zeek-cheatsheets

Zeek Cheatsheets These are the Zeek cheatsheets that Corelight hands out as laminated glossy sheets. We have given them a license which permits you to make modifications and to distribute copies of these sheets. The only restrictions are that they can't be used commercially and attribution back t...

CVE-2022-22965

Spring Framework 漏洞 - CVE-2022-22965 易受攻击/不易受攻击的软件列表 https://github.com/NCSC-NL/spring4shell/blob/main/software/README.md 发现易受攻击的代码 易受 CVE-2022-22965 攻击的前提条件： 1 使用 Spring Framework 请参阅下面的 PowerShell 和 bash 脚本。 2 Spring Framework 的版本必须存在漏洞，这原则上适用于所有早于 5.3.18 和 5.2.20 的版本。 Hilko Bengen 发布了一个扫描器，用于根...

the-backdoor-factory

¡La nueva versión de BACKDOOR FACTORY está disponible! Obtén acceso aquí: https://github.com/sponsors/secretsquirrel ADVERTENCIA: Las Pull Requests SERÁN IGNORADAS Y CERRADAS. The Backdoor Factory BDF Solo para profesionales de la seguridad e investigadores. El objetivo de BDF es parchear binario...

twiga

Twiga 一款枚举Android设备信息以帮助了解其内部结构并用于漏洞利用开发的工具。支持Android 4.2至Android 7.1.1。 要求 最新的ADB必须在你的PATH环境变量中并且完全可用。 报告名称不能包含空格。 局限性 由于严格的SELinux策略和Android加固，某些信息和文件无法从更高SDK版本中拉取。 目前一次只能在一台设备上运行。 待办事项 支持在已root设备上进行枚举。 支持同时枚举多台设备。 生成枚举数据的PDF报告。 灵感来源 LinEnum - https://github.com/rebootuser/LinEnum...

CVE-2022-22965

Análisis de CVE-2022-22965 Spring4Shell Descripción de la vulnerabilidad Spring4Shell es el nombre de un CVE que existe en Spring Core del Spring Framework. Con una puntuación CVSS 3.x de 9.8, la vulnerabilidad está clasificada en el nivel de riesgo más alto crítico. Esta vulnerabilidad permite a...

SecurityRAT

OWASP Security RAT（需求自动化工具）是一个帮助你在敏捷开发项目中管理安全需求的工具。典型用例包括： 指定你正在开发的软件工件的参数 基于此信息，生成常见安全需求列表 浏览需求列表，选择如何处理这些需求 将状态持久化到 JIRA 工单中（状态以 YAML 文件形式附加） 以批量模式在开发者队列中创建特定需求的 JIRA 工单 随时将主 JIRA 工单导入工具，以查看特定工单的进度 文档 请访问 https://securityrat.github.io。 在线演示 查看我们全新的在线演示： 网址 ：SecurityRAT 用户名 ：demo 密码...

raw-packet

Proyecto Raw-packet Información importante Este proyecto se creó únicamente con fines educativos y no puede utilizarse para violar la ley ni para obtener beneficios personales. El autor de este proyecto no es responsable de ningún daño posible causado por los materiales de este proyecto...

spring-framework-rce

spring-framework-rce CVE-2022-22965 环境需求 1. tomcat8 8 使用方法 1. 下载 springframeworkrce-0.0.1-SNAPSHOT.zip 解压后，修改名称为 ROOT.war。 2. 替换掉 tomcat 内的 webapps 文件夹下的 ROOT 文件夹或 ROOT.war。 3. 切换到 tomcat 内的 bin 路径下，执行 .\catalina.bat run。 测试方法 略 结果 jdk| tomcat| 结果 ---|---|--- jdk8u322-b06| apache-tomcat-8.5.77| 安...

conscryptchecker

conscryptchecker ¡IMPORTANTE! agrega tu propio app/google-services.json para compilar correctamente...

UBUNTU-CVE-2026-72239

In the Linux kernel, the following vulnerability has been resolved: x86/virt/sev: Revert "Drop WBINVD before setting MSRAMD64SYSCFGSNPEN" Revert 99cf1fb58e68 "x86/virt/sev: Drop WBINVD before setting MSRAMD64SYSCFGSNPEN". Section 8.8 of the SNP spec says: Before invoking SNPINITEX with INITRMP se...

EUVD-2026-57598

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load in openapi3filter/validationhandler.go silently replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which returns nil without checking credentials. This substitution causes every OpenAPI...

Nuxt dev server discloses project root and workspace UUID via the Chrome DevTools workspace endpoint

Impact When a Nuxt dev server is bound to a network-reachable interface for example nuxt dev --host for on-device testing, the default-enabled Chrome DevTools workspace endpoint GET /.well-known/appspecific/com.chrome.devtools.json returns the absolute project root workspace.root, i.e. rootDir an...

EUVD-2026-53821

Tokens issued to a low-privileged user are not sufficiently restricted, allowing them to be used to access product-level Admin REST APIs. Exploitation of this vulnerability allows a low-privileged user to invoke the Admin REST APIs of WSO2 products, potentially leading to full administrative...

CVE-2026-71264 WLED Unauthenticated Configuration Disclosure via /json/cfg and Global Settings-PIN Lock State

WLED's GET /json/cfg endpoint registered in wled00/wledserver.cpp calls serveJson with no settings-PIN check, unlike the /edit endpoint which explicitly checks correctPIN, disclosing the device's general configuration network, hardware, LED setup to any unauthenticated client on the network...

CVE-2026-71251

CVE-2026-71251 (Akaunting) : The shared download route app/Http/Controllers/Common/Uploads.php::download() allowed an authenticated portal customer to fetch any Media by ID without verifying ownership. This constitutes a cross-company IDOR: a user could download another company’s uploaded files b...

EUVD-2026-53313

DjangoCRM's toggledefaultsorting view is the only route in common/urls.py that is not wrapped in loginrequired or staffmemberrequired, and it redirects to a caller-supplied nexturl GET parameter after only checking secureurlnexturl, which merely verifies the target host matches the current site's...

Veeam ONE < 13.1.0.7034 Multiple Vulnerabilities (kb4892)

The version of Veeam ONE installed on the remote host is prior to 13.1.0.7034. It is, therefore, affected by multiple vulnerabilities, including: - A vulnerability allowing remote unauthenticated code execution on the agent host. CVE-2026-64633 - A vulnerability allowing a low-privileged user to...

Memory Allocation with Excessive Size Value

Overview org.bouncycastle:bcprov-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the toByteArray method of DefiniteLengthInputStream, which allocates new byteintremaining up front from t...

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the toByteArray method of DefiniteLengthInputStream, which allocates new byteintremaining up front from the declared ASN.1 definite-length value before reading any content. An attacker can...

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the toByteArray method of DefiniteLengthInputStream, which allocates new byteintremaining up front from the declared ASN.1 definite-length value before reading any content. An attacker can...