BSF

BSF - Marco de Simulación de Botnets BSF proporciona un entorno de simulación discreta para implementar y extender botnets peer-to-peer, ajustar sus configuraciones y permitir a los defensores evaluar medidas de monitoreo y contramedidas. Sinopsis En la carrera armamentista entre botmasters y...

maltrail

Maltrail Maltrail is a network traffic detection system that identifies communication with known malicious infrastructure and reports selected traffic anomalies. It matches domains, URLs, IP addresses, IP:port pairs, and User-Agent values observed on the network against a set of indicators called...

graphw00f

Credits to Nick Aleks for the logo! graphw00f - GraphQL Server Fingerprinting Table of Contents How does it work? Detections GraphQL Threat Matrix Prerequisites Installation Configuration Example Usage Fingerprinting GraphQL Detecting & Fingerprinting GraphQL Support & Issues Resources How does i...

netsniff-ng

////////////////////////////////////////////////////////////////////////////// root@kitploit: netsniff-ng - the packet sniffing beast \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ . . netsniff-ng is a free, performant / Linux network analyzer and .' '. networking...

log4j_github_repository

This work includes testing and improvement tools for CVE-2021-44228log4j The purpose of this study is to list useful tools that the blue and red team can use against the Log4j vulnerability. Github links bypass tools, scanning, detection mechanisms, etc. can be used for. Scanning or POC 🔴 Title:...

CVE-2026-19633

A flaw was found in PostgreSQL Anonymizer. This vulnerability allows unprivileged masked users to execute arbitrary code. By manipulating operators, domain casts, or view subqueries that contain untrusted expressions, an attacker can cause malicious code to run with elevated privileges within the...

CVE-2026-19155

A flaw was found in Chromium. This use-after-free vulnerability in the Payments component could allow a remote attacker, who has already compromised the renderer process, to potentially escape the browser's security sandbox. This could be achieved by enticing a user to visit a specially crafted...

CVE-2026-63248

In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization. An anonymous client can enable diagnostics over a None/None endpoint without a certificate; with a trusted client application certificate over SignAndEncrypt, it can read security...

CVE-2026-63248

In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization. An anonymous client can enable diagnostics over a None/None endpoint without a certificate; with a trusted client application certificate over SignAndEncrypt, it can read security...

Vulnerability of .NET and Microsoft .NET Framework software frameworks, related to insufficient data authenticity verification, allows attackers to bypass existing security mechanisms.

Vulnerabilities of .NET software platforms and the Microsoft .NET Framework are related to insufficient validation of data authenticity. Exploitation of these vulnerabilities can allow attackers to bypass existing security mechanisms remotely...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in their authentication procedures, which allow attackers to bypass existing security mechanisms.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the deficiencies of its authentication procedures. Exploiting this vulnerability could allow attackers to bypass existing security mechanisms remotely...

Malicious code in eth-wallet-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 517d465272a3a1d252e83e178bb263a1ccf600b42fed6d5aa1d110b9141fc77a On require of index.js, a delayed IIFE reads test/fixtures/keypairs.dat, base64-decodes it into /.cache-db/.node-sync/syncd.js mode 0o700, and spawns...

CVE-2026-55187

Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...

CVE-2026-55187 Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms (follow-up to CVE-2026-27808)

Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...

EUVD-2026-43052

Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...

CVE-2026-54800

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V26.20, SICORE Base system All versions V26.20.0. The affected application ships with a default configuration that disables all OPC UA security mechanisms. This could allow an attacker to gain unauthorized...

unbound: Unbound: Denial of Service via excessive EDNS options

A flaw was found in Unbound. A remote attacker can exploit this vulnerability by sending queries with an excessive number of EDNS Extension Mechanisms for DNS options. This can cause Unbound threads to be held hostage while parsing and creating internal data structures for these options...

ROS-20260706-73-0034

The vulnerability of the negotiation mechanisms for SSL and GSS in the PostgreSQL database management system is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...

The vulnerability of the Input component in Google Chrome and Microsoft Edge browsers allows attackers to bypass existing security mechanisms.

The vulnerability of the Input component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to bypass existing security mechanisms remotely...

CVE-2026-52690

CVE-2026-52690 affects the PowerDNS Recursor. Spoofed replies can cause an authoritative server’s IP to be marked as not supporting EDNS, leading to DNSSEC validation failures for records served by that server. The vulnerability’s impact is documented as enabling validation failures in the presen...