AMSIext

AMSIext AMSIext es un complemento para Firefox y Chrome que te permite enviar cualquier flujo de datos desde el navegador a AMSI. AMSI es la forma de comunicar la memoria RAM con Windows Defender o cualquier otro sistema de seguridad de endpoint. Esto significa que, mientras navegas por la web,...

themis

Themis proporciona criptografía sólida y fácil de usar para personas ocupadas Librería criptográfica de propósito general para almacenamiento y mensajería para iOS Swift, Obj-C, Android Java, Kotlin, React Native iOS, Android, Java de escritorio, С/С++, Node.js, Python, Ruby, PHP, Go, Rust, WASM...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

kubebot

Kubebot Un Slackbot de pruebas de seguridad construido con un backend de Kubernetes en Google Cloud Platform NOTA: Ya no mantengo activamente este proyecto. Estoy trabajando en la versión 2 de Kubebot junto con algunas otras personas que probablemente se presentará en una de las próximas...

Paste2Web

Paste2Web - versión beta Un script de python3 que usa el sitio web cl1p para enviar y recibir mensajes secretos ¿Cómo funciona? -Al enviar, divide el mensaje en palabras, luego genera una palabra aleatoria y la usa para publicar cada palabra por separado en un enlace y te da una clave -Ahora, par...

EUVD-2026-91132

This vulnerability enables unauthenticated remote code execution RCE on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component. The attack leverages an unrestricted messaging interface between an...

CVE-2018-1270

CVE-2018-1270 - Spring Messaging SpEL Code Execution Vulnerability Yesterday, Spring disclosed an RCE vulnerability. Take a look: CVE-2018-1270: Remote Code Execution with spring-messaging Affected Versions Spring Framework 5.0 to 5.0.4 Spring Framework 4.3 to 4.3.14 This vulnerability does not...

CVE-2026-18397

This vulnerability enables unauthenticated remote code execution RCE on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component. The attack leverages an unrestricted messaging interface between an...

CVE-2026-18397

The SConnect native host component is vulnerable to unauthenticated remote code execution (RCE) . The flaw stems from a combination of cryptographic weaknesses and memory management issues , where an unrestricted messaging interface between an attacker-controlled web page and the native host allo...

CVE-2026-18397 SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability

This vulnerability enables unauthenticated remote code execution RCE on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component. The attack leverages an unrestricted messaging interface between an...

Signal-Desktop

Signal Desktop Signal Desktop links with Signal on Android or iOS and lets you message from your Windows, macOS, and Linux computers. Install the production version or help us out by installing the beta version. Got a question? You can find answers to a number of frequently asked questions on our...

CVE-2024-36991

CVE-2024-36991 Path Traversal en el endpoint “/Modules/Messaging/” en Splunk Enterprise en Windows En versiones de Splunk Enterprise anteriores a 9.2.2, 9.1.5 y 9.0.10, un atacante podría realizar un path traversal en el endpoint /modules/messaging/ en Splunk Enterprise en Windows. La...

nmap-scripts

nmap-scripts scripts de nmap para las vulnerabilidades cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327 CVE-2020-0796 Existe una vulnerabilidad de ejecución remota de código en la forma en que el protocolo Microsoft Server Message Block 3.1.1 SMBv3 maneja ciertas solicitudes, también...

CVE-2026-10523-Ivanti-sentry

CVE-2026-10523 - Herramienta de Detección de RCE en Ivanti Sentry Una herramienta integral de detección de prueba de concepto para probar vulnerabilidades de Ivanti Sentry relacionadas con bypass de autenticación y ejecución remota de código. Esta herramienta identifica sistemas vulnerables a...

webauthn_tpm_portable

WebAuthn TPM Portable Credentials ⚠️ Early proof of concept. This project has not been thoroughly tested or audited. Do not use it for anything beyond experimentation. Portable, hardware-backed WebAuthn/passkey credentials that work across multiple devices using TPM 2.0. Traditional TPM credential...

aegisgraph

AegisGraph — Engineering Platform Graph-driven automated vulnerability discovery for secure messaging applications. 577 Industries' engineering implementation for DARPA SBIR Direct-to-Phase-II topic HR0011SB20254-12 ASEMA. -blue Looking for evaluator-facing artifacts? The sanitized public...

openclaw

OpenClaw 🦞 — Your assistant, on your devices, in your chats OpenClaw is an open-source AI assistant that runs on your own computer and meets you in the channels you already use: Discord, iMessage, Slack, Teams, Telegram, WhatsApp, and 20+ more, plus native apps for macOS, iOS, Android, Windows, a...

CVE-2024-36991-Tool

CVE-2024-36991-Tool This binary POC automates the exploitation of CVE-2024-36991 by sending crafted curl requests to a vulnerable Splunk instance. It retrieves sensitive files and saves them locally for further analysis. The script is modular, allowing users to target specific file categories e.g...

CVE-2024-41713POC

CVE-2024-41713POC Vulnerabilidad de lectura arbitraria de archivos en la plataforma de colaboración empresarial Mitel MiCollab CVE-2024-41713. Debido a una vulnerabilidad de omisión de autenticación en el componente NuPoint Unified Messaging NPM del software Mitel MiCollab, junto con una validaci...

CVE-2026-67419

RabbitMQ is a messaging and streaming broker. Prior to 4.3.5, an authenticated user who can bind a queue to a topic exchange and publish to it can use consecutive segments in a binding key to make both topic matchers revisit the same trie-node and routing-key-suffix states without memoization. Th...