerar todos los grupos de Microsoft 365 en un inquilino de Azure AD con sus metadatos: nombre visibilidad: público o privado descripción dirección de correo electrónico propietarios...

X-force

Biblioteca IBM X-Force Exchange | Biblioteca IBM Security X-FORCE Exchange en Python 3. Búsqueda: threatactivities, threatgroups, malwareanalysis, collector e industries. Para otras aplicaciones. Ver ---|--- Instalación pip3 install XForce Uso Usando tu APIKEY, haz una autenticación básica. Ver...

POC-CVE-2026-42826-2026-42826-Microsoft-Azure-DevOps-Information-Disclosure-Vulnerability

CVE-2026-42826 — Azure DevOps Information Disclosure PoC Overview Field| Value ---|--- CVE| CVE-2026-42826 CVSS| 10.0 Critical Microsoft / 7.5 High NVD CWE| CWE-200 Exposure of Sensitive Information to an Unauthorized Actor GHSA| GHSA-gmwx-3xm2-9fx8 Affected| Azure DevOps Services, Azure DevOps...

NGINX-ngx_http_rewrite_module-heap-buffer-overflow-CVE-2026-9256

CVE-2026-9256 NGINX ngxhttprewritemodule PoC Derivation Process and Thoughts Scope: Only for local ranges, authorized reproduction environments, vulnerability verification, and protection rule analysis. Do not use against unauthorized targets. The PoC ideas in this document only verify remotely...

sslscan

sslscan2 sslscan バージョン 2 がリリースされました。これにはバックエンドスキャンコードの大幅な書き換えが含まれており、多くのチェックで OpenSSL のバージョンに依存しなくなりました。これにより、コンパイル時にリンクされた OpenSSL のバージョンに関係なく、レガシープロトコル（SSLv2 や SSLv3）のサポートに加え、TLSv1.3 もサポートできるようになりました。 これは主に jtesta の作業によって可能になりました。彼はバックエンドの書き換えの大部分を担当しました。 その他の主な変更点は以下の通りです。 サーバーの鍵交換グループの列挙...

CVE-2026-7473---Arista-EOS-Tunnel-Decapsulation-Bypass

README.md markdown CVE-2026-7473 - Arista EOS Tunnel Decapsulation Bypass ⚠️ WARNING This code is ONLY for educational purposes and authorized security testing. 📋 Description CVE-2026-7473 is a vulnerability in Arista EOS where a switch configured as a tunnel endpoint VXLAN, GRE, decap-groups...

Apache NiFi - Information Disclosure

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

CVE-2026-94609

CVE-2026-94609 — authentik Privilege Escalation via Delegated Group/User Management -important Write-up and proof-of-concept for a privilege-escalation vulnerability in goauthentik/authentik, fixed in 2026.2.7 / 2026.5.7 / 2026.8.2 and assigned CVE-2026-94609 GHSA-h6c5-mpvq-j4jc. I was one of the...

CVE-2023-2825

CVE-2023-2825 - GitLab CE/EE 16.0.0 Arbitrary File Read via Path Traversal On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition CE and Enterprise Edition EE version 16.0.0. The vulnerability allows unauthenticated user...

CVE-2026-62061

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfileGrid: from n/a through 6.0.0.2...

EUVD-2026-90807

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfileGrid: from n/a through 6.0.0.2...

CVE-2026-62061 WordPress ProfileGrid plugin <= 6.0.0.2 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfileGrid: from n/a through 6.0.0.2...

CVE-2026-102585

A flaw was found in Moodle. When enrolling a user into a course while assigning them to a group, the application does not verify whether the selected group actually belongs to that course. An authenticated user with teacher privileges could exploit this flaw to add users to groups within courses...

terraform-aws-security-group

terraform-aws-security-group Módulo de Terraform para gestionar grupos de seguridad de AWS. Actualmente, las reglas de ingreso y egreso admiten entradas de IPv4, IPv6 e ID de grupo de seguridad. Requisitos Nombre| Versión ---|--- terraform| = 1.6 aws| = 5.0 Proveedores Nombre| Versión ---|--- aws...

cloudformation-waf-acl

cloudformation-waf-acl Una plantilla de AWS CloudFormation utilizada para aprovisionar y gestionar recursos de AWS WAFv2, incluyendo una Web ACL, grupos de reglas administradas, un conjunto de patrones de expresiones regulares personalizadas y un conjunto de IPs. Componentes La plantilla...

Linux Distros Unpatched Vulnerability : CVE-2026-102278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace...

brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion

Summary expand recurses once per level of brace nesting. Deeply nested input exhausts the native stack and crashes the process. This is distinct from CVE-2026-14257 / GHSA-mh99-v99m-4gvg, which made the tail iterative recursion on m.post, driven by how many groups are chained. Nesting depth drive...

GHSA-QHR7-859C-M2P7 brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion

Summary expand recurses once per level of brace nesting. Deeply nested input exhausts the native stack and crashes the process. This is distinct from CVE-2026-14257 / GHSA-mh99-v99m-4gvg, which made the tail iterative recursion on m.post, driven by how many groups are chained. Nesting depth drive...

CVE-2026-9833

CVE-2026-9833 CVE ID: CVE-2026-9833 Vulnerability Type: Cross-Site Scripting XSS – Reflected XSS CWE: CWE-79 – Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' Severity: High CISA ADP CVSS v3.1: 7.1 Overview CVE-2026-9833 affects the Tag Groups – Advanced Way to...

CVE-2023-2825-PoC

CVE-2023-2825-PoC Proof-of-concept for CVE-2023-2825, an arbitrary file read vulnerability in GitLab CE/EE 16.0.0. The script logs in with a valid GitLab account, creates the required public nested group structure, creates a public project, uploads an attachment, and uses the vulnerable upload pa...