Linux Distros Unpatched Vulnerability : CVE-2026-83632

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue...

TheDefendersGuide

La Guía del Defensor: Es peligroso defender solo, ¡toma esto! ¿Qué es la Guía del Defensor? La Guía del Defensor es un proyecto de Luke Paine y Jonathan Johnson para reunir en un solo lugar todos los mejores recursos de defensa para un aspecto particular de un sistema operativo. Con demasiada...

sectemplates

Sectemplates Me complace anunciar la creación de SecTemplates.com, un sitio web donde profesionales de la seguridad informática y equipos de ingeniería de startups que carecen de un equipo de seguridad pueden encontrar plantillas para ayudar a impulsar sus programas. El enfoque principal de este...

ps-lab-cve-2022-0847

ps-lab-cve-2022-0847 Recursos necesarios para construir el laboratorio de Pluralsight CVE-2022-0847...

covertchannels-steganography

Muchas personas me preguntan cómo empezar en el campo de la esteganografía/canales encubiertos o cómo mejorar sus habilidades. Escribí esta recopilación para ayudarles con algunas buenas referencias, herramientas y libros que he usado y leído pronto añadiré más. Libros y Artículos/Papers Técnicas...

pftriage

pftriage pftriage is a tool to help analyze files during malware triage. It allows an analyst to quickly view and extract properties of a file to help during the triage process. The tool also has an analyze function which can detect common malicious indicators used by malware. Dependencies pefile...

awscanner

awscanner Acerca de Encuentra recursos expuestos a internet en una cuenta de AWS. Los resultados del escaneo se guardarán en la carpeta results https://owasp.org/www-project-awscanner/ Instalación git clone https://github.com/OWASP/awscanner.git pip install aws-shell cd awscanner pip install -r...

DFIR_Resources_REvil_Kaseya

Resources for DFIR Professionals Responding to the REvil Ransomware Kaseya Supply Chain Attack Yesterday Sophos and Huntress Labs identified that Kaseya, a remote management provider popular with MSPs, was compromised to deploy a supply chain ransomware attack. A large number of organisations wer...

awesome-ctf

Awesome CTF Una lista curada de marcos de trabajo, bibliotecas, recursos, software y tutoriales de Capture The Flag CTF. Esta lista tiene como objetivo ayudar tanto a principiantes como a jugadores experimentados de CTF a encontrar todo lo relacionado con CTF en un solo lugar. Contribuciones Por...

cliam

cliam Multi cloud iam permissions enumeration tool. Currently covers: AWS GCP Azure Oracle 🚧 WIP Description Cliam is a simple cloud permissions identifier. There are two main components to the CLI. Most of the enumerated permissions are list, describe or get permissions. enumerate which can be...

awesome-security-vul-llm

Awesome Security Vulnerability ProjectBy LLM Project Introduction This project uses a large model combined with a crawler to retrieve all projects on GitHub that contain valuable vulnerability information, vulnerability POCs, or rule information. It automatically identifies the project's director...

CVE-2022-41401

OpenRefine = v3.5.2 SSRF OpenRefine v=3.5.2 contiene una vulnerabilidad de Server-Side Request Forgery SSRF, que permite a usuarios no autorizados explotar el sistema, lo que potencialmente puede llevar a acceso no autorizado a recursos internos y divulgación de archivos sensibles. La causa raíz ...

Resources-for-Beginner-Bug-Bounty-Hunters

Resources-for-Beginner-Bug-Bounty-Hunters Intro Current Version: 2023.01 Welcome to our web hacking and bug bounty hunting resource repository! A curated collection of web hacking tools, tips, and resources is available here. We hope that this repository will be a valuable resource for you as you...

CVE-2026-66331

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Delphi bindings buffered transport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-61374

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-66054

Allocation of Resources Without Limits or Throttling, Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-63772

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-61374

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-61374

The Apache Thrift Java bindings are vulnerable to an Allocation of Resources Without Limits or Throttling (CWE-770) issue. Specifically, the Java TSaslTransport component fails to enforce a size limit on post-auth data-frames. This vulnerability affects versions before 0.25.0 . Impacting availabi...

EUVD-2026-91629

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...