twint-utils

twint-utils Estas son utilizaciones de Twint. Consulta nuestras pautas de colaboración para contribuir a ellas. Detector de Seguidores Mutuos Mufos.py usa Twint para detectar los seguidores mutuos de una cuenta semilla determinada. Puede incorporarse en otros pipelines más elaborados para redes...

PT-2026-89805

🚨 CYBER ESPIONAGE — UNC3569 TURNED ONE SOGOU INPUT METHOD CLICK INTO A WINDOWS BACKDOOR A custom URI handler + an outdated embedded Chromium environment ultimately enabled deployment of GRAYRABBIT. CyberSignal Priority: 🔴 VERY HIGH 🇨🇳 UNC3569 ⌨️ Sogou Input Method CVE-2026-51990 🦠 GRAYRABBIT 🔎 What...

PT-2026-90116

In the Linux kernel, the following vulnerability has been resolved: net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages On a link whose device has max recv sge == 1 there is no shared v2 receive buffer, and smc llc save add link rkeys takes the v2 extension from 44 bytes past the start of...

PT-2026-90118

In the Linux kernel, the following vulnerability has been resolved: NTB: ntb transport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntb transport tx enqueue drop packets submitted while the QP link is down, but it only return...

xz-backdoor-links

apocalypxze: enlaces relacionados con el backdoor de xz 2024, también conocido como CVE-2024-3094 Otro intento más de recopilar enlaces relevantes al backdoor de xz 2024, también conocido como CVE-2024-3094. El término «Apocalypxze» está tomado prestado del toot de Jonathan Corbet. Versión sin...

cve-2026-1668-poc

Proof-of-concept exploit for CVE-2026-1668 This is a proof-of-concept exploit for CVE-2026-1668. It is intended purely for educational purposes only. Please do not attempt to exploit systems that you do not own or do not have explicit permission to exploit. This proof-of-concept was developed...

CVE-2026-3096

The product's web portals allow external links to be opened in a new browser tab. In certain configurations, the originating window retains access to the newly opened page, allowing interaction between the two browser contexts when navigating to external destinations. This vulnerability could all...

CVE-2026-19136

A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system commands to be executed if a local user opens a specially crafted link that is handled by the application...

CVE-2026-19136

A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system commands to be executed if a local user opens a specially crafted link that is handled by the application...

CVE-2026-19136

A potential command injection vulnerability affects the Tianxi AI Agent PC Application , distributed exclusively in the Chinese market. If a local user opens a specially crafted link handled by the application, it could allow execution of operating system commands, resulting in high impact to con...

EUVD-2026-75751

A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system commands to be executed if a local user opens a specially crafted link that is handled by the application...

CVE-2024-21413-Moniker-Link-Writeup

CVE-2024-21413 – Análisis de la Vulnerabilidad Moniker Link Este repositorio contiene un análisis técnico de CVE-2024-21413 , una vulnerabilidad relacionada con el manejo de Moniker Links en Microsoft Outlook que permite a los atacantes eludir la Vista Protegida y filtrar credenciales NTLMv2...

CVE-2026-76652

TP-Link Archer MR600 (v2, v3, v5) and TL-MR6400 v8 are affected by an authenticated directory traversal vulnerability in their file upload functionality . Due to insufficient validation of user-supplied file information , an authenticated remote attacker can upload a specially crafted file that i...

CVE-2026-76653 Missing Authentication in VPN Configuration Management in TP-Link TL-MR6400 and Archer MR600

A missing authentication vulnerability in the VPN configuration management has been identified in Archer MR600 v2, v3 & v5 and TL-MR6400 v8 due to improper access control; a remote unauthenticated attacker may be able to access and modify VPN configuration information without valid credentials...

Best-Practices-Cybersecurity-Otanata-Project

CP3418BestPracticesCybersecurityOTANATAProject CVE-2024-3273 — Authorized Penetration Test Report D-Link DNS-320L NAS | Client: Otonata Overview This repository contains the full security assessment report for an authorized penetration test conducted on a D-Link DNS-320L NAS device for client...

routers-exploit

OpenSource Repo with PoC's and vulns found in routers TP LINK TL-WR849N - REMOTE COMMAND EXECUTION PoC CVE-2020-9374 - TP LINK TL-WR849N - REMOTE COMMAND EXECUTION PoC root@kitploit: Payload: "$ls" TP LINK TL-WR849N - Auth Bypass: Firmware and Configs update TP LINK TL-WR849N - REMOTE COMMAND...

CVE-2026-89049

A server-side request forgery issue due to improper validation of equivalent address representations in the port forwarding to remote hosts functionality in Amazon AWS Systems Manager Agent SSM Agent before 3.3.4851.0 on all platforms might allow an authenticated remote user to bypass the remote...

CVE-2022-42889-Text4Shell-POC

Broken Link Hijack Poc By: Alfaz Download CVE-2022-42889-Text4Shell-POC Click Here...

CVE-2026-89049 Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent

A server-side request forgery issue due to improper validation of equivalent address representations in the port forwarding to remote hosts functionality in Amazon AWS Systems Manager Agent SSM Agent before 3.3.4851.0 on all platforms might allow an authenticated remote user to bypass the remote...

CVE-2026-89049

AWS Systems Manager Agent (SSM Agent) before 3.3.4851.0 on all platforms is affected by a server-side request forgery (SSRF) flaw in the Session Manager port forwarding to remote hosts functionality. The root cause is improper validation of equivalent address representations , allowing an authent...