probo

Probo Plataforma GRC de código abierto para ingenieros. Probo es una plataforma de gobernanza, riesgo y cumplimiento GRC autoalojable, diseñada para equipos de ingeniería y seguridad. Cubre el ciclo de vida completo de GRC: identificación de riesgos, seguimiento de controles, riesgo de proveedore...

OpenSC.tokend

OpenSC.tokend El controlador de tarjetas inteligentes de código abierto para OS X Un tokend hace que las claves y certificados de tu tarjeta inteligente aparezcan en Keychain Access.app y estén disponibles para aplicaciones como Safari o Chrome. OpenSC.tokend es la implementación de tokend de...

CVE-2025-64495-POC

CVE-2025-64495-POC Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE Summary The functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prom...

CVE-2023-0748

CVE-2023-0748 BTCPayServer 1.7.5 and lower version is vulnerable for Open Redirection attack. Step to Reproduce 1. Login your account on https://mainnet.demo.btcpayserver.org/login 2. Then Click the link below...

CVE-2026-75650

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-75650 CVE-2026-75650 Magento Open Source 2.4.8-p5 — Adobe Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the conte...

Real Estate

Open Arsenal Real Estate Specifications The real estate ecosystem is built around the idea of shifting property intelligence away from centralized listing platforms and into locally hosted, self-sovereign data environments. Instead of relying on third-party platforms to define, store, or interpre...

CVE-2026-47883

CVE-2026-47883: PoC de Open Redirect en UrlHandlerFilter de Spring Framework Este repositorio es un PoC de reproducción mínima de CVE-2026-47883, publicado a través del aviso de seguridad oficial de Spring. Aviso oficial: https://spring.io/security/cve-2026-47883/ Título oficial: Spring Framework...

CVE-2019-6447-ESfile-explorer-exploit

CVE-2019-6447-ES file Explorer exploit ES File Explorer v4.1.9.7.4 Open port vulnerability exploit. CVE-2019-6447 Credits to the one who found the actual vulnerability...

CVE-2026-48356

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-48356 CVE-2026-48356 Magento Open Source 2.4.8-p5 — Adobe Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user...

invesalius3_vulnerabilities

invesalius3vulnerabilities Introducción El https://github.com/invesalius/invesalius3 es la referencia, un proyecto de código abierto. Estructura Cada vulnerabilidad tendrá la siguiente estructura: folder/ |README.md |subfolder/ |artifacts nombrada como CVE-ID si se le asigna un ID, o como VULN-NA...

cve-2026-46391

CVE-2026-46391 - Credential Exposure via SSRF in @haxtheweb/open-apis Proof of concept for CVE-2026-46391. Triggers the SSRF vulnerability in the cacheAddress endpoint of @haxtheweb/open-apis and captures the service account credentials sent in the callback. Build go build -o cve-2026-46391 . Tes...

PT-2026-107378

These are all security issues fixed in the nvidia-open-driver-G07-signed-check-595.104.02-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-106012

🚨 CVE-2026-102778 Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension 6.6.0 - The page a shared image link opens the share mini page of the front end can link the article the image was shared from when the option "Share artic...

CVE-2026-102778: Cross-Site Request Forgery (CSRF)

Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension 6.6.0 - The page a shared image link opens the share mini page of the front end can link the article the image was shared from when the option "Share article links" is on. I...

OPENSUSE-SU-2026:12061-1 nvidia-open-driver-G07-signed-check-595.104.02-2.1 on GA media

These are all security issues fixed in the nvidia-open-driver-G07-signed-check-595.104.02-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-Disclosures

Investigación de Seguridad y Divulgaciones de CVE🔥 Un repositorio que documenta vulnerabilidades de seguridad descubiertas en Software Libre y de Código Abierto FOSS por VETTRIVEL U Solo hay dos tipos de empresas: las que han sido comprometidas y lo saben, y las que han sido comprometidas y aún n...

YARAify

YARAify YARAify is an open YARA scan- and search engine. This repository provides some sample python3 scripts on how to interact with the YARAify API. Obtain an Auth-Key In order to query the YARA API, you need to obtain an Auth-Key. If you don't have an Auth-Key yet, you can get one at...

CVE-2024-34328

CVE-2024-34328 Open Redirection via Host Header 📝 Overview Vulnerability Title : Open Redirection via Host Header Product : Sielox AnyWare Version Affected : 2.1.2 CVE ID : CVE-2024-34328 Severity : Medium Attack Vector : Remote Impact : Open Redirection / Phishing 🧨 Description An attacker can...

CVE-2026-64531

🔥 CVE-2026-64531 — OVSwrap Corrupción de Memoria en Open vSwitch del Kernel de Linux 🩸 Resumen de la Vulnerabilidad CVE-2026-64531 es una vulnerabilidad de seguridad que afecta al subsistema de red Open vSwitch OVS del Kernel de Linux. La falla existe en el manejo de atributos Netlink anidados ,...

Awesome-RCE-techniques

Increíbles técnicas de RCE ¡Lista increíble de técnicas para lograr Ejecución Remota de Código RCE en varias aplicaciones! Objetivo de este proyecto El objetivo de este proyecto es proporcionar una base de conocimiento OpenSource de todas las técnicas para lograr la Ejecución Remota de Código RCE...