The Vault by Focused Hunts

The Vault Tus secretos. Tu control. La mayoría de los gestores de contraseñas quieren que confíes tus datos sensibles a una empresa que no conoces. Controlan los servidores y las claves, y solo te queda esperar que nada salga mal. The Vault hace las cosas de otra manera. Tus archivos de bóveda...

FOFA-API-Threaded-Searcher

FOFA API Threaded Searcher A powerful multi‑threaded Python tool to query the FOFA Fofa.so API, extract selected fields, and save unique results with intelligent formatting. ✨ Features Multi‑threaded – Fetch multiple pages concurrently configurable threads Custom fields – Choose any valid FOFA...

OWASP-Top-10-AI-Infrastructure-Security-Risks

Los 10 Principales Riesgos de Seguridad en Centros de Datos e Infraestructura de IA FORGE - Endurece el metal debajo del modelo. 🌐 Sitio web: https://forge-framework.io Resumen Ejecutivo Los centros de datos de IA se están construyendo más rápido de lo que se están asegurando. La rápida expansión...

CVE-2025-34159

CVE-2025-34159: Inyección de Docker Compose en Coolify Resumen de la vulnerabilidad Campo| Valor ---|--- ID CVE| CVE-2025-34159 Afecta| Coolify ≤ v4.0.0-beta.420.6 Corregido en| v4.0.0-beta.420.7 Gravedad| Crítica CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE| CWE-...

CVE-2026-92903

Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are executed as multi-statement queries. An attacker who is able to supply a malicious project configuration file or craft command-line input can...

CVE-2026-92903 Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL Strings

Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are executed as multi-statement queries. An attacker who is able to supply a malicious project configuration file or craft command-line input can...

CVE-2026-92903

Improper input validation in Snowflake CLI versions prior to 3.27.0 allows unsanitized, user-controlled values to be interpolated into SQL strings executed as multi-statement queries. An attacker with write or pull-request access to a project repository whose CI/CD pipeline runs Snowflake CLI und...

CVE-2026-92903 Improper Input Validation in Snowflake CLI Versions Allow Unsanitized User-Controlled Values to be Interpolated into SQL Strings

Improper input validation in Snowflake CLI versions prior to 3.27.0 allowed unsanitized user-controlled values to be interpolated into SQL strings that are executed as multi-statement queries. An attacker who is able to supply a malicious project configuration file or craft command-line input can...

Multi-VLAN-Enterprise-Network-Vulnerability-Assessment

Este repositorio no tiene un README...

Patch-management-

Patch-management- Escenario de gestión de parches empresarial: "Respuesta crítica a parches para sistemas financieros". Contexto: usted es el administrador de TI de una empresa multinacional de servicios financieros que opera en India, EE. UU. y Europa. Una vulnerabilidad crítica p. ej.,...

CVE-2026-87796

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.1.9 via the movefile function. This is due to insufficient file type validation during chunked upload handling. This makes it possible for unauthenticated...

DDoS-Purple-Teaming-Offensive-Multi-Vector-7-Tier-Defensive-Holistic-Blueprint-

= doi.org/10.5281/zenodo.18287026 = orcid.org/0009-0007-7728-256X Proyecto: Análisis Exhaustivo de DDoS Purple Elite Teaming 2026 Autor: SASTRAADIWIGUNA PurpleEliteTeaming ⚠️ AVISO LEGAL OBLIGATORIO Este repositorio y su documentación son estrictamente para investigación educativa, defensiva y de...

CVE-2026-87796 Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.1.9 via the movefile function. This is due to insufficient file type validation during chunked upload handling. This makes it possible for unauthenticated...

CVE-2026-87796 Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.1.9 via the movefile function. This is due to insufficient file type validation during chunked upload handling. This makes it possible for unauthenticated...

EUVD-2026-81335

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.1.9 via the movefile function. This is due to insufficient file type validation during chunked upload handling. This makes it possible for unauthenticated...

CVE-2026-87796

The Multi Uploader for Gravity Forms WordPress plugin is vulnerable to unauthenticated arbitrary file upload in all versions up to and including 1.1.9 . The flaw resides in the move_file function in GFMU_FileUploader.php, where insufficient file type validation during chunked upload handling allo...

Multi-VLAN-Enterprise-Network-Security-Infrastructure

Este repositorio no tiene un README...

WeaveMark

WeaveMark Implementación de referencia de Robust and Scalable Multi-bit LLM Watermarking via Coded Payload Spreading. WeaveMark incrusta un mensaje de k bits en texto generado por LLM manteniendo la distribución de tokens imparcial. Combina la dispersión de carga codificada κ bits de palabra de...

CVE-2026-41940

CVE-2026-41940 Una herramienta de investigación de seguridad para detectar y analizar servicios cPanel/WHM y su comportamiento de autenticación. Diseñada únicamente para pruebas autorizadas y fines educativos. Escáner de Seguridad cPanel Herramienta de Investigación Este proyecto es una herramien...

log4j-fuzzer

log4j-fuzzer Para un solo objetivo root@kitploit: chmod +x log4j Después de ese comando, simplemente coloca tu objetivo root@kitploit: ./log4j TUURLOBJETIVO TUSERVIDORREMOTO Para múltiples objetivos Reúne todos los dominios, subdominios y directorios en una lista Después de eso, simplemente ejecu...