159571 matches found
tyton
Tyton Este Proyecto Está Ahora Archivado Cazador de Rootkits en Modo Kernel de Linux para 4.4.0-31+. Para más información, visita el sitio web de Tyton. Ataques Detectados Módulos Ocultos Enganche de la Tabla de Syscalls Enganche de Protocolo de Red Enganche de Netfilter Inodos de Proceso en Cero...
envizon
envizon - por evait security EOL https://github.com/evait-security/envizon/issues/130 Nosotros evait security nos mudamos a https://gitlab.com/invuls/pentest-projects/pcf para la documentación interna del proyecto. visualización de redes e informes de pruebas de penetración Versión 5.0 Esta...
hassh
"HASSH" - un Método de Perfilado para Clientes y Servidores SSH. "HASSH" es un estándar de huellas digitales de red que se puede utilizar para identificar implementaciones específicas de Cliente y Servidor SSH. Las huellas digitales se pueden almacenar, buscar y compartir fácilmente en forma de u...
celerystalk
celerystalk celerystalk te ayuda a automatizar tu proceso de escaneo/enumeración de red con trabajos asíncronos también conocidos como tareas mientras conservas el control total de qué herramientas quieres ejecutar. Demo interactiva: Modo Bug Bounty HackerOne Demo interactiva: Modo Evaluación de...
xray
XRay ha sido reimplementado en Rust y ampliado con más funcionalidades, este repositorio es código LEGADO. Usehttps://github.com/evilsocket/legba XRAY XRay es una herramienta para la recopilación de OSINT de red, su objetivo es automatizar algunas de las tareas iniciales de recopilación de...
EUVD-2026-95398
Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-95404
An unauthenticated denial-of-service vulnerability exists in Tapo C325WB v2 in the RTSP streaming service on TCP port 554 when the Camera Account feature is enabled. A crafted pair of RTSP-over-HTTP tunneling requests can cause memory corruption and crash the streaming daemon. Successful...
EUVD-2026-95405
TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443. An attacker on the adjacent network can append an onboarding-scoped object to a JSON request to bypass session verification and invoke privileged actions without...
EUVD-2026-95406
TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number generator, making the key predictable and recoverable. An unauthenticated attacker on the adjacent network can recover the key and authenticate to the media...
EUVD-2026-95393
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network...
EUVD-2026-95335
Satel Netco Design versions prior to v2.1.7 contains a stored cross site scripting vulnerability. An authenticated user with Network Operator privileges could store untrusted content that is rendered without adequate neutralization. Successful exploitation could allow script execution in another...
CVE-2026-101022: Server-Side Request Forgery (SSRF)
A Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on which internal hosts may be targeted. An authenticated user can attempt connections to arbitrary internal network destinations, revealing which destinations are reachable. With...
CVE-2026-104117: Missing Authorization
A missing authorization check in the illumos IP management daemon ipmgmtd allows a local user to change the persistent IP multipathing IPMP configuration. The ipmgmtd door dispatch table in usr/src/cmd/cmd-inet/lib/ipmgmtd/ipmgmtdoor.c does not require the solaris.network.interface.config...
PT-2026-108905
A Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on which internal hosts may be targeted. An authenticated user can attempt connections to arbitrary internal network destinations, revealing which destinations are reachable. With...
CVE-2026-108108: Improper Authentication
PHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Password::chapverify returns true when the supplied response does not match. Attackers who know a valid customer or PPPoE username can log in through MikroTik hotspot or PPPoE CHAP wit...
PT-2026-108907
The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and retrieve the complete device and measurement topology of the system...
CVE-2026-107698
A flaw was found in ffmpeg. When handling Real-Time Streaming Protocol RTSP streams, redirect responses are followed without validating the destination address. A malicious RTSP server can exploit this flaw to conduct Server-Side Request Forgery SSRF, bypassing protocol restrictions to probe...
AZL-107898 CVE-2026-97032 affecting package sriov-network-device-plugin 3.7.0-8
HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...
