Hscan

Hscan-Win-Gui HScan v1.20 - Instrucciones de uso 1. Requisitos del sistema: Windows NT/2000/XP 2. Descripción del software: Escaneo mediante múltiples hilos de un rango de IP específico o un host específico o una lista de hosts. Dos modos: GUI y línea de comandos. Elementos de escaneo: -name ---...

CVE-2026-105766

The Chainguard Academy (edu) website is vulnerable to an HTTPS to HTTP downgrade attack due to the use of the backend-facing $scheme variable in the nginx.conf trailing-slash directory redirect. This issue exists in versions from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0...

CVE-2026-105766 Chainguard Academy (edu) Nginx directory redirect downgrades HTTPS requests to HTTP

Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy edu from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0e50739c225f5aee2e803800a47fc0feb906 allows an on-path network attacker to read or modify documentatio...

Security Bulletin: Due to the use of Java SE, IBM Sterling Control Center is vulnerable to multiple CVEs (CVE-2026-70906, CVE-2026-61308, CVE-2026-70907, CVE-2026-60589, CVE-2026-16440)

Summary Java SE is used by IBM Sterling Control Center as part of dependency in IBM Semeru Runtime CSPU - Aug 2026 - Includes OpenJDK August 2026 CPU. Vulnerability Details CVEID:CVE-2026-70906 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2026-105648 Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

Ghost is a Node.js content management system. From 6.0.9 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network on some network configurations. A...

CVE-2026-105648

The Ghost Node.js content management system is vulnerable to a validation issue in versions 6.0.9 through 6.65.0 . An unauthenticated user can abuse certain functionalities, such as Webmentions , to perform limited HTTP requests to hosts within the server's internal network on specific network co...

CVE-2026-105647 Ghost: Server-Side Request Forgery in Bookmark Fetching

Ghost is a Node.js content management system. From 6.54.1 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result i...

CVE-2026-105647 Ghost: Server-Side Request Forgery in Bookmark Fetching

Ghost is a Node.js content management system. From 6.54.1 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result i...

CVE-2026-105647 Ghost: Server-Side Request Forgery in Bookmark Fetching

Ghost is a Node.js content management system. From 6.54.1 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result i...

CVE-2026-90077

A flaw was found in the Linux kernel's network net subsystem. An issue in the copynetns error handling path allows for resources allocated during network namespace creation to leak. This occurs because the preinitnet function returns prematurely, preventing proper resource deallocation. A local...

CVE-2026-33234

Cómo Convertí la Función de Correo de AutoGPT en un Escáner de Red Interna CVE-2026-33234 | Moderado 5.0 | GHSA-4jwj-6mg5-wrwf Autor: Pavan Nallamothu Estaba mapeando cada entrada controlada por el usuario que tocaba la red en la Plataforma AutoGPT. La capa HTTP estaba bien asegurada. Rangos de I...

undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF

A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without...

CVE-2021-44228

CVE-2021-44228 Herramienta de reconocimiento masivo para CVE-2021-44228 Necesita corregir la librería Crypto para que funcione con Python3.9 sudo vim /usr/local/lib/python3.9/dist-packages/Crypto/Random/UserFriendlyRNG.py reemplazar línea 77 : t = time.clock con : t = time.perfcounter Cómo usar:...

CVE-2026-23744

CVE-2026-23744 MCPJam inspector Ejecución remota de código: Uso de la prueba de concepto POC: python3 cve-2026-23744.py --target https:// --att-ip --att-p...

Urgent11-Suricata-LUA-scripts

Urgent11-Suricata-LUA-scripts Scripts LUA de Suricata para detectar CVE-2019-12255, CVE-2019-12256, CVE-2019-12258 y CVE-2019-12260 CVE-2019-12255 El script comprueba la CVE-2019-12255; el paquete que se comprueba debe tener los flags PSH, ACK y URG establecidos, y un tamaño de payload superior a...

Network-Filesystem-Forensics

Forense de red y sistema de archivos Informes sobre post-explotación en honeypot explotando wu-ftpd vulnerable CVE-2001-0550...

NetScope

NetScope Plataforma offline-first de investigación y respuesta de red para Windows. NetScope es una aplicación de escritorio para analistas de seguridad, respondedores de incidentes y jugadores de CTF. Toma una captura de paquetes .pcap / .pcapng o una interfaz en vivo y la convierte en una...

CVE-2026-22557-Path-Traversal-Ubiquti-UniFi

CVE-2026-22557 Path Traversal Ubiquti UniFi Network Application Este repositorio contiene un escáner de prueba de concepto basado en Go para CVE-2026-22557 dirigido a UniFi Network Application. La herramienta realiza un escaneo controlado y no destructivo contra un conjunto de endpoints comunes y...

CVE-2026-63267

A flaw was found in LibreOffice. When loading a spreadsheet, external comma-separated values CSV data links were automatically fetched without applying standard link update controls. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted document, causin...

CVE-2026-60206

🚨 CVE-2026-60206 — Toma de control de WebLogic mediante SAML Vulnerabilidad de autenticación SAML de Oracle WebLogic Server Un análisis técnico del CVE-2026-60206 que afecta a Oracle WebLogic Server. 📖 Resumen CVE-2026-60206 es una vulnerabilidad Crítica CVSS 9.9 que afecta a Oracle WebLogic...