capture-the-flag

Capture The Flag! Remasteriza imágenes de Live CD de Linux con el propósito de crear wargames de seguridad listos para usar con vulnerabilidades preinstaladas para explotar. Requisitos Necesitarás lo siguiente para construir el Live CD con los scripts de este proyecto: Linux, con acceso root...

ZimaOS <= v1.2.4 - Sensitive Information Disclosure

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the API endpoints in ZimaOS, such as http:///v1/users/image?path=/var/lib/casaos/1/apporder.json and http:///v1/users/image?path=/var/lib/casaos/1/system.json,...

CVE-2021-43798

CVE-2021-43798 CVE-2021-43798 是一个高优先级漏洞（CVSS 7.5），可通过 Grafana 应用程序中已安装的插件导致任意文件读取。 该漏洞影响版本 8.0.0-beta1、8.0.0 至 8.3.0。 仅在 8.2.0 上测试过。该漏洞利用方式是创建一个易受攻击的插件列表，然后发送 HTTP 请求检查插件是否已安装。 在检查过程中，它会尝试获取 fileread 选项中指定的文件。 使用示例： python3 cve-2021-43798.py -t 127.0.0.1 -p 3000 -f /etc/passwd...

umap

umap - the USB host security assessment tool Based on Facedancer by Travis Goodspeed: http://goodfet.sourceforge.net/hardware/facedancer21/ Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com...

stego-toolkit

隐写工具集 该项目是一个 Docker 镜像，适用于解决 CTF 平台（如 hackthebox.eu）上的隐写挑战。该镜像预装了许多流行工具（见下方工具列表），以及一些可用于检查简单事物的筛选脚本（例如，运行 checkjpg.sh image.jpg 可获取 JPG 文件的报告）。 使用方法 首先确保您已安装 Docker（安装指南）。然后您可以使用此仓库中的 shell 脚本 bin/build.sh 和 bin/run.sh 来构建镜像并运行容器。您将进入容器内的 bash shell。容器将挂载 data 文件夹，您可以将待分析的文件放入其中。 如果您不使用脚本，请按以下步骤操...

CVE-2026-87486

A flaw was found in Google Chrome. This clickjacking vulnerability allows a local attacker, through a co-installed application, to spoof the address bar. This could mislead users about the authenticity of the displayed website...

CVE-2026-87552

A flaw was found in Google Chrome on Android. A local attacker could exploit missing authorization in the TrustedWebActivities feature via a co-installed application. This could allow the attacker to obtain sensitive information...

CVE-2026-87597

A flaw was found in Google Chrome's CustomTabs component on Android. A remote attacker, by leveraging a co-installed application, could exploit a user interface UI misrepresentation vulnerability. This could allow the attacker to spoof the address bar, potentially deceiving users about the...

DEBIAN-CVE-2026-87597

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...

CVE-2026-87552

Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: High...

DEBIAN-CVE-2026-87486

Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. Chromium security severity: Medium...

EUVD-2026-74459

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...

CVE-2026-87597

Google Chrome on Android versions prior to 153.0.8010.36 are affected by a UI misrepresentation vulnerability in the CustomTabs component. A remote attacker could spoof the address bar by leveraging a co-installed app. The vulnerability is rated Low by Chromium and carries a CVSS 3.1 base score o...

EUVD-2026-74368

Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. Chromium security severity: Medium...

CVE-2026-87486

Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. Chromium security severity: Medium...

CVE-2026-87486

Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via a co-installed app. Chromium security severity: Medium...

CVE-2026-87552

Missing authorization in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: High...

PT-2026-88697

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...

SUSE CVE-2026-84325

Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. Chromium security severity: High...

EUVD-2026-69738

Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. Chromium security severity: High...