74609 matches found
boringssl
BoringSSL BoringSSL is a fork of OpenSSL that is designed to meet Google's needs. Although BoringSSL is an open source project, it is not intended for general use, as OpenSSL is. We don't recommend that third parties depend upon it. Doing so is likely to be frustrating because there are no...
gdid-reversal
Análisis completo del GDID de Windows Identificador Global de Dispositivo completamente ingeniado inversamente -8a2be2 -0078d6 Cómo se genera, almacena y transmite realmente el "Identificador Global de Dispositivo" de Microsoft, la huella persistente de Windows mencionada en la denuncia de julio ...
haiti
HAITI HA sh I denT ifI er ¿Qué es? Una herramienta CLI y librería para identificar tipos de hash identificador de tipo de hash. CLI librería Características Más de 675 tipos de hash detectados Algoritmos modernos compatibles SHA3, Keccak, Blake2, etc. Referencias de Hashcat y John the Ripper...
zotlit-PoC
ZotLit: aviso de seguridad Estado del CVE: solicitado, pendiente de asignación. Este hallazgo se publica como GHSA-4qh7-66xv-h329. Al asignarse el CVE, este repositorio se renombra CVE-YYYY-NNNNN-zotlit-PoC y este banner se reemplaza con el enlace del CVE. | ---|--- Investigador| Dostxodjayev...
Intensio-Obfuscator
Intensio-Obfuscator Proyecto ya no mantenido Gracias a todos los contribuyentes ¿Qué es esto? La herramienta Intensio-Obfuscator toma un código fuente de Python y lo transforma en un código ofuscado de Python Reemplaza todos los nombres de variables/clases/funciones/nombres-de-archivos por cadena...
tinfoleak
tinfoleak The most complete open-source tool for Twitter intelligence analysis Introduction tinfoleak is an open-source tool within the OSINT Open Source Intelligence and SOCMINT Social Media Intelligence disciplines, that automates the extraction of information on Twitter and facilitates...
CVE-2026-36374
Descripción Se ha identificado un endpoint público que permite la consulta de certificados mediante un identificador predecible código de certificado, sin ningún mecanismo de autenticación o autorización. Mediante la enumeración de este identificador, un atacante puede acceder a datos personales ...
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns
Summarysoupsieve compiles CSS selector strings with a set of hand-written regular expressions. The shared IDENTIFIER sub-pattern also embedded in VALUE, and therefore in attribute selectors places two adjacent quantified groups over overlapping character classes: ?:classA|ESC+?:classB|ESC, where...
CVE-2026-66249
iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies transmitted over unencrypted HTTP connections, enabling the unauthorized extraction of sensitive information such as session identifiers...
CVE-2022-39197
CVE-2022-39197 CVE-2022-39197 "ID": "CVE-2022-39197", "STATE": "RESERVED"...
hash-identifier
hash-identifier Software to identify the different types of hashes used to encrypt data and especially passwords. Encryption formats supported: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224 114080 ,Haval-256...
hash-identifier
hash-identifier Software para identificar los diferentes tipos de hashes utilizados para cifrar datos y especialmente contraseñas. Formatos de cifrado soportados: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224...
openssl: OpenSSL: Denial of Service via unbounded QUIC connection identifier backlog
A flaw was found in OpenSSL. A remote attacker can cause a Denial of Service DoS by flooding a connection with connection identifier update requests while withholding acknowledgments. This behavior bypasses connection limits and forces the system to accumulate pending retirement frames, resulting...
openssl: OpenSSL: Denial of Service via unbounded QUIC connection identifier backlog
A flaw was found in OpenSSL. A remote attacker can cause a Denial of Service DoS by flooding a connection with connection identifier update requests while withholding acknowledgments. This behavior bypasses connection limits and forces the system to accumulate pending retirement frames, resulting...
CVE-2026-97495
A flaw was found in the Linux kernel's AMD GPU driver amdkfd. A local user could exploit this vulnerability to cause a Denial of Service DoS or kernel memory corruption by supplying an out-of-bounds doorbell identifier during queue allocation. The issue occurs because the doorbell allocation...
JS Help Desk <= 2.8.1 - SQL Injection
The JS Help Desk – Best Help Desk & Support Plugin plugin for WordPress is vulnerable to SQL Injection via the 'email' and 'trackingid' parameters in all versions up to 2.8.2 exclusive due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S...
Issabel Authenticated - Remote Code Execution
A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asteriskcli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command injection. The attack may be initiated...
CVE-2026-84784
A flaw was found in OpenSSL. A remote attacker can cause a Denial of Service DoS by flooding a connection with connection identifier update requests while withholding acknowledgments. This behavior bypasses connection limits and forces the system to accumulate pending retirement frames, resulting...
CVE-2026-97598
A flaw was found in the Linux kernel's IPv4 routing subsystem. This vulnerability allows a local user with network configuration privileges to cause a Denial of Service DoS. When automatic routing table identifier allocation is requested, the kernel searches through table identifiers without an...