408 matches found
HackingAllTheThings
HackingAllTheThings Resumen Este repositorio es para mantener una estructura de mis herramientas y notas que uso cuando trabajo para archivar algunas certificaciones de seguridad informática. Algunas herramientas serán escritas por mí y otras serán recursos encontrados de diferentes lugares...
ThreatHunting
El Proyecto ThreatHunting Un repositorio informativo sobre la caza de adversarios en tu entorno de TI. Asegúrate de visitar ThreatHunting.net para más información sobre este repositorio. Licencia Aquí está el acuerdo, en lenguaje claro: Este repositorio está aquí para la comunidad. Eres libre de...
dradis-ce
Welcome to the Dradis Framework An Automated Pentest Reporting Tool Dradis is an open-source collaboration framework and penetration testing report generator that helps InfoSec teams streamline reporting workflows. With support for importing data from tools like Burp Suite, Nessus, and Nmap, Drad...
Bramble
🌱 Bramble, un nuevo conjunto de herramientas de hacking de código abierto. 📜 Resumen El software de Bramble ha sido diseñado para el proyecto Bramble. Incorpora muchas características de pentesting y seguridad informática. Es fácil de usar y completamente editable. Permite a los principiantes...
WMD
WMD Arma de Destrucción Masiva Esta es una herramienta de Python con una colección de software de seguridad informática. El software está encapsulado en "módulos". Los módulos consisten en código Python puro y/o programas externos de terceros. Funciones principales 1. Para usar un módulo, ejecuta...
hackazon
Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...
CVE-2026-70834
creationtimestamp| type| source ---|---|--- 2026-08-19 17:49:51+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-61291
creationtimestamp| type| source ---|---|--- 2026-08-19 17:21:51+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
EUVD-2018-5740
Malware in sbrugna...
EUVD-2021-16230
Malware in sbrugna...
EUVD-2021-26923
Malware in sbrugna...
EUVD-2023-27677
Malicious code in bioql PyPI...
EUVD-2022-1795
Malicious code in bioql PyPI...
CVE-2024-51094
An issue in Snipe-IT v.7.0.13 build 15514 allows a low-privileged attacker to modify their profile name and inject a malicious payload into the "Name" field. When an administrator later accesses the People Management page, exports the data as a CSV file, and opens it, the injected payload will be...
North Korean Hackers Stole $88M by Posing as US Tech Workers
Flashpoint uncovers how North Korean hackers used fake identities to secure remote IT jobs in the US, siphoning…...
The IT help desk kindly requests you read this newsletter
Welcome to this week's edition of the Threat Source newsletter. Authority bias is one of the many things that shape how we think. Taking the advice of someone with recognized authority is often far easier and usually leads to a better outcome than spending time and effort in researching the...
Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to Envoy denial of service vulnerabilitiy( CVE-2024-45810).
Summary Potential Envoy denial of service vulnerabilitiy CVE-2024-45810 has been identified that affects IBM Watson CP4D Data Stores. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-45810 DESCRIPTION: Envoy is vulnerable to ...
Navigating the Future: Key IT Vulnerability Management Trends
As the cybersecurity landscape continues to evolve, proactive vulnerability management has become a critical priority for managed service providers MSPs and IT teams. Recent trends indicate that organizations increasingly prioritize more frequent IT security vulnerability assessments to identify...
CVE-2025-22313
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Widgetize Pages Light widgetize-pages-light allows Reflected XSS.This issue affects Widgetize Pages Light: from n/a through = 3.0...