264 matches found
YaraRules
YaraRules Comparto reglas YARA en este repositorio...
Block-Spring4Shell
Bloqueador del Proyecto Spring4Shell CVE-2022-22965 Manejador del Servidor Firewall - Este proyecto es un servidor firewall de prueba de concepto POC diseñado para detectar y bloquear ataques que explotan la vulnerabilidad CVE-2022-22965, comúnmente conocida como Spring4Shell. El servidor...
Driver-PiDqSerializationWrite-Example
PiDqSerializationWrite-Example Gracias busybox10 por compartir conocimiento sobre funciones de utilidad y funciones "PiDqSerializationWrite" con la comunidad. https://www.unknowncheats.me/forum/3742948-post13.html CPP struct memcpystructure void destination; unsigned int maxsize; unsigned int...
yara-rules
yara-rules Una colección de mis reglas de yara...
yara-ttd
yara-ttd - La némesis definitiva de los empaquetadores Usa reglas YARA en trazas de Time Travel Debugging 1. Demo 2. Motivaciones 3. Instalación 4. Uso 5. Próximas funciones Demo Un binario empaquetado con UPX Un binario simple que lanza calc.exe, empaquetado con UPX. yara-ttd encuentra la cadena...
linux-malware-detect
Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...
XSpear
XSpear XSpear 是一个基于 Ruby gems 的 XSS 扫描器 !IMPORTANT XSpear 仓库已归档 此仓库已归档，现为只读状态。 XSpear 不再积极维护。 尝试使用 Dalfox 🌙🦊 一个更快、更强大且具有高级功能的 XSS 扫描器。 → https://github.com/hahwul/dalfox 主要特性 基于模式匹配的 XSS 扫描 在无头浏览器上检测 alert confirm prompt 事件（使用 Selenium） 测试请求/响应以绕过 XSS 保护并检测反射（或所有）参数 反射参数 所有参数（用于盲 XSS 等） 过滤测试 even...
Log4Shell-Honeypot
Honeypot de Log4Shell Honeypot mejorado en Docker para CVE-2021-44228 con funciones integrales de seguridad, monitoreo y capacidades de alerta. Características Detección Mejorada Coincidencia de Patrones Exhaustiva : Detecta más de 20 patrones de explotación de Log4Shell, incluyendo búsquedas JND...
cuckoo
.. image:: https://cuckoosandbox.org/assets/images/cuckoo-black.png :alt: Cuckoo Sandbox :target: https://cuckoosandbox.org/ PLEASE NOTE: Cuckoo Sandbox 2.x is currently unmaintained. Any open issues or pull requests will most likely not be processed, as a current full rewrite of Cuckoo is...
CVE-2026-35414
CVE-2026-35414 Bloque de vulnerabilidad CVE-2026-35414 auth2-pubkeyfile.c vulnerable static int matchprincipalsoptionconst char principallist, struct sshkeycert cert char result; uint i; / XXX percentexpand sequences for authorizedprincipals? / for i = 0; i nprincipals; i++ if result =...
CVE-2026-12985 Mattermost DCR redirect URI allowlist bypass via improper URL component validation
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7 Mattermost failed to validate Dynamic Client Registration redirect URIs by URL component matching glob patterns against the raw URI string instead which allows a remote unauthenticated attacker to register an OAuth client with ...
CVE-2026-89160
A flaw was found in PCRE2, a library for processing regular expressions. A remote attacker could exploit this vulnerability by providing a specially crafted input that triggers an out-of-bounds read during pattern matching with invalid UTF Unicode Transformation Format characters. This could lead...
Open Redirect
Spring Framework is vulnerable to an open redirect. The vulnerability is due to insufficiently restrictive URL pattern matching, which allows an attacker to manipulate a URL and redirect a victim to an attacker-controlled external destination...
CVE-2026-78691
ash_sql (an Elixir query library from the Ash ecosystem) is vulnerable to LIKE wildcard injection in its contains/2, string_starts_with/2, and string_ends_with/2 filters. The escape helpers prefix % and _ with a backslash but fail to escape a pre-existing backslash in user input, so \% becomes a ...
CVE-2026-78691 Unescaped backslash allows LIKE wildcard injection in AshSql string search
Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ashsql allows a user who supplies a search term to contains/2, stringstartswith/2, or stringendswith/2 to inject live SQL LIKE wildcards, turning a literal substring search into an attacker-controlled...
Open Redirect
Overview org.springframework:spring-webmvc is a package that provides Model-View-Controller MVC architecture and ready components that can be used to develop flexible and loosely coupled web applications. Affected versions of this package are vulnerable to Open Redirect in the UrlHandlerFilter...
laravel-threat-detection v1.5.0
Laravel Threat Detection Passive intrusion detection for Laravel — see every SQL injection, XSS, scanner, and bot probe hitting your app, logged with full context. It's an IDS, not a WAF: it never blocks, filters, or modifies a request. Drop it into any Laravel 10–13 app and it starts scanning...
SUSE SLES16 Security Update : perl (SUSE-SU-2026:22847-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22847-1 advisory. - CVE-2025-15649: IO:Uncompress:Unzip propagates uncaught exception when parsing zip header with malformed DOS date bsc1266361. -...
GO-2026-6077 Gitea: Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service in code.gitea.io/gitea
Gitea: Unauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service in code.gitea.io/gitea...
