mailorder

Mail Order El Servicio de Licencias de Nalpeiron NLSSRV32.exe se instala como parte de ciertas instalaciones de software para gestionar operaciones privilegiadas de licencias de software. Está emparejado con un componente cliente filechck.dll que se comunica con el servicio a través de mailslots ...

Metabase-Setup-Endpoint-SQLi-Fix

CVE-2026-72898: Parche para la inyección SQL en el endpoint de configuración de Metabase Este repositorio contiene el hotfix para CVE-2026-72898 , una vulnerabilidad de inyección SQL no autenticada en el endpoint de configuración de instancias de Metabase autoalojadas. Sin el parche, los atacante...

voidsyscall

voidsyscall Cero WinAPI. Cada primitiva NT se resuelve en tiempo de ejecución desde ntdll en memoria — las instrucciones SYSCALL se emiten directamente mediante stubs de ensamblador Plan9, sin tabla de importaciones, sin tocar los hooks de ntdll en modo usuario. C2 sobre HTTPS / DNS / ICMP,...

[SECURITY] Fedora 45 Update: darktable-5.6.1-2.fc45

darktable manages your camera raw files and images in a database, lets you view them through lighttable mode and develop/enhance them in darkroom mode...

ddos-traffic-monitor

Monitor de Tráfico DDoS Una herramienta de monitoreo de tráfico en tiempo real que detecta y muestra el volumen de tráfico de red por dirección IP para identificar posibles ataques DDoS. La herramienta está construida con Python 2.7 usando Flask como backend y un frontend basado en web para la...

CVE-2026-11113-SMTP-Header-Injection-in-Contact-Form

CVE-2026-11113 – Inyección de Cabeceras SMTP en el Formulario de Contacto Código del Programa Python root@kitploit: contactformserver.py - Mails feedback without sanitizing headers from flask import Flask, request import smtplib app = Flaskname @app.route'/contact', methods='POST' def contact:...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

rip_raw

Rip Raw Rip Raw 是一个用于分析受感染 Linux 系统内存的小型工具。 其目的类似于 Bulk Extractor，但特别专注于从 Linux 系统的内存转储中提取系统日志。 这使您无需生成配置文件即可分析系统。 它不能替代 Rekall 和 Volatility 等使用配置文件进行更结构化内存分析的工具。 Rip Raw 通过获取原始二进制文件（如内存转储）并使用以下方式提取文件和日志： 文本/二进制边界 文件头部和文件幻数 日志条目 然后将其放入 zip 文件中，供其他工具（如 Cado Response 或 SIEM（如 Splunk））进行二次处理（示例如下）。 ...

Linux Distros Unpatched Vulnerability : CVE-2026-88060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, a...

Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization

Summary There is a high-severity request-smuggling vulnerability in Traefik's handling of the HTTP/1.1 Upgrade mechanism. Since Traefik moved to unencrypted HTTP/2 with prior knowledge Go 1.24, a client-initiated Upgrade: h2c request header and its connection-specific HTTP2-Settings header were...

pip3line

pip3line Utilidad de manipulación de bytes sin procesar, capaz de aplicar transformaciones conocidas y menos conocidas. El desarrollo y la página principal se han trasladado a : https://github.com/metrodango/pip3line...

Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

Summary An XSS vulnerability exists in @angular/platform-server during server-side rendering SSR HTML serialization when traversing ancestor tags across element boundaries. When an application renders untrusted user input within raw-text tags , , , comments, or text nodes inside a that is nested...

CVE-2026-88060

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes untrusted input inside template content nested in...

CVE-2026-88060 Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes untrusted input inside template content nested in...

CVE-2026-88060 Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes untrusted input inside template content nested in...

CVE-2026-88060

Angular server-side rendering in @angular/platform-server (prior to 20.3.30, 21.2.22, and 22.1.4) serializes untrusted input inside content nested in fallback raw-content elements such as noscript , iframe , noembed , and noframes . The Domino serializer's fallbackRawContentTags traversal stoppe...

CVE-2026-88060 Angular: SSR XSS via Unescaped <template> Content Across DocumentFragment Boundaries in Fallback Raw-Content Elements

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes untrusted input inside template content nested in...

CVE-2026-88058 Angular: SSR XSS via Unescaped Processing Instruction (<?...?>) Nodes in Fallback Raw-Content Elements

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes ProcessingInstruction DOM nodes inside fallback...

CVE-2026-88058

Angular SSR in @angular/platform-server (prior to 20.3.30, 21.2.22, and 22.1.4 ) serializes ProcessingInstruction DOM nodes inside fallback raw-content elements (noscript, iframe, noembed, noframes) without escaping character was escaped but

CVE-2026-88008 Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization

Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.26 until 2.11.57 and 3.7.13, Traefik forwards a client-supplied Connection header requesting Upgrade, the Upgrade: h2c token, and HTTP2-Settings to a shared backend. If the backend accepts h2c and returns 101 Switching...