CVE-2025-31129

CVE-2025-31129 exploits para CVE-2025-31129...

xc

XC Netcat like reverse shell for Linux & Windows. Features Windows root@kitploit: Usage: └ Shared Commands: !exit !upload uploads a file to the target !download downloads a file from the target !lfwd local portforwarding like ssh -L !rfwd remote portforwarding like ssh -R !lsfwd lists active...

bluemonday

bluemonday bluemonday is a HTML sanitizer implemented in Go. It is fast and highly configurable. bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include...

confused

Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...

llm-security-101

Seguridad de LLM 101 Adentrándonos en el ámbito de la seguridad de LLM: una exploración de herramientas ofensivas y defensivas, revelando sus capacidades actuales. A medida que adoptamos los Modelos de Lenguaje de Gran Tamaño LLM en diversas aplicaciones y funcionalidades, es crucial comprender l...

Directus - Unauthenticated File Modification

Directus versions from 10.8.0 before 11.9.3 allow unauthenticated attackers to modify the contents of an existing file when a valid file UUID is known. The PATCH /files/id endpoint processes multipart file uploads without proper authentication, allowing file content replacement despite returning ...

test_avb_key

Sobre casi firmar builds de Android Introducción Un error que a veces encuentran los consultores de NCC Group es firmar builds de Android con claves privadas conocidas. Esto deja a los fabricantes de dispositivos y, por lo tanto, a sus usuarios vulnerables, incluso en dispositivos donde el arranq...

FULL-SPLOIT-FOR-MVID-2021-0359

FULL-SPLOIT-FOR-MVID-2021-0359 nday para MVID-2021-0359...

forticrack

FortiCrack Descifra imágenes de firmware Fortinet FortiOS cifradas Desarrollado por Bishop Fox Team X Requisitos Esta herramienta está diseñada para ejecutarse en un entorno Linux. Instala los paquetes python3 y gzip para tu sistema. Uso Descarga una imagen de firmware cifrada desde el sitio de...

CVE-2024-2851

creationtimestamp| type| source ---|---|--- 2026-09-10 11:00:46+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/64394a9a-b4a1-4a61-ba7b-af896277501e...

OpenSSL-2022

Vulnerabilidad de OpenSSL 2022 - CVE-2022-3602/CVE-2022-3786 Este repositorio contiene información operativa sobre CVE-2022-3602 y CVE-2022-3786, dos vulnerabilidades en OpenSSL 3.0.0-3.0.6. Para más información, consulte: Aviso de seguridad de OpenSSL Preguntas frecuentes del blog de OpenSSL Avi...

Linux Distros Unpatched Vulnerability : CVE-2026-19816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

my-cool-demo-php-code

My Cool Demo PHP Code! This repository contains a known super bad thing. What is it I wonder? Can it be related to a known CVE ID?...

openclaw_vulnerabilities_and_solutions

OpenClaw — vulnerabilidades, endurecimiento y despliegue en VPS Documentación pública saneada sobre el despliegue seguro de OpenClaw en VPS: arquitectura de acceso, vulnerabilidades conocidas e incidentes prácticos con soluciones. Documentación pública y saneada de operaciones reales de OpenClaw:...

SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization

SolarWinds Web Help Desk before version 12.8.3 contain a critical Java deserialization vulnerability that enables remote code execution. Attackers can exploit this flaw to execute arbitrary commands on the host machine. Initially reported as unauthenticated, SolarWinds was unable to reproduce...

Linux Distros Unpatched Vulnerability : CVE-2026-18090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Image...

CVE-2026-82754

Improper Protection of Alternate Path vulnerability in ash-project ashauthenticationoauth2server exposes the state-changing OAuth endpoints under an unintended URL prefix, bypassing controls scoped to the canonical prefix. oauth2serverprotocolroutes/1 in...

CVE-2026-82754

An Improper Protection of Alternate Path vulnerability in the ash_authentication_oauth2_server Elixir library (versions 0.1.0 through before 0.3.1) causes state-changing OAuth endpoints to be reachable under an unintended URL prefix. The oauth2_server_protocol_routes/1 function in the Phoenix rou...

CVE-2026-82754 ash_authentication_oauth2_server aliases every protocol endpoint under /.well-known, bypassing path-scoped controls

Improper Protection of Alternate Path vulnerability in ash-project ashauthenticationoauth2server exposes the state-changing OAuth endpoints under an unintended URL prefix, bypassing controls scoped to the canonical prefix. oauth2serverprotocolroutes/1 in...

EUVD-2026-72536

Improper Protection of Alternate Path vulnerability in ash-project ashauthenticationoauth2server exposes the state-changing OAuth endpoints under an unintended URL prefix, bypassing controls scoped to the canonical prefix. oauth2serverprotocolroutes/1 in...