BadSamba

DESCRIPCIÓN Este módulo se utiliza para explotar la ejecución de scripts de inicio mediante la configuración de directivas de grupo de Windows cuando están configuradas para ejecutarse desde un recurso compartido SMB remoto. Las directivas de grupo de Windows se pueden utilizar para configurar...

MSF-Testing-Scripts

Scripts de prueba de módulos de Metasploit Este repositorio contiene el código necesario para probar algunos de los módulos de Metasploit que he ayudado a escribir. brocadeemulator.py Módulo de Metasploit: auxiliary/scanner/telnet/brocadeenablelogin juniperssg5emulator.py Módulo de Metasploit:...

cs50-cybersecurity-final-project

Technical Analysis of CVE-2024-3094: XZ Utils Supply Chain Backdoor Video Demo: https://youtu.be/3xBtabSkusE?si=ChN3nBgybK4nqNLz Description: An in-depth technical and architectural breakdown of CVE-2024-3094 CVSS 10.0 Critical, the historic open-source supply chain backdoor embedded into xz-util...

CVE-2026-77179

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

CVE-2026-91843

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

Azure

Kit de Seguridad Ofensiva de Azure Una colección de scripts de Bash y PowerShell para evaluaciones de seguridad de Azure, que cubren escalada de privilegios de IAM, seguridad de contenedores, exposición de Key Vault, configuración de Entra ID y más. Diseñada para ejecutarse en Azure Cloud Shell o...

egg-scripts-CVE-2018-3786

egg-scripts Herramienta de despliegue para el proyecto egg. Nota: Windows está parcialmente soportado, ver22 Instalación $ npm i egg-scripts --save Uso Agrega eggctl a los scripts de package.json: "scripts": "start": "eggctl start --daemon", "stop": "eggctl stop" Luego ejecuta como: npm start npm...

CVE-2026-18574

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

CVE-2026-50751-Mitigation-Scripts

CVE-2026-50751-Scripts-de-Mitigación Existen múltiples técnicas de mitigación que puedes usar desde el sk; https://support.checkpoint.com/results/sk/sk185033 1. Deshabilitar el soporte de clientes heredados. 2. Configurar Acceso Remoto para usar solo ike v2 Hay scripts para ambos cambios; Por...

PT-2026-104176

Name of the Vulnerable Software and Affected Versions All in One SEO versions prior to 5.0.1.2 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform DOM-Based Cross-Site Scripting XSS via the URL pathname. This occurs when a user with the aiose...

trellis-cve-2018-6389

trellis-cve-2018-6389 CVE-2018-6389 WordPress load-scripts / load-styles 공격 완화 목표 이유? 완화 방법 왜 안 되는가? 요구 사항 설치 Trellis WordPress FAQ 관리형 호스팅에서 사용할 수 있나요? 멋져요. 이런 좋은 자료를 더 어디서 찾을 수 있나요? 이건 wp.org에 없네요. ⭐️⭐️⭐️⭐️⭐️ 리뷰는 어디서 할 수 있나요? 대안 테스트 구문 검사 작성자 정보 피드백 변경 로그 라이선스 목표 Nginx로 wp-admin/load-scripts.php...

GHSA-P58F-9548-MPM2 virtualenv bash and fish activation scripts execute commands embedded in paths

Impact The generated activate bash/zsh and activate.fish scripts interpolate a shlex.quote-ed value into a position that quotes it a second time. The extra quotes terminate the quoted run early and leave part of the value parsed as shell code, so a path containing shell metacharacters runs comman...

EUVD-2026-90570

The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'x attacker-chosen name matching the form's url. predefined value' parameter in all versions up to, and includin...

CVE-2026-78210

In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts in an environment without possessing the required authorization...

Rocky Linux 9 [CIQ] Security Update: python3.12 / python3.12-debug / python3.12-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_10978)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202410978 advisory. python: Virtual environment venv activation scripts don't quote paths CVE-2024-9287 python: Unbounded memory buffering in SelectorSocketTransport.writelin...

Rocky Linux 10.1 [CIQ] Security Update: valkey / valkey-debuginfo / valkey-debugsource / valkey-devel Multiple Vulnerabilities (crlsa-2026_3443)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20263443 advisory. Valkey: Valkey: Data tampering and denial of service via improper null character handling in Lua scripts CVE-2025-67733 valkey: Valkey: Denial of Servic...

Rocky Linux 10.1 [CIQ] Security Update: valkey / valkey-debuginfo / valkey-debugsource / valkey-devel Multiple Vulnerabilities (crlsa-2025_21936)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202521936 advisory. redis: Lua library commands may lead to integer overflow and potential RCE CVE-2025-46817 Redis: Redis: Authenticated users can execute LUA scripts as ...

Rocky Linux 8 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-contrib-debuginfo / etc (crlsa-2023_0113)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20230113 advisory. postgresql: Extension scripts replace objects not belonging to the extension. CVE-2022-2625 Tenable has extracted the preceding description block directly from the...

Rocky Linux 10.0 [CIQ] Security Update: valkey / valkey-debuginfo / valkey-debugsource / valkey-devel Multiple Vulnerabilities (crlsa-2025_19675)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202519675 advisory. redis: Lua library commands may lead to integer overflow and potential RCE CVE-2025-46817 Redis: Redis: Authenticated users can execute LUA scripts as ...

Rocky Linux 8 [CIQ] Security Update: python-lxml-debugsource / python3-lxml / python3-lxml-debuginfo (crlsa-2022_1932)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20221932 advisory. python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-43818 Tenable has extracted the preceding description block directly from...