MikrotikExploit

Exploit de Mikrotik Escanea y exporta contraseñas de RouterOS Te permite escanear subredes IPv4 en bucle con diferentes puertos. Instalación instalar python3 Ubuntu/Debian: root@kitploit: $ apt-get install python3 instalar el administrador de paquetes de Python para python3 Ubuntu/Debian:...

PoC-Exploit-CVE-2024-20467

Exploit para la vulnerabilidad en Cisco IOS XE CVE-2024-20467 Descripción general Este exploit se dirige a una vulnerabilidad en el código de ensamblaje de fragmentos IPv4 presente en Cisco IOS XE Software. La vulnerabilidad permite a un atacante remoto no autenticado provocar una condición de...

zmap

ZMap: The Internet Scanner ZMap is a fast stateless single packet network scanner designed for Internet-wide network surveys. On a typical desktop computer with a gigabit Ethernet connection, ZMap is capable of scanning the entire public IPv4 address space on a single port in under 45 minutes. Fo...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

indicator-intelligence

Indicator-Intelligence NOTA : Definitivamente debes usarlo para actividades legales. Por favor, consulta; USAGEPOLICY.md LICENSE Descripción Encuentra dominios relacionados y direcciones IPv4 para realizar inteligencia de amenazas después de que Indicator-Intelligence recolecte archivos estáticos...

CVE-2026-57222

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, crafted IPv4 and IPv6 address pairs can collide in the IPPair hash because src/ippair.c did not compare the IP address family before reusing IPPair-back...

LiquidNet

LiquidNet 🌐🔍 LiquidNet is an IPv4 grabber/scanner designed to help pentesters gather IP addresses/global targets worldwide. This tool empowers security professionals to identify potential vulnerabilities across networks. Features 🛠️ IPv4 Gathering: Quickly and efficiently gather IP addresses...

CVE-2026-33534

CVE-2026-33534 - EspoCRM 9.3.3 Authenticated SSRF Authenticated SSRF proof-of-concept for EspoCRM 9.3.3 via alternative IPv4 loopback notation in the /api/v1/Attachment/fromImageUrl endpoint. Summary EspoCRM 9.3.3 blocks direct loopback URLs such as http://127.0.0.1/..., but the server-side fetch...

arp-scan

arp-scan À propos arp-scan est un outil de scan réseau qui utilise le protocole ARP pour découvrir et identifier les hôtes IPv4 sur le réseau local. Il est disponible pour Linux, BSD, macOS et Solaris sous licence GPLv3. Ceci est le README.md de la version 1.10.1-git d'arp-scan. Installation...

EUVD-2026-66389

OneUptime's webhook target check rejects private and loopback addresses given in IPv4 form and a small set of IPv6 forms, but has no case for the IPv4-mapped IPv6 range. The webhook delivery path calls SSRFProtection.validateWebhookTargetIsSafe, and the host-literal screening inside...

CVE-2026-92395

@fastify/proxy-addr (a Fastify plugin for determining client IP behind reverse proxies) is vulnerable to IP spoofing in versions 3.0.0 through 5.1.0. The root cause: an IPv4-mapped IPv6 trust subnet with an IPv4-sized prefix (e.g., ::ffff:10.0.0.0/8 instead of /104) is accepted silently but effec...

CVE-2026-92395 @fastify/proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet

@fastify/proxy-addr is a Fastify plugin that determines a request's client address behind trusted reverse proxies, and it backs Fastify request.ip and request.ips. In versions 3.0.0 through 5.1.0, a trust subnet written in IPv4-mapped IPv6 notation with an IPv4-sized prefix, such as...

CVE-2026-50131

CVE-2026-50131 Fedify mitigación incompleta de SSRF después de GHSA-p9cg-vqcc-grcx: validatePublicUrl permitió rangos IPv4 de uso especial. Aviso principal: GHSA-xw9q-2mv6-9fr8 Registro oficial de CVE: CVE-2026-50131 Crédito del investigador: @chaitanyagarware De un Vistazo...

terraform-aws-security-group

terraform-aws-security-group Módulo de Terraform para gestionar grupos de seguridad de AWS. Actualmente, las reglas de ingreso y egreso admiten entradas de IPv4, IPv6 e ID de grupo de seguridad. Requisitos...

CVE-2026-54689

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.2.0, the weburlread URL policy in src/url-reader.ts can be bypassed while MCPHTTPHARDEN is enabled and MCPHTTPALLOWPRIVATEURLS is not enabled because redirec...

DEBIAN-CVE-2026-90711

proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips. In versions 1.1.0 through 2.0.7, a trust subnet written in IPv4-mapped IPv6 notation with an IPv4-sized prefix, such as ::ffff:10.0.0.0/8 instead of t...

CVE-2026-90711

proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips. In versions 1.1.0 through 2.0.7, a trust subnet written in IPv4-mapped IPv6 notation with an IPv4-sized prefix, such as ::ffff:10.0.0.0/8 instead of t...

EUVD-2026-78300

proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips. In versions 1.1.0 through 2.0.7, a trust subnet written in IPv4-mapped IPv6 notation with an IPv4-sized prefix, such as ::ffff:10.0.0.0/8 instead of t...

CVE-2026-90711 proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet

proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips. In versions 1.1.0 through 2.0.7, a trust subnet written in IPv4-mapped IPv6 notation with an IPv4-sized prefix, such as ::ffff:10.0.0.0/8 instead of t...

CVE-2026-90711 proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet

proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips. In versions 1.1.0 through 2.0.7, a trust subnet written in IPv4-mapped IPv6 notation with an IPv4-sized prefix, such as ::ffff:10.0.0.0/8 instead of t...