claude-awm

claude-awm: can you scrub a SynthID text watermark by editing the text? Yes, but only one family of attack works, and it isn't the one everyone assumes. Unicode variation selectors category Mn, U+FE00 to U+FE0F and U+E0100 to U+E01EF drive the detector below threshold and stay there. Every other...

CVE-2025-29093-Arbitrary-File-Upload

CVE-2025-29093-Carga-Arbitraria-de-Archivos Este repositorio revela una vulnerabilidad de seguridad descubierta en Motivian Content Management System v.41.0.0. CVE-2025-29093: Carga Arbitraria de Archivos Esta vulnerabilidad fue reportada al proveedor, conforme a las prácticas de divulgación...

WTSRM

WTSRM - Repositorio de demostración de Writing Tiny Small Reliable Malware para mi correspondiente charla. Desengancha todas las DLL de Windows con \KnownDlls\ Sin dependencias de CRT Tamaño reducido Baja entropía Clave de cifrado de cadenas aleatoria por lo tanto, sin cadenas en texto plano...

CVE-2024-50404

CVE-2024-50404 https://www.qnap.com/en/security-advisory/qsa-24-48 https://www.cve.org/CVERecord?id=2024-50404 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N 6.8 "A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow...

CVE-2023-32707

CVE-2023-32707 An improved POC exploit based on the reported CVE on exploitdb Exploit Title: Splunk 9.0.5 - Admin Account Takeover CVE: CVE-2023-32707 Overview This script allows for exploiting a vulnerability in Splunk 9.0.5, leading to admin account takeover. The exploit leverages a low-privile...

opencanary

OpenCanary（Thinkst Canary 开发） OpenCanary 是一个多协议网络蜜罐。它的主要用途是捕捉那些已经突破非公开网络的黑客。它的资源要求极低，并且可以调整、修改和扩展。 概述 OpenCanary 以守护进程（daemon）方式运行，并实现了多种常见网络协议。当攻击者突破网络并与蜜罐交互时，OpenCanary 会通过多种机制向你发送告警。 OpenCanary 使用 Python 实现，因此核心蜜罐是跨平台的；不过，某些功能需要特定的操作系统。在 Linux 上运行会提供最多的选项。它的资源要求极低；例如，可以轻松部署在树莓派或资源极少的虚拟机上。 本...

CVE-2025-63666

CVE-2025-63666 — Tenda AC15 Resumen El firmware Tenda AC15 V15.03.05.18multi emite una cookie de autenticación en la forma password= y la devuelve sin los indicadores HttpOnly, Secure o SameSite, exponiendo el hash de la contraseña al cliente. El sufijo de baja entropía actúa como un identificado...

HoneySAP

HoneySAP: SAP Low-interaction honeypot Version 0.1.2.dev0 XXX 2022 Overview HoneySAP is a low-interaction research-focused honeypot specific for SAP services. It's aimed at learn the techniques and motivations behind attacks against SAP systems. Features low-interaction honeypot for SAP services...

CVE-2021-40375

CVE-2021-40375 - Control de Acceso Roto en OpenEyes 3.5.1 Descripción Se identificó una vulnerabilidad de control de acceso inadecuado en OpenEyes 3.5.1, desarrollado por la Fundación Apperta. Un usuario con pocos privilegios podría cargar el perfil de un paciente en su navegador y acceder a...

btlejuice

BtleJuice Framework Introduction BtleJuice is a complete framework to perform Man-in-the-Middle attacks on Bluetooth Smart devices also known as Bluetooth Low Energy. It is composed of: an interception core an interception proxy a dedicated web interface Python and Node.js bindings How to install...

BLE-TPMS

CVE-2024-39081 Link: https://vulners.com/cve/CVE-2024-39081 BLE BASED TREEL TPMS for bikes Here, we performed and explained TPMS data manipulation over bluetooth. we can send false alarm to App user over bluetooth. Detailed vulnerability findings and analysis are stored in the repository. File Na...

CVE-2024-56071

🚨 Simple Dashboard = 2.0 - Escalada de Privilegios No Autenticada 📄 Descripción El plugin Simple Dashboard para WordPress es vulnerable a la Escalada de Privilegios en todas las versiones hasta la 2.0 inclusive. Esto permite que atacantes no autenticados eleven sus privilegios al de administrador...

ciscoasa_honeypot

Honeypot de Cisco ASA Cymmetria Research, 2018. https://www.cymmetria.com/ Contacto: [email protected] Un honeypot de baja interacción para el componente Cisco ASA capaz de detectar la CVE-2018-0101, una vulnerabilidad de denegación de servicio y ejecución remota de código. Se publica bajo l...

Linux Distros Unpatched Vulnerability : CVE-2026-54258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ZoneMinder is a free, open source closed-circuit television software application. Versions prior to 1.36.39, 1.38.4, and 1.39.11 allow an authenticated...

CVE-2022-26923_AD-Certificate-Services

CVE-2022-26923 AD Certificate Services Fecha de publicación : 10/05/2022 Complejidad del ataque: Baja Privilegios requeridos: Bajo Puntuación CVSS : 8.1 La vulnerabilidad permitía a un usuario con pocos privilegios escalar privilegios a administrador de dominio en un entorno predeterminado de...

CVE-2026-89717

A flaw was found in the zram component of the Linux kernel. When zramdestroycomps is called, it incorrectly resets the primary compressor to a NULL state. This invalid state can lead to a NULL pointer dereference when compalgorithmshow attempts to access the compressor, potentially causing system...

CVE-2021-44852

CVE-2021-44852 Se descubrió un problema en BSRCIO64.sys en Biostar RACING GT Evo 2.1.1905.1700. Un proceso de baja integridad puede abrir el objeto de dispositivo del controlador y emitir IOCTLs para leer o escribir en ubicaciones de memoria física arbitrarias o llamar a una dirección arbitraria,...

CVE-2026-89717 zram: set default primary compressor in zram_destroy_comps()

In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zramdestroycomps Patch series "zram: fix zram issues reported by sashiko". Sashiko drove by and reported 1 a couple of zram issues: a possible BUGON in zlib code due to missing winbits rang...

linux-insides

Linux insides This repository contains a book-in-progress about the Linux kernel and its insides. The goal of this project is simple – to share knowledge about the Linux kernel internals and related low-level topics. If you're curious about what's under the hood, see the Table of Contents. Chapte...

log4j-honeypot-flask

log4j-honeypot-flask Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228 This can be installed on a workstation or server, either by running the Python app/app.py script directly you'll need python3, Flask, and Requests or as a Dock...