copy.fail-mitigation-MLM

Crear un nuevo canal de configuración State Channel en Multi-Linux Manager usando el código del archivo copy-fail.sls. Asigna el canal de configuración a todas tus máquinas y ejecútalo, o ejecuta Highstate. ¡Esto es una solución temporal!...

CVE-2026-34621_PDF_SAMPLE

Technical Analysis of a Multi-Stage Adobe Acrobat PDF JavaScript Sample Overview This repository publishes a code-centric reverse-engineering write-up on a malicious PDF sample that embeds staged Adobe Acrobat JavaScript. The analyzed sample uses a hidden form field as its initial loader,...

cve-2025-3248

CVE-2025-3248 Langflow RCE Scanner Una herramienta en Python para escanear y explotar la vulnerabilidad CVE-2025-3248, que permite la ejecución remota de código RCE en aplicaciones Langflow. Características Escaneo de un solo objetivo y ejecución de comandos Escaneo de URLs por lotes Modo shell...

http-oracle-ebs-cve-2025-61882.nse

http-oracle-ebs-cve-2025-61882.nse Detecta Oracle E-Business Suite CVE-2025-61882. Detección: comprobaciones en múltiples niveles — fingerprinting, verificación de versiones, pruebas de endpoints y SSRF, análisis de tiempos y explotación controlada para 4 resultados de alta confianza. Por defecto...

Routeglass

Routeglass - Herramienta de fingerprinting de alta velocidad para routers y dispositivos de red Routeglass es una herramienta rápida y multiproceso de fingerprinting de routers escrita en Go. El objetivo del proyecto es simple: identificar routers, firewalls, pasarelas y dispositivos de red...

CVE-2026-92796

Manticore Search versions 27.0.0 before 28.4.4 fail to validate permissions for all statements in multi-statement SQL requests, allowing read-only users to execute unauthorized queries. Attackers can append additional SELECT statements after the first statement to read credential tables and obtai...

CVE-2026-92796 Manticore Search 27.0.0 before 28.4.4 Multi-Statement Authorization Bypass

Manticore Search versions 27.0.0 before 28.4.4 fail to validate permissions for all statements in multi-statement SQL requests, allowing read-only users to execute unauthorized queries. Attackers can append additional SELECT statements after the first statement to read credential tables and obtai...

EUVD-2026-81059

Manticore Search versions 27.0.0 before 28.4.4 fail to validate permissions for all statements in multi-statement SQL requests, allowing read-only users to execute unauthorized queries. Attackers can append additional SELECT statements after the first statement to read credential tables and obtai...

CVE-2026-92796

Manticore Search versions 27.0.0 through 28.4.3 fail to validate permissions for all statements within multi-statement SQL requests. An authenticated read-only user can append additional SELECT statements after the first statement to read credential tables and obtain password hashes , allowing au...

CVE-2026-31431-exp

Adaptado de https://github.com/theori-io/copy-fail-CVE-2026-31431. Se han añadido características como cifrado y ofuscación del payload, escritura de caché para mejorar la estabilidad del sistema, chunks adaptativos, cero dependencias y soporte multiarquitectura x86, arm, i386, etc.. En teoría, s...

agentZ

AgentZ Plataforma de IA Agéntica de Confianza Cero Construye, ejecuta y gobierna agentes de IA. Seguro por diseño. Cada agente se ejecuta dentro de un sandbox de denegación por defecto y nunca recibe una credencial. Cada acción del agente es trazable. AgentZ es una plataforma multiinquilino para...

WordPress Multi Uploader for Gravity Forms plugin <= 1.1.9 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Adam Rayyan Aryasatya in WordPress Plugin Multi Uploader for Gravity Forms versions = 1.1.9...

livewire-vuln-scanner

Escáner Pasivo de Vulnerabilidades Livewire El Escáner Pasivo de Vulnerabilidades Livewire es una herramienta Python 2.7 diseñada para detectar pasivamente las versiones de Livewire utilizadas por los sitios web e identificar posibles vulnerabilidades basándose en la comparación de versiones. Est...

aiengine

...

CVE-2026-61595 djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' data

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust.tenants isolation was enforced only on the HTTP path. The current tenant was stored in threading.local and set exclusively by the HTTP-only TenantMiddleware...

CVE-2020-1938

CVE-2020-1938 Scanner for CVE-2020-1938 Scanner? PoC? Call it whatever you want. Just run it directly in a Python environment. Just enter the IP address as prompted. It is recommended to use it after Tomcat is set up. Scanner is a revised script that adds support for multiple IP address inputs an...

All-ReverseIP-MultiThreading

All-ReverseIP-MultiThreading Python 2.7 Donación : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...

EUVD-2026-80316

Apache Airflow Akeyless provider: the Akeyless secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team deployment, a Dag author scoped to one team can supply a Variable key containing a path separator that causes the backend to resolve a secret belonging to ...

CVE-2026-86475 Appointment Hour Booking < 1.5.95 - Unauthenticated Booking Capacity Bypass via Multi-Appointment Submission

The Appointment Hour Booking WordPress plugin before 1.5.95 does not check every appointment in a booking submission against the capacity configured for its own slot, allowing unauthenticated visitors to take slots that are already fully booked...

CVE-2026-86475

Appointment Hour Booking is a WordPress plugin that allows scheduling of time-based appointments. Versions prior to 1.5.95 are affected by a capacity validation flaw: when a multi-appointment booking submission is received, the plugin does not verify each individual appointment against the capaci...