lm-fingerprint

LM-Fingerprint Fingerprints the serving stack behind an OpenAI-compatible chat endpoint. It records tokenizer accounting, hidden template offset, validation prose, JSON/SSE shape, role acceptance, named limits, and gateway headers. It does not load weights, store API keys, or ask the model who it...

OSCP Notes and Custom Dashboard

OSCP Field Notebook Tags: ligolo hashcat Port-indexed pentest methodology notebook: decision trees, copy-paste command patterns, and lessons from authorized practice boxes HTB / PG / personal labs. Merged from the older finalnotes-vault into this single tree. A workflow you can run under time...

rhabdomancer

rhabdomancer "The road to exploitable bugs is paved with unexploitable bugs." -- Mark Dowd Rhabdomancer is a blazing fast IDA headless plugin that locates calls to potentially insecure API functions in a binary file. Auditors can backtrace from these candidate points to find pathways allowing...

bitbucket-iac-scan

Bitbucket Security: Infrastructure as Code Security Scanner Scans your Infrastructure as Code configuration files to ensure good security practises. Creates a security Code Insights report if issue is found. This Bitbucket Cloud supported Pipe leverages the industry leading KICS scanning tool to...

CVE-2025-24813

CVE-2025-24813 Descripción Este repositorio pretende proporcionar instrucciones claras para el despliegue rápido de Tomcat v9.0.90 con java 25.0.1 2025-10-21 LTS en Windows Server 2019 Standard para un ejercicio de emulación de amenazas de ciberseguridad. El exploit.py utiliza ysoserial-all.jar...

CVE-2026-28609-matroska-pcm-oob

CVE-2026-28609 — Matroska PCM Out-of-Bounds Write Proof-of-concept, instrumented reproduction harness, and technical write-up for CVE-2026-28609, an out-of-bounds write in Android's MatroskaExtractor reachable via a crafted WebM file with a big-endian PCM audio track. At a glance CVE ID:...

gha-lab-e4a85583c3

Artefacto de investigación automatizado — no es el proyecto original. Este repositorio es un laboratorio desechable construido por un sistema automatizado para una tesis de maestría en la Université Laval sobre la reproducción de vulnerabilidades publicadas en flujos de trabajo de GitHub Actions...

CVE-2023-4911

glibc Heap Buffer Overflow Vulnerability CVE-2023-4911 Item| Description ---|--- CVE ID| CVE-2023-4911 Attack Type| Heap Buffer Overflow → Local Privilege Escalation CVSS 3.1| 7.8 High Disclosure Date| 2023-10-03 Vulnerability Point| glibc dynamic loader ld.so GLIBCTUNABLES parser Affected...

bash-apocalypse

Bash Apocalypse Kit de explotación automatizada para CVE-2014-6271 Shellshock Un proyecto completo de investigación en seguridad que demuestra la vulnerabilidad Shellshock que afectó a millones de servidores en 2014. Incluye capacidades de escaneo automatizado, explotación y recomendaciones...

CVE-2020-8250

CVE-2020-8250: Escalada de Privilegios mediante Inyección de Comandos en el Cliente Linux de Pulse Secure VPN El ejecutable SUID root pulsesvc tiene una función “doupload” que pasa de forma insegura la variable de entorno “HOME” a “system”. Al alterar la variable “HOME” para que contenga caracter...

CA-Common-Services-privilege-escalation-cve-2016-9795-revisited

Escalada de privilegios en CA Common Services CVE-2016-9795 revisitada Descripción En uno de mis pentests, me topé con el binario SUID casrvc que forma parte de la suite CA Common Services. Como descubrí, el binario es vulnerable a escalada local de privilegios. De hecho, un CVE público...

CVE-2022-34913

Descripción de CVE-2022-34913 md2roff 1.7 sufre un desbordamiento de búfer basado en pila mediante un archivo Markdown que contiene una gran cantidad de caracteres consecutivos por procesar. Reproducción Para reproducir la vulnerabilidad, debemos descargar una versión vulnerable de md2roff versió...

CVE-2025-23134_fixes_code

CVE-2026-34180 – Patch Changes The patch addresses an integer truncation issue in the OpenSSL ASN.1/DER decoding code. The following changes were made: 1. Updated the ASN.1 content length type Changed the len parameter of asn1exc2i from int to long. This allows the function to receive and handle...

cve-2026-54316-lab

CVE-2026-54316 — Laboratorio de exfiltración de Claude Code vía WebFetch y HuggingFace Un laboratorio autocontenido y desechable que reproduce GHSA-fg94-h982-f3mm / CVE-2026-54316: Claude Code preaprobó huggingface.co como un nombre de host simple para la herramienta WebFetch, por lo que cualquie...

MinIO Operator Console Authentication Bypass

MinIO Console is a graphical user interface for the for MinIO Operator. MinIO itself is a multi-cloud object storage project. Affected versions are subject to an authentication bypass issue in the Operator Console when an external IDP is enabled. id: CVE-2021-41266 info: name: MinIO Operator...

74CMS - Remote File Inclusion

PHP remote file inclusion in the assignresumetpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution. id: CVE-2020-29279 info: name: 74CMS - Remote File Inclusion author: DhiyaneshDK severity: critical description: | PHP remote file...

pyLoad Flask Config - Access Control

pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the SECRETKEY variable. This issue has been patched in version 0.5.0b3.dev77. id: CVE-2024-21644 info: name: pyLoad Flask Config ...

Citrix - Local File Inclusion

Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 are vulnerable to local file inclusion because they allow unauthenticated access to certain URL endpoints. id:...

CirCarLife <4.3 - Improper Authentication

CirCarLife before 4.3 is susceptible to improper authentication. A PLC status disclosure exists due to lack of authentication for /html/devstat.html. An attacker can obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2018-16670 info: name: CirCarLife 4.3 -...

BOA Web Server 0.94.14 - Arbitrary File Access

BOA Web Server 0.94.14 is susceptible to arbitrary file access. The server allows the injection of "../.." using the FILECAMERA variable sent by GET to read files with root privileges and without using access credentials. id: CVE-2017-9833 info: name: BOA Web Server 0.94.14 - Arbitrary File Acces...