cve-2018-15473

CVE-2018-15473 OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. Install You may need t...

cve-2015-1592

这些文件是我在休斯顿Perl Mongers演讲中讨论的，主题是“利用MetaSploit武器化Perl序列化漏洞”。 解释这些文件的演讲视频可在此处获取： https://youtu.be/Gzx6KlqiIZE storable-.pl 文件用于生成 metasploit 模块中使用的 'config' 参数值。...

EUVD-2026-88217

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to...

CVE-2026-101052 refly-ai refly JWT Token app.config.ts hard-coded credentials

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to...

msf-auxiliarys

msf-auxiliarys mi colección de módulos auxiliares de post-explotación de metasploit Description este directorio de trabajo contiene diferentes módulos auxiliares de metasploit escritos por mí para ayudar en tareas comunes de post-explotación. Download/Install 1º - Descargar el módulo desde GitHub...

CVE-2026-100750

Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag replace arbitrary parameters of the selected module. This feature is enabled by default in affected versions. The overrides are applied...

EUVD-2026-88107

Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag replace arbitrary parameters of the selected module. This feature is enabled by default in affected versions. The overrides are applied...

CVE-2026-100750

The Modules Anywhere Joomla extension (versions 1.5.0 - 9.0.5 ) contains a vulnerability allowing Local File Inclusion (LFI) and Server-Side Request Forgery (SSRF) . The issue stems from a feature that allows additional attributes on a module tag to replace arbitrary parameters of the selected mo...

CVE-2026-100750 Joomla Extension - regularlabs.com - Arbitrary file read / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla

Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag replace arbitrary parameters of the selected module. This feature is enabled by default in affected versions. The overrides are applied...

sony-bravia-root-toolkit

sony-bravia-root-toolkit Automatización de exploits CVE-2019-2215 & DirtyCOW + desbloqueo post-root + módulos Magisk para Sony BRAVIA KDL-43W800C...

CVE-2026-100909

A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The impacted element is the function getSourcePathForResize of the file modules/system/classes/ResizeImages.php. The manipulation of the argument realSourcePath results in server-side request forgery. The attack may be performed...

dirty_frag_mitigation

dirtyfragmitigation 1. Un script bash para mitigar la vulnerabilidad dirty frag de Linux CVE-2026-43500 2. Funciona en todas las plataformas basadas en Debian/Ubuntu Arch, es decir, Kali, ParrotSec, BlackArch 3. Se añadió --check para ejecutarse como usuario no root. Se añadió soporte para...

CVE-2025-55182

CVE-2025-55182 React Server Components Remote Code Execution CVE-2025-55182 and Next.js Remote Code Execution CVE-2025-66478. This vulnerability primarily affects the Server Actions functionality in react-server-dom-webpack. Due to missing security validation when parsing client-submitted forms, ...

CVE-2024-11003-POC

CVE-2024-11003-POC Description Qualys discovered that needrestart, before version 3.8, passes unsanitized data to a library Modules::ScanDeps which expects safe input. This could allow a local attacker to execute arbitrary shell commands. Please see the related CVE-2024-10224 in Modules::ScanDeps...

OVSwrap-CVE-2026-64531-Mitigation-Tool

Herramienta de Mitigación OVSwrap CVE-2026-64531 Un script sencillo que detecta y mitiga la vulnerabilidad OVSwrap que afecta a los módulos del kernel de Open vSwitch. Características Detecta módulos vulnerables de Open vSwitch Determina si el módulo está cargado Bloquea la carga automática Elimi...

CVE-2026-100723

The vm2 library before version 3.12.2 is vulnerable to a memory disclosure and corruption issue due to a failure in applying Buffer backing-store ownership invariants for host builtin modules. When an application exposes the zlib module via NodeVM's builtin allowlist, zlib.deflateSync can return ...

cve-2021-4034

cve-2021-4034 mkdir -p 'GCONVPATH=.'; touch 'GCONVPATH=./pwnkit'; chmod a+x 'GCONVPATH=./pwnkit' mkdir -p pwnkit; echo 'module UTF-8// PWNKIT// pwnkit 2' pwnkit/gconv-modules echo...

CVE-2026-100692

The static site generator Hugo is vulnerable in versions after v0.123.0 and before v0.166.0 due to insufficient symlink confinement checks. A malicious theme or vendored module located in themes/ could contain a symlink at a mount root (e.g., themes/mytheme/assets -> /some/dir/outside). This a...

PowerSploit

Bifurcado para añadir algunas características a PowerView.ps1 que realizo habitualmente de forma manual Este proyecto ya no recibe soporte PowerSploit es una colección de módulos de Microsoft PowerShell que pueden usarse para ayudar a los evaluadores de penetración durante todas las fases de una...

CVE-2026-100692: Improper Link Resolution Before File Access

Hugo is a static site generator. In versions after v0.123.0 and before v0.166.0, Hugo's symlink confinement checks stopped at the mount root itself, so a theme or module checked into themes/ or a vendored module could contain a symlink at a mount root for example themes/mytheme/assets -...