8348 matches found
CVE-2022-0441
Se encontró una vulnerabilidad clasificada como crítica en el plugin MasterStudy LMS hasta la versión 2.7.5 en WordPress WordPress Plugin. Esta vulnerabilidad afecta a una parte desconocida del componente New Account Handler. La manipulación con una entrada desconocida conduce a una vulnerabilida...
CVE-2019-0708
Nuevo exploit de vulnerabilidad...
brawl-public-game-001
BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...
nccfsas
Introduction This repository holds information released publicly by NCC Group's Full Spectrum Attack Simulation FSAS team...
ketshash
Ketshash A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs. The tool was published as part of the "Pass-The-Hash detection" research - more details on "Pass-The-Hash detection" are in the blog post:...
https-nj.gov---CVE-2020-11022
https-nj.gov---CVE-2020-11022 Informe de vulnerabilidad del sitio oficial de Nueva Jersey Posible vulnerabilidad XSS en jQuery.htmlPrefilter y métodos relacionados. Pasar HTML desde fuentes no confiables, incluso después de sanitizarlo, a uno de los métodos de manipulación del DOM de jQuery por...
https-nj.gov---CVE-2018-14041
https-nj.gov---CVE-2018-14041 Informe de Vulnerabilidad del sitio oficial de Nueva Jersey El atributo data-target es vulnerable a ataques de Cross-Site Scripting. Test RECOMENDACIÓN La solución para este problema específico podría ser cambiar la función getTargetFromTrigger. return $target a:...
climber
Climber Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections ov...
CVE-2022-34302
🕷️ CVE-2022-34302 - New Horizon Datasys Boot Loader Vulnerability New Horizon Datasys Reboot Restore Boot Loader - Bring Your Own Vulnerable UEFI Application BYOVUA - Secure Boot bypass via signed bootloader with built-in custom PE/COFF loader that loads unsigned UEFI applications. 📑 Table of...
CVE-2026-24061
Telnet Vulnerability Scanner & Exploiter This Python script main.py is a multi-threaded tool designed to scan a list of target IPs/hostnames and attempt to exploit a specific vulnerability over Telnet. !WARNING This tool is intended for educational purposes and authorized penetration testing only...
CVE-2026-89178
creationtimestamp| type| source ---|---|--- 2026-09-11 08:45:28+00:00| seen| https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html 2026-09-11 09:39:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/eye6iojklzlt4 2026-09-11 11:01:46+00:00| seen|...
columbus-server
Columbus server This repository is deprecated! ‼️ The server component is moved to https://github.com/elmasy-com/columbus. Columbus Project is an API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features. Columbus returned 638 subdomains of tesla.co...
CVE-2026-85706
creationtimestamp| type| source ---|---|--- 2026-09-11 00:17:16+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mv7c2savxc2e 2026-09-11 04:02:56+00:00| seen| https://bsky.app/profile/whatsnew.fyi/post/3mv7ooemhtb2t 2026-09-11 12:08:20+00:00| seen|...
CVE-2026-78569
creationtimestamp| type| source ---|---|--- 2026-09-10 22:34:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jgfwtuuoi7to6...
CVE-2026-3096
CVE-2026-3096 affects multiple WSO2 products whose web portals allow external links to be opened in a new browser tab. In certain configurations, the originating window retains access to the newly opened page , enabling a reverse tabnabbing attack. An attacker can manipulate the trusted applicati...
EUVD-2026-75731
The product's web portals allow external links to be opened in a new browser tab. In certain configurations, the originating window retains access to the newly opened page, allowing interaction between the two browser contexts when navigating to external destinations. This vulnerability could all...
CVE-2026-88048
creationtimestamp| type| source ---|---|--- 2026-09-10 17:39:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/53ew2oieaxu2w...
CVE-2026-29187_SqlInjectionVulnerabilityOpenEMR7.0.4
CVE-2026-29187 - Vulnerabilidad de inyección SQL en el nuevo popup de búsqueda Debilidad CWE-89 Neutralización incorrecta de elementos especiales utilizados en un comando SQL 'Inyección SQL' El producto construye todo o parte de un comando SQL utilizando entradas influenciadas externamente de un...
CVE-2026-59679
creationtimestamp| type| source ---|---|--- 2026-09-10 09:50:11+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv5rmgqxqx2j 2026-09-10 10:07:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv5slk34tj2j...