custom-bytecode-analyzer

custom-bytecode-analyzer Analizador de bytecode de Java personalizable mediante reglas JSON. Es una herramienta de línea de comandos que recibe una ruta que contiene uno o más archivos Jar o War, los analiza utilizando las reglas proporcionadas y genera informes HTML con los resultados. Uso usage...

raven

Raven - Mapa Avanzado de Amenazas Cibernéticas Simplificado, personalizable y adaptable. Usa D3.js con TOPO JSON, tiene 247 países, 100,000 ciudades, y puede usarse en un entorno aislado ¡sin búsquedas externas! Estructura Sin conexión - Demo Firefox, Chrome o Safari En vivo - Regresión 500 ataqu...

golddigger

Gold Digger Busca archivos en busca de oro Gold Digger es una herramienta simple utilizada para ayudar a descubrir rápidamente información sensible en archivos de forma recursiva. Originalmente fue escrita para ayudar en la búsqueda rápida de archivos obtenidos durante una prueba de penetración...

attack-stix-data

Dati STIX ATT&CK® MITRE ATT&CK è una base di conoscenza accessibile a livello globale di tattiche e tecniche degli avversari basata su osservazioni del mondo reale. La base di conoscenza ATT&CK è utilizzata come fondamento per lo sviluppo di modelli di minaccia e metodologie specifici nel settore...

fprobe

FProbe FProbe - Sonda HTTP rápida Instalación GO111MODULE=on go get -u github.com/theblackturtle/fprobe Características Toma una lista de dominios/subdominios y prueba si tienen servidores http/https funcionando. Optimiza RAM y CPU en tiempo de ejecución. Soporta puertos especiales para cada...

batchql

BatchQL BatchQL es un script de auditoría de seguridad de GraphQL centrado en realizar consultas y mutaciones GraphQL por lotes. Este script no es complejo y agradecemos las mejoras. Al explorar el espacio problemático de los ataques de batching en GraphQL, encontramos que hay algunas publicacion...

CVE-2026-108695

MultiVendorX WordPress plugin through 5.0.19 contains an incorrect authorization vulnerability that allows vendor accounts to modify marketplace-wide settings via the settings REST endpoint. Attackers with the storeowner role can send POST requests to /wp-json/multivendorx/v1/settings, gated only...

CVE-2026-108695 MultiVendorX through 5.0.19 Incorrect Authorization via Settings REST Endpoint

MultiVendorX WordPress plugin through 5.0.19 contains an incorrect authorization vulnerability that allows vendor accounts to modify marketplace-wide settings via the settings REST endpoint. Attackers with the storeowner role can send POST requests to /wp-json/multivendorx/v1/settings, gated only...

mud-visualizer

Visualizzatore di Manufacturer Usage Description MUD Attenzione: mud-visualizer è attualmente in beta. Usalo a tuo rischio. Questo strumento può essere utilizzato per visualizzare i file MUD in formato JSON. Indice Motivazione Installazione Astrazioni MUD supportate Contributi Supporto Citazione...

CVE-2026-108545 SillyTavern 1.12.13 through 1.19.0 Pre-Authentication Denial of Service via Body Parsing

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...

CVE-2026-91136

The Divi Plus WordPress plugin (versions ≤ 2.4.0 ) is vulnerable to Unauthenticated Arbitrary File Read due to a lack of input validation on the svg_image parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. The SVGAnimatorController::index_permission callback returns true...

EUVD-2026-96298

The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svgimage' parameter of the /wp-json/elicus/v1/dipl-modules/svg-animator REST endpoint. This is due to the endpoint's permission callback SVGAnimatorController::indexpermission...

CLEANSTART-2026-AK31970 stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint

Security vulnerability affects the n8n package. stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint...

CLEANSTART-2026-ME44446 stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint

Security vulnerability affects the n8n package. stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint...

CLEANSTART-2026-EJ44011 stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint

Security vulnerability affects the n8n package. stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint...

CLEANSTART-2026-XX88554 undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON

Security vulnerability affects the n8n package. undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON...

CLEANSTART-2026-GJ26931 PyJWT is a Python implementation of JSON Web Token standards

CVE-2026-102272 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...

CLEANSTART-2026-DL13850 PyJWT is a Python implementation of JSON Web Token standards

CVE-2026-102269 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...

CLEANSTART-2026-ON24571 jackson-databind binds a JSON string to a javax

CVE-2026-68497 affects multiple packages. jackson-databind binds a JSON string to a javax. See references for individual vulnerability details...

CLEANSTART-2026-OB90229 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON

Security vulnerability affects the apache-nifi package. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON...