singularity

Singularity of Origin Actualizaciones recientes: NUEVO 2025-11-25 : Chrome lanzó la versión 142 con Local Network Access LNA, que impide las técnicas de ataque de DNS rebinding implementadas en Singularity. La rama LNA-from-Non-Secure-Contexts de Singularity of Origin implementa soporte para Tria...

WonderShell

WonderShell - CVE - 2021-44595 | CVE - 2021-44596 Discovered by Netanel Cohen and Tomer Peled a Security Researchers from BugSec. Description POC example to exploit Wondershare Dr.Fone . Dr.Fone is a phone toolkit develop by wondershare , and vulnerable to RCE. Only with network access we manage ...

fcn-

fcn free connect your private network from anywhere 1. What is fcn fcnfree connect is a foolproof one-click tool for accessing private networks, consisting of the server side and the client side fcn uses fcn public data servers and data encryption technology to virtually connect user clients to...

BloodHound-Tools

What is this? A collection of tools that integrate to BloodHound. Bloodhound is the defacto standard that both blue and red security teams use to find lateral movement and privilege escalation paths that can potentially be exploited inside an enterprise environment. A typical environment can yiel...

slipstream

NAT Slipstreaming NAT Slipstreaming permite a un atacante acceder remotamente a cualquier servicio TCP/UDP vinculado a cualquier sistema detrás del NAT de la víctima, evitando el NAT/cortafuegos de la víctima control remoto arbitrario de agujeros en el cortafuegos, simplemente con que la víctima...

minipwner

MiniPwner A script to configure a TP-Link MR3040 running OpenWRT into a simple, yet powerful penetration-testing "drop box". What is the "MiniPwner"? The MiniPwner is a penetration testing "drop box". It is designed as a small, simple but powerful device that can be inconspicuously plugged into a...

Review.CVE-2023-5612

CVE-2023-5612 – GitLab SSRF via Webhook URL PoC & Analysis 📌 CVE Overview CVE-ID: CVE-2023-5612 Severity: High CVSS: 8.1 Base Score Type: Server-Side Request Forgery SSRF Component: GitLab CE/EE Webhooks Affected Versions: GitLab CE/EE " \ --data-urlencode "url=http://127.0.0.1:8888" ...

CVE-2024-47066

CVE-2024-47066 ★ CVE-2024-47066 LobeChat SSRF PoC ★ Description CVE-2024-47066 : Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.19.13, server-side request forgery protection implemented in src/app/api/proxy/route.ts does not consider redirect and could be...

basketcraft

basketcraft this is a script that exploits the CVE-2023-27163 vulnerability which is an SSRF in the request-baskets version 1.2.1 SSRF on Request-Baskets CVE-2023–27163 CVE-2023–27163 represents a critical Server-Side Request Forgery SSRF vulnerability that was identified in Request-Baskets,...

CVE-2026-47103-python-statemachine-rce

CVE-2026-47103: Ejecución remota de código en Python StateMachine mediante inyección de eval en SCXML Gravedad: Crítica, CVSS 4.0 9.3 , CVSS 3.1 9.8 asignado por VulnCheck, el CNA Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1:...

sshuttle

sshuttle: donde convergen el proxy transparente, la VPN y ssh Hasta donde sé, sshuttle es el único programa que resuelve el siguiente caso común: Tu máquina cliente o router es Linux, FreeBSD o MacOS. Tienes acceso a una red remota a través de ssh. No necesariamente tienes acceso de administrador...

hauler-2.1.0-2.1 on GA media (moderate)

hauler-2.1.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:11685-1 Rating: moderate Cross-References: CVE-2026-56855 CVSS scores: CVE-2026-56855 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56855 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

EUVD-2025-210490

SurrealDB allows bypass of deny-net flags via DNS resolution...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation for Multiplatforms

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, Version 8 used by IBM Tivoli System Automation for Multiplatforms. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the...

EUVD-2026-70795

Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-70792

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106165 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: DDL. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106184 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...

Linux Distros Unpatched Vulnerability : CVE-2026-76177

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Server-Side Request Forgery SSRF vulnerability in the /ocsreports/?function=teleactivate endpoint due to insufficient validation of the HTTPSSERV and FILESERV...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106210)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106210 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10,...