gapps

Gapps Gapps es una plataforma de cumplimiento de seguridad que facilita el seguimiento de tu progreso en varios marcos de seguridad. ❄️ Visita el sitio de Gapps 🏠 ¿Interesado en contactarme? Únete a nuestro discord Table of Contents 1. Getting Started 2. FAQ New Features ❄️ ¡Se han agregado SOC2,...

DeadDialect

DeadDialect Cada arranque habla un idioma diferente. El binario de ayer es el código muerto de hoy. Un sistema de reasignación de ISA RISC-V único por sesión. Cada vez que el sistema arranca, genera una permutación criptográfica fresca del conjunto de instrucciones. Los binarios compilados para u...

SCADAShutdownTool

SCADA Shutdown Tool Herramienta de pruebas de seguridad SCADA SCADAShutdownTool es una herramienta de automatización y prueba para sistemas de control industrial que permite a investigadores y expertos en seguridad probar sistemas de seguridad SCADA, enumerar controladores esclavos, leer los...

CVE-2026-64640

CVE-2026-64640 — Apache Polaris: credential vending before location validation in register A self-contained, one-command reproducer for CVE-2026-64640 : the Iceberg REST register endpoints in Apache Polaris mint cloud storage credentials for a caller-supplied path and read that path server-side...

oregami

Oregami """ ¿Para qué se usa este registro? Mmm.. Mejor lo renombro a nombremuyúnico, hago una búsqueda textual y encuentro todas las referencias. Ok.. Esperando a que termine la búsqueda.. ya casi.. ¡Hecho! Ahora solo necesito entender cuál de los resultados de búsqueda es relevante para el marc...

oregami

Oregami """ What is this register used for? Hmm.. I'll just rename it to veryuniquename, do a textual search, and find all references! Ok.. Waiting for the search to end.. any minute now.. Done! Now I just need to understand which of the search result is relevant to the current usage frame of the...

Drupalgeddon2

CVE-2018-7600 | Drupal 7.58 / 8.3.9 / 8.4.6 / 8.5.1 - 'Drupalgeddon2' RCE SA-CORE-2018-002 Inspired from https://github.com/dreadlocked/Drupalgeddon2 Supports: Drupal 8.3.9 / 8.4.6 / 8.5.1 user/register URL, attacking account/mail & postrender parameter, using PHP's passthru function Pending Yet ...

Python Flask-Security-Too <=5.3.2 - Open Redirect

An open redirect vulnerability exists in the python package Flask-Security-Too prior to version 5.3.3. Attackers can abuse the 'next' parameter on the /login and /register routes to redirect unsuspecting users to malicious sites via crafted URLs, which could lead to phishing or other attacks NVD...

WordPress Pie Register <3.7.0.1 - Cross-Site Scripting

WordPress Pie Register plugin before 3.7.0.1 is susceptible to cross-site scripting. The plugin does not sanitize the invitaioncode GET parameter when outputting it in the Activation Code page. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the...

Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login

The Registration Forms User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.1.7.6 has a flaw in the social login implementation, allowing unauthenticated attacker to login as any user on the site by only knowing their user ID or username...

WordPress Pie-Register <2.0.19 - Cross-Site Scripting

WordPress Pie Register before 2.0.19 contains a reflected cross-site scripting vulnerability in pie-register/pie-register.php which allows remote attackers to inject arbitrary web script or HTML via the invitaioncode parameter in a pie-register page to the default URL. id: CVE-2015-7377 info: nam...

WordPress Pie Register <3.8.2.3 - Open Redirect

WordPress Pie Register plugin before 3.8.2.3 contains an open redirect vulnerability. The plugin does not properly validate the redirection URL when logging in and login out. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute...

WordPress Pie Register <= 3.7.1.4 - Authentication Bypass

An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting socialsite=true and manipulating the useridsocialsite parameter,...

Binvariants

Binvariants: Fuzzing de Binarios Guiado por Invariantes a Nivel de Registro Este repositorio proporciona el código fuente de Binvariants : un prototipo de framework de fuzzing que aprovecha las violaciones de invariantes probables a nivel de registro para el fuzzing de binarios. Este trabajo se...

CVE-2025-34077

CVE-2025-34077 — WordPress Pie Register ≤ 3.7.1.4 - Admin Privilege Escalation Unauthenticated 💀 Author Mrj Haxcore 🧠 Vulnerability Summary The Pie Register plugin for WordPress version ≤ 3.7.1.4 exposes an unauthenticated endpoint that allows an attacker to hijack admin sessions simply by POSTin...

PSI_BOF

ProcessInspect BOF Un BOF de CS que se puede usar para inspeccionar la memoria de procesos, direcciones y símbolos! Resumen de comandos Comando| Descripción ---|--- lm| lista todos los módulos cargados junto con dirección base, punto de entrada, y más addr| Imprime los bytes en una dirección de...

CVE-2025-34077

CVE-2025-34077 Secuestro de sesión de administrador no autenticado - Plugin Pie Register ≤ 3.7.1.4 📌 Descripción Este exploit apunta a una vulnerabilidad en el plugin Pie Register de WordPress versiones ≤ 3.7.1.4, permitiendo el secuestro de sesión de administrador no autenticado. 🛡️ Esta...

CVE-2023-2982

CVE-2023-2982 WordPress Social Login and Register Discord, Google, Twitter, LinkedIn = 7.6.4 - Bypass de Autenticación Información El plugin de WordPress Social Login and Register Discord, Google, Twitter, LinkedIn es vulnerable a un bypass de autenticación en versiones hasta la 7.6.4 inclusive...

Jrohy-trojan-unauth-poc

Jrohy/trojan Unauthorized modification of administrator password 中文版本Chinese version Jrohy/trojan is an open source project based on Go to automatically deploy trojan services. Its web-side initialization interface /auth/register failed to close properly after user configuration, allowing...

x18-leak

x18-leak iOS 11.2 introduced a kernel information leak that could be used to determine the kASLR slide. The issue was the result of a newly added feature, ARMKERNELPROTECT, that inadvertently caused the address of the kernel function Lel0synchronousvector64long to appear in register x18 when...