CVE-2006-3747

Archivos sobre mi publicación en bugtraq y el primer exploit funcional para CVE-2006-3747 desbordamiento off-by-one en modrewrite LDAP de Apache. http://www.securityfocus.com/archive/1/443870 Fecha de publicación del POC/Exploit: 2006-08-20 Autor: Jacobo Avariento Gimeno ID de CVE: CVE-2006-3747 ...

prowler

Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon - HackSmith v1.0. Capabilities Scan a network a particular subnet or a list of IP addresses for all IP addresses associated with active network...

PoC-public

PoC-public Este repositorio recopila el código PoC que publicamos en varias conferencias de seguridad. Black Hat EU 2020 CODE BLUE 2021 Black Hat Asia 2023 CODE BLUE 2023...

CVE-2026-107886

OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, addclass frees pclass-printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer;...

CVE-2026-107886

OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, addclass frees pclass-printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer;...

EUVD-2026-95470

OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, addclass frees pclass-printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer;...

CVE-2026-107886

OpenPrinting CUPS versions prior to 2.4.20 are vulnerable to a double-free vulnerability in the printer-class management component. The issue occurs because add_class() frees pclass->printers without clearing the pointer; if subsequent validation fails, the class retains a dangling pointer tha...

CVE-2020-3433

PoCs para CVE-2020-3433, CVE-2020-3434 y CVE-2020-3435 PoCs y detalles técnicos para las tres vulnerabilidades encontradas en Cisco AnyConnect Secure Mobility Client para Windows en mayo de 2020: CVE-2020-3433 - Alta Puntuación CVSS 7.8 - una escalada de privilegios local CVE-2020-3434 - Media...

envizon

envizon - 由 evait security 开发 生命周期结束（EOL） https://github.com/evait-security/envizon/issues/130 我们（evait security）已将内部项目文档迁移至 https://gitlab.com/invuls/pentest-projects/pcf。 网络可视化与渗透测试报告 版本 5.0 本工具由 evait security 设计、开发并维护。为了回馈安全社区，我们公开发布了内部使用并持续优化的先进网络可视化与漏洞报告工具 'envizon'。希望您的反馈能帮助我们进一步改进和完善它。 网站...

CVEsLab

CVEsLab Una colección de scripts de exploit de prueba de concepto, entornos de laboratorio Docker y vulnerabilidades descubiertas por el equipo de Securi Trust para escritas por el equipo de Securi Trust para varios CVEs...

CVE-2019-1476

CVE-2019-1476 AppXSvc Arbitrary File Overwrite DoS I have independently reported this vulnerability to MSRC as part of my research inspired by CVE-2019-0841 originally reported by Nabeel Ahmed. This vulnerability allows a regular user to overwrite arbitrary files. However, the attacker's...

CVE-2026-64564

Debian 13 6.12.95 SCTP ASCONF DEL-IP UAF prueba de concepto. gcc -O2 -static -o lpe lpedebian.6.12.95.c ./lpe...

security-onion

Security Onion Security Onion 16.04 已到达生命周期终止： https://blog.securityonion.net/2021/04/security-onion-1604-has-reached-end-of.html 你可以在以下位置找到新的 Security Onion 2 仓库： https://github.com/Security-Onion-Solutions/securityonion/...

CVE-2018-6574-POC

Este repositorio no tiene un README...

uncaptcha

uncaptcha 以 85% 的准确率击败 Google 的音频 reCaptcha 系统。 免责声明 unCaptcha 旨在成为一个概念验证 。截至我们的论文发表时，我们发现它成功解决了 reCaptcha 音频挑战的 85%。自那以后，reCaptcha 似乎加入了一些额外的保护措施，限制了 unCaptcha 的成功率。 我们不会维护此代码以使其成为对 reCaptcha 的有效攻击。 例如，Google 也改进了其浏览器自动化检测。这意味着在当前状态下，Selenium 无法用于从 Google 获取验证码。这可能导致 Google...

CVE-2021-21972-vCenter-6.5-7.0-RCE-POC

CVE-2021-21972-vCenter-6.5-7.0-RCE-POC poc 仅验证他人路径的返回状态 POC 仅用于测试，未加入exp模块 POC仅用于测试，未加入exp模块...

CVE-2023-38545

用法 git clone https://github.com/imfht/CVE-2023-38545 cd CVE-2023-38545/curl-7.74.0 && ./configure --with-openssl make -j 4 python3 socks.py & export ALLPROXY=socks5h://127.0.0.1:9050 ./curl-7.74.0/src/curl $python3 -c "print'A'10000, end=''" -vvvv 验证 详情请见：此链接（中文）...

GOSINT

GOSINT - 开源威胁情报收集与处理框架 GOSINT框架是一个用于收集、处理和导出高质量威胁指标（IOC）的项目。GOSINT允许安全分析师收集和标准化结构化和非结构化的威胁情报。将威胁情报应用于安全运维，可以为告警数据增加额外的置信度、背景信息和共现关系。这意味着您可以将第三方研究应用于安全事件数据，以识别相似或相同的恶意行为指标。该框架使用Go语言编写，前端采用JavaScript。 安装 请访问 http://gosint.readthedocs.io/en/latest/installation.html 查阅安装步骤。 有三种方式可以启动并运行： 1. Bash安装脚本 ...

WordPress_4.9.8_RCE_POC

Resumen Un PoC simple para RCE en WordPress privilegio de autor, consulte CVE-2019-8942 y CVE-2019-8943. Versión afectada WordPress " 3. Detecta el tema actual con WPScan wpscan -u -et, p.ej. twentyseventeen como predeterminado en WordPress 4.9.8 4. Sube el archivo de imagen de payload poc.jpg...

dockle

Dockle - Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start Dockle helps you: 1. Build Best Practice Docker images 2. Build secure Docker images Checkpoints includes CIS Benchmarks $ brew untap goodwithtech/dockle who use 0.1.16 or older version $ bre...