Iran-War-Media

Monitor de Medios de la Guerra de Irán Lea el Análisis Completo Introducción Este proyecto monitorea la cobertura mediática de la guerra entre Irán, Israel y Estados Unidos. Puede usar este repositorio para: 1. Crear un corpus de artículos mediáticos en inglés 2. Identificar autores y medios de...

ShunyaNet-Sentinel

ShunyaNet Sentinel ACTUALIZADO: 03/02/2026 ShunyaNet Sentinel es un programa ligero con temática cyberpunk que ingiere fuentes RSS por ejemplo, noticias de última hora, redes sociales, las envía a un LLM para su análisis y entrega alertas e informes resumidos directamente a la interfaz gráfica y ...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

cyber_rss

cyberrss cert 11 Alertas ASD ACSC Australia CERT-FR ANSSI Avisos de ciberseguridad de CISA Avisos ICS de CISA Avisos médicos de ICS de CISA JPCERT/CC Blog de JPCERT/CC Fuente RSS general del NCSC del Reino Unido Guía del NCSC del Reino Unido Noticias del NCSC del Reino Unido Informes del NCSC del...

peer-tweet

PeerTweet Feeds descentralizados usando el DHT de BitTorrent. Idea de Arvid y The8472 "DHT RSS feeds" http://libtorrent.org/dhtrss.html Captura de pantalla Enlaces rápidos Descarga los últimos binarios desde la página de lanzamientos. Encuentra y comparte direcciones de PeerTweet desde la página ...

CVE-2025-24893

Exploit para CVE-2025-24893 CVE-2025-24893 es una vulnerabilidad crítica de ejecución remota de código RCE sin autenticación que afecta a la Plataforma XWiki. Este fallo permite que cualquier usuario invitado inyecte y ejecute código Groovy arbitrario—sin autenticación—a través de una solicitud R...

Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE

The Import XML and RSS Feeds WordPress plugin before 2.1.5 allows unauthenticated attackers to execute arbitrary commands via a web shell. id: CVE-2023-4521 info: name: Import XML and RSS Feeds 2.1.5 - Unauthenticated RCE author: princechaddha severity: critical description: The Import XML and RS...

Changedetection.io RSS Single Watch - Cross-Site Scripting

changedetection.io 0.54.1 contains a stored XSS caused by unescaped reflection of UUID path parameter in RSS single-watch endpoint, letting remote attackers execute JavaScript in victim's browser, exploit requires victim to visit crafted URL. id: CVE-2026-27645 info: name: Changedetection.io RSS...

Cross RSS 1.7 - Local File Inclusion

Absolute path traversal vulnerability in Cross-RSS wp-cross-rss plugin 1.7 for WordPress allows remote attackers to read arbitrary files via a full pathname in the rss parameter to proxy.php. id: CVE-2014-4941 info: name: Cross RSS 1.7 - Local File Inclusion author: DhiyaneshDK severity: medium...

CVE-2025-24893_Analysis

CVE-2025-24893 - SSTI en SolrSearch de XWiki que permite ejecución remota de código sin autenticación Un laboratorio Docker autónomo que reproduce CVE-2025-24893, una inyección de plantillas del lado del servidor en el feed RSS de SolrSearch de XWiki que conduce a la ejecución remota de código no...

CVE-2023-5612

Divulgación del correo electrónico público en el feed RSS de etiquetas https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ root@kitploit: An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to...

xwiki-cve-2025-24893-exploit

Exploit de XWiki CVE-2025-24893 Exploit de ejecución remota de código sin autenticación para versiones de XWiki vulnerables a CVE-2025-24893. Resumen de la Vulnerabilidad Las versiones de XWiki anteriores a 15.10.9 son vulnerables a RCE sin autenticación mediante inyección de scripts Groovy en el...

CVE-2026-89002

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitize and escape content it retrieves from a user-supplied source before rendering it, which could allow users such as contributors to perform Stored Cross-Site Scripting attacks against higher-privileged users who review t...

CVE-2026-89004

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration and run log, allowing users with contributor-level access and above to read the configuration and execution logs of campaigns created by othe...

CVE-2026-89005

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitise and escape one of its campaign configuration fields when a certain feature is enabled, which allows users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the session ...

CVE-2026-89004 WPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Campaign Configuration and Log Disclosure via IDOR

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration and run log, allowing users with contributor-level access and above to read the configuration and execution logs of campaigns created by othe...

EUVD-2026-85807

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitise and escape one of its campaign configuration fields when a certain feature is enabled, which allows users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the session ...

EUVD-2026-85806

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration and run log, allowing users with contributor-level access and above to read the configuration and execution logs of campaigns created by othe...

CVE-2026-89005

The WPeMatico RSS Feed Fetcher WordPress plugin, versions before 2.8.26 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to sanitize and escape specific campaign configuration fields when a particular feature is enabled. This allows users with the Contributor rol...