Public_Poc

0xmrsecurity.github.io Página web de blog personal Pensamientos Aprendo y escribo las pruebas de concepto públicas para una mejor comprensión de las habilidades de hacking y programación...

socid-extractor

socidextractor Turn any public profile page into a structured account record — usernames, display names, bios, avatars, locations, joined-at dates, follower counts, external links, and the stable internal identifiers that uniquely pin an account across renames, redesigns, and deletions...

HackingAllTheThings

HackingAllTheThings Summary This repository is to keep a structure on my tools an notes that I use when working on archive some IT-Security certifications. Some tools will be written by me and others will be resources found from different locations...

sunflower_exp

CVE-2022-10270 Versiones afectadas: Sunflower Personal Edition Windows --thread Número de hilos durante el escaneo. Número de hilos predeterminado: 100 --help Ayuda sunflowerpocexp.py Herramienta de verificación de vulnerabilidades y escaneo Detección de puertos: ej: python sunflowerpocexp.py...

zclaw

zclaw El asistente personal de IA más pequeño posible para ESP32. zclaw está escrito en C y se ejecuta en placas ESP32 con un presupuesto estricto de firmware todo incluido de = 888 KiB en la compilación predeterminada. Admite tareas programadas, control GPIO, memoria persistente y composición de...

CVE-2025-51400

Título del Exploit: LiveHelperChat...

personal-security-checklist

Lista de Verificación de Seguridad Personal La lista definitiva de consejos para asegurar tu vida digital 🌐digital-defense.io 👉 Leer la Lista de Verificación 👈 Contenido La Lista de Verificación El Sitio Web La API Contribuciones Créditos Licencia La Lista de Verificación Puedes leer la lista de...

WP Go Maps < 10.0.10 - Unauthenticated Marker Information Disclosure

WP Go Maps WordPress plugin 10.0.10 contains an information disclosure vulnerability caused by lack of approval-state filtering on the public single-marker REST endpoint, letting unauthenticated users access unapproved marker records including PII and geographic coordinates, exploit requires no...

Personal Weather Station Dashboard 12 - Directory Traversal

Personal Weather Station Dashboard 12lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in the test parameter to /others/test.php, as demonstrated by reading the server's private SSL key in cleartext. id: CVE-2025-47423 info: name: Personal Weather...

FREEDOM Administration - Default Login

The Web GUI configuration panel of Hirsch formerly Identiv and Viscount Enterphone MESH through 2024 ships with default credentials username freedom, password viscount. The administrator is not prompted to change these credentials on initial configuration, and changing the credentials requires ma...

Docusaurus Gists Plugin < 4.0.0 - GitHub Personal Access Token Exposure

The Docusaurus gists plugin adds a page to your Docusaurus instance, displaying all public gists of a GitHub user. docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in production build artifacts when passed through plugin configuratio...

Laravel-vul

Laravel-vul Cadena POP de Laravel 5 descubierta mediante auditoría personal, ID de vulnerabilidad: CVE-2021-43503 Detalles en issues...

CVE-2025-28355

CVE-2025-28355 Se identificó que la aplicación https://github.com/Volmarg/personal-management-system es vulnerable a ataques CSRF, una de las muchas acciones que un atacante puede realizar es engañar a un usuario legítimo para que ejecute una solicitud de sitio cruzado que alterará su contraseña,...

git-all-secrets

git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...

cheat-engine

Cheat Engine Cheat Engine es un entorno de desarrollo centrado en la modificación de juegos y aplicaciones para uso personal. Descarga Ultima versión Versiones antiguas Enlaces Website Forum Forum alternativo Wiki Redes sociales Reddit Twitter Donaciones Patreon PayPal Instrucciones de compilació...

AdTran-Personal-Phone-Manager-Vulns

AdTran-Personal-Phone-Manager-Vulns Un repositorio que alberga informes de los 0-days CVE-2021-25679, CVE-2021-25680 y CVE-2021-25681. Resumen CVE-2021-25679: Adtran Personal Phone Manager XSS Almacenado Autenticado en el Formulario de Cambio de Dirección de Correo Electrónico CVE-2021-25680:...

CVE-2026-86671

In Eclipse Che versions 7.29.0 and later, the GET /api/scm/resolve and POST /api/factory/resolver endpoints pass an attacker-controlled URL to URLFetcher.fetch, which calls new URLurl.openConnection with no scheme or host allow-list and returns the response body to the caller. Any authenticated C...

CVE-2026-86671

In Eclipse Che versions 7.29.0 and later , the GET /api/scm/resolve and POST /api/factory/resolver endpoints are vulnerable to Server-Side Request Forgery (SSRF) . The application passes attacker-controlled URLs to URLFetcher.fetch() without an allow-list for schemes or hosts. Consequently, an au...

CVE-2026-86671

In Eclipse Che versions 7.29.0 and later, the GET /api/scm/resolve and POST /api/factory/resolver endpoints pass an attacker-controlled URL to URLFetcher.fetch, which calls new URLurl.openConnection with no scheme or host allow-list and returns the response body to the caller. Any authenticated C...

lama

lama Lama, the application that does not mince words. Description Lama is a GNU Linux tool to generate a word list. The goal is to obtain a custom password dictionary to a particular target, whether physical or moral. It is therefore important that words in this list correspond to the target. Kee...