binfinder

binfinder Encuentra archivos binarios no instalados a través del gestor de paquetes Prerrequisitos Software versión de go = 1.12 versión de docker = 19 Cómo compilar y ejecutar binfinder Compilar $ make build Una vez que la compilación esté completa, puede ejecutar bindfinder ejecutando: $...

JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

JupyterLab's PyPI extension manager runs python -m pip uninstall with the extension name taken from the request body. ExtensionHandler.post validates the name for cmd=install but not for cmd=uninstall, so a name that begins with - reaches the command line and pip reads it as an option rather than...

EUVD-2026-89459

JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs...

CVE-2026-97281

Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...

CVE-2026-79898

Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl command-line interface could cause shell command substitution to be processed by crlserver as root on the BoKS Master...

CVE-2026-79899

Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKStmp may be able to obtain CA secret or host private-key...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

CVE-2021-26714

CVE-2021-26714 Vulnerabilidad de Directory Traversal en el portal de Enterprise License Manager en Mitel MiContact Center Enterprise anterior a la versión 9.4. https://nvd.nist.gov/vuln/detail/CVE-2021-26714vulnCurrentDescriptionTitle...

CVE-2024-6244

🚀 pz-frontend-manager = 1.0.5 - Explotación de CSRF de foto de perfil 🛠️ Descripción Este script explota una vulnerabilidad CSRF en el plugin de WordPress pz-frontend-manager versiones = 1.0.5 para cambiar la foto de perfil de un usuario autenticado sin su consentimiento. 🔴 CVE-2024-6244 El plugin...

CVE-2026-79896 Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability

Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boksportmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boksportmux. Although the daemon is normally restarted automatically, repeated requests can...

EUVD-2026-90881

Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boksportmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boksportmux. Although the daemon is normally restarted automatically, repeated requests can...

CVE-2026-79896

Fortra BoKS Manager is vulnerable to an out-of-bounds read in the custom TLS ClientHello parser utilized by boks_portmux . A remote unauthenticated attacker can exploit this by submitting a malformed ClientHello to terminate the boks_portmux daemon. While the daemon typically restarts automatical...

CVE-2021-32162

..| CSRFtoCommandInjection2 |.. Descripción : Explotar un ataque de falsificación de solicitudes entre sitios CSRF para obtener una inyección de comandos a través de la función del administrador de archivos de Webmin Versión probada : Webmin 1.973 versión más reciente de GitHub 07/03/2021 Tipo de...

CVE-2026-79898

Fortra BoKS Manager contains a command injection vulnerability in the crlserver component. An authenticated user with permission to add CRL URLs via BCC , the WSI REST or SOAP API , or the cacrl command-line interface can trigger shell command substitution. This allows the attacker to execute com...

CVE-2026-79898 Fortra BoKS Manager crlserver command injection vulnerability

Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl command-line interface could cause shell command substitution to be processed by crlserver as root on the BoKS Master...

EUVD-2026-90875

Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl command-line interface could cause shell command substitution to be processed by crlserver as root on the BoKS Master...

CVE-2022-22954-Testi

CVE-2022-22954-Prueba Prueba de la vulnerabilidad CVE-2022-22954 VMware Workspace ONE Access e Identity Manager contienen una vulnerabilidad de ejecución remota de código debido a una inyección de plantilla del lado del servidor. Un actor malicioso con acceso a la red puede desencadenar una...

CVE-2025-9223

Applications Manager - Execute Program Action Bypass PoC 📖 Descripción Este repositorio contiene una Prueba de Concepto PoC que demuestra una vulnerabilidad de ejecución de comandos en la función "Execute Program Action" de ManageEngine Applications Manager. 🔍 Detalles de la Vulnerabilidad...

permission-manager

Gestor de permisos ¡Bienvenido al Permission Manager! 🎉 🎉 Permission Manager es una aplicación desarrollada por SIGHUP que permite una gestión RBAC para Kubernetes súper fácil e intuitiva. Si buscas una forma sencilla e intuitiva de gestionar tus usuarios dentro de un clúster de Kubernetes, este ...

CVE-2020-10239

Hecho por HK CVE-2020-10239: Control de acceso incorrecto en el campo SQL de comfields - RCE PoC Versión afectada: núcleo de Joomla desde 3.7.0 hasta 3.9.15 Requisito de usuario: cuenta de Manager nivel más bajo en el back-end Obtener acceso: cámbiate de Manager a Superadmin, luego dispara RCE...