wifi-password

wifi-password Obtén rápidamente tu contraseña WiFi y, si es necesario, genera un código QR de tu WiFi para que los teléfonos puedan conectarse fácilmente. Funciona en macOS , Linux y Windows Instalación Instalar usando pip $ python3 -m pip install --user wifi-password Instalar usando git $ git...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

Credential-Hunting

CredsHunter credshunter es un buscador de credenciales de solo lectura para post-explotación autorizada. Recorre un host una vez y expone los secretos que realmente puedes reutilizar —contraseñas, claves, hashes y archivos de credenciales— mientras ignora los tokens de cloud/SaaS que solo añaden...

CVE-2021-41773

CVE-2021-41773 Comprobador de vulnerabilidad de Path Traversal en Apache 2.4.49 Ejemplo Plataforma Linux y Windows...

CVE-2025-31486-PoC

Descargo de responsabilidad: Las vulnerabilidades descritas en este documento y sus pasos de reproducción están destinados únicamente a fines de investigación y educación en ciberseguridad. Nadie debe utilizar la información proporcionada en este documento para fines ilegales o pruebas no...

CVE-2022-33891

CVE-2022-33891 Apache Spark Vulnerabilidad Exploit . Creado por : Dr.Linux Este Exploit se ejecuta con Python versión 3.7 y versiones posteriores de Python...

log4j-samples

log4j-samples Samples of log4j library versions to help log4j scanners / detectors including our own log4j-detector improve their accuracy for detecting CVE-2021-45046 and CVE-2021-44228. The samples include shaded jars, uber jars, spring-boot executable jars, jars inside jars, exploded jars, etc...

-cve-2025-55182

CVE-2025-55182 Script de detección por lotes / URL única image Una herramienta eficiente de detección de la vulnerabilidad CVE-2025-55182, que admite detección rápida de una sola URL y detección por lotes de URLs, generando automáticamente un informe detallado en Excel y un archivo de registro...

netwatch v0.32.3

NetWatch Network diagnostics in your terminal. netwatch --view dense. Four boxes, no chrome, every keybind on a border. Download grows up from the axis, upload grows down. One binary, no config. sudo netwatch and you have live capture with L7 decode, process attribution where available, and a...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations in Google Chrome’s compositing layer on Linux and Windows, prior to version 89.0.4389.72, allowed a remote attacker to spoof the contents of the Omnibox URL bar through a crafted HTML page...

CVE-2026-64636

An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database...

CVE-2026-65590

n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package sandboxing was applied only on macOS. Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access t...

PT-2026-63348

n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package sandboxing was applied only on macOS. Shell commands executed by the tool run without any filesystem or network restrictions, allowing unrestricted access t...

Malicious code in eth-wallet-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 517d465272a3a1d252e83e178bb263a1ccf600b42fed6d5aa1d110b9141fc77a On require of index.js, a delayed IIFE reads test/fixtures/keypairs.dat, base64-decodes it into /.cache-db/.node-sync/syncd.js mode 0o700, and spawns...

MAL-2026-10075 Malicious code in testudo-pack (npm)

The npm package testudo-pack is byte-for-byte identical verified via diff to testis-pack from the same npm publisher ioa2102 [email protected], differing only in its install hook: postinstall: node index.js instead of preinstall. It presents itself as a small binary packing/checksum...

CVE-2026-8670

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs aka Session Replay. This issue affects Avantra: before 25.3.1...

Malicious code in @cloudplatform-single-spa/smk (npm)

Part of a dependency confusion attack campaign targeting the @cloudplatform-single-spa and @mlspace npm scopes. The attacker npm user mr.4nd3r50n published 139 scoped packages at the inflated version 99.99.99, which resolves ahead of any private registry version via npm's default version...

CVE-2026-8670

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs aka Session Replay. This issue affects Avantra: before 25.3.1...

CVE-2026-8672

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0...

CVE-2026-8673

CVE-2026-8673 describes an unprotected transport of credentials in Avantra from syslink software AG on Linux and Windows, allowing sniffing of credentials. The affected line is Avantra before version 25.3.0. Documented impacts emphasize confidentiality and integrity risks, with CVSS v3.1 indicati...