20372 matches found
csaf
The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...
spectre-meltdown-checker
Spectre & Meltdown Checker A self-contained shell script to assess your system's resilience against the several transient execution CVEs that were published since early 2018, and give you guidance as to how to mitigate them. CVE list...
bludit-CVE-2019-17240
bludit-CVE-2019-17240 Evita la mitigación de inicio de sesión de bludit y sube un archivo malicioso para ejecutar una rev shell...
CVE-2023-36003
CVE-2023-36003: Windows Defender Exploit Protection Bypass PoC This repository contains a Proof of Concept PoC for CVE-2023-36003 , a critical security feature bypass vulnerability affecting Windows Defender Exploit Protection. Overview CVE-2023-36003 is a vulnerability in Windows Defender that...
CVE-2022-41040_Mitigation
descargue el script en la máquina afectada y ejecútelo...
CVE-2022-21882
CVE-2022-21882 win32k LPE bypass CVE-2021-1732 only tested on windows 20h2 19042.1415 https://twitter.com/kalendsi/status/1483770845138804738...
chackd
chackd chackd es un demonio que aleatoriza cada segundo el parámetro del kernel tcpchallengeacklimit para prevenir ataques de canal lateral. Introducción Un ataque de canal lateral presentado recientemente ha llamado fuertemente la atención de la comunidad 1. Para muchos servidores o dispositivos...
AIF360
AI Fairness 360 AIF360 The AI Fairness 360 toolkit is an extensible open-source library containing techniques developed by the research community to help detect and mitigate bias in machine learning models throughout the AI application lifecycle. AI Fairness 360 package is available in both Pytho...
memguard
MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...
centos-dirty-cow-ansible
Playbook de mitigación de Ansible CVE-2016-5195 Playbook de Ansible para mitigar CVE-2016-5195 en CentOS/Scientific Linux con SystemTap. Automatizando esta receta de mitigación encontrada en Red Hat Bugzilla: https://bugzilla.redhat.com/showbug.cgi?id=1384344c13 Este playbook instala paquetes...
CVE-2023-7028
CVE-2023-7028 | Toma de Control de Cuentas Gitlab Aviso legal Este código es una prueba de concepto de la vulnerabilidad, no insto a nadie a que lo use en instancias de Gitlab que no le pertenezcan. Esta herramienta ha sido desarrollada únicamente con fines de investigación y educativos, y no me...
Users Ultra <= 3.1.0 - SQL Injection
The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and escape the datatarget parameter before it is being interpolated in an SQL statement and then executed via the ratingvote AJAX action available to both unauthenticated and authenticated users, leading to an SQL Injection...
Emlog Pro v2.1.14 - Cross-Site Scripting
Cross Site Scripting XSS vulnerability in Emlog Pro v2.1.14 via /admin/store.php. id: CVE-2023-41621 info: name: Emlog Pro v2.1.14 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Cross Site Scripting XSS vulnerability in Emlog Pro v2.1.14 via /admin/store.php. impact: ...
ATutor < 2.2.1 - Cross Site Scripting
ATutor 2.2.1 was discovered with a vulnerability, a reflected cross-site scripting XSS, in ATtutor 2.2.1 via token body parameter. id: CVE-2023-27008 info: name: ATutor 2.2.1 - Cross Site Scripting author: r3Y3r53 severity: medium description: | ATutor 2.2.1 was discovered with a vulnerability, a...
DomainMOD 4.11.01 - Cross-Site Scripting
DomainMOD 4.11.01 contains a cross-site scripting vulnerability via assets/add/account-owner.php Owner name field. id: CVE-2018-19749 info: name: DomainMOD 4.11.01 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.11.01 contains a cross-site scripting...
Ruby Dragonfly <1.4.0 - Remote Code Execution
Ruby Dragonfly before 1.4.0 contains an argument injection vulnerability that allows remote attackers to read and write to arbitrary files via a crafted URL when the verifyurl option is disabled. This may lead to code execution. The problem occurs because the generate and process features mishand...
GRAND FlAGallery 1.57 - Cross-Site Scripting
A cross-site scripting XSS vulnerability in facebook.php in the GRAND FlAGallery plugin flash-album-gallery before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter. id: CVE-2011-4624 info: name: GRAND FlAGallery 1.57 - Cross-Site Scripting...
Ghost CMS <=4.32 - Cross-Site Scripting
Ghost CMS 4.0.0 to 4.3.2 contains a DOM cross-site scripting vulnerability. An unused endpoint added during the development of 4.0.0 allows attackers to gain access by getting logged-in users to click a link containing malicious code. id: CVE-2021-29484 info: name: Ghost CMS =4.32 - Cross-Site...
Fortinet FortiOS <=5.2.3 - Cross-Site Scripting
Fortinet FortiOS 5.2.x before 5.2.3 contains a cross-site scripting vulnerability in the SSL VPN login page which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. id: CVE-2015-1880 info: name: Fortinet FortiOS =5.2.3 - Cross-Site Scripting author: pikpikcu...