1436186 matches found
NotQuite0day
NotQuite0day This repository documents real bugs in real software which we reported to vendors but vendors either ignored our emails and the bugs are not fixed after a long long time. The repo is organized by the release date. In each folder you can read about the bugs, versions affected. If...
awesome-security-hardening
awesome-security-hardening Una colección de excelentes guías de hardening de seguridad, buenas prácticas, listas de verificación, benchmarks, herramientas y otros recursos. Esto es un trabajo en curso: por favor contribuye enviando tus sugerencias. Puedes hacerlo creando tickets de incidencia o...
CVE-2018-7197
CVE-2018-7197 CVE-2018-7197 Write up...
ECHO-FEA2-5EA1-2849
Bulletin has no description...
ECHO-7EDB-23C5-02EC
Bulletin has no description...
ECHO-1EC0-58D1-CB3D Keycloak's GHSA advisory (GHSA-gv3v-2cpp-3pmq) lists the affected package/range as org.keycloak:keycloak-quarkus-server < 26.5.6 with no lower bound, so by version string alone 25.0.6 is nominally in range. The actual vulnerable mechanism is the HTTP access log feature (config.HttpAccessLogOptions, HttpAccessLogPropertyMappers) added by the fix commit's PR to mask Authorization/Cookie headers in a verbose access-log pattern. That feature does not exist in 25.0.6 at all — confirmed via a full source search (no HttpAccessLogOptions.java, HttpAccessLogPropertyMappers.java, or any http-access-log config option anywhere in quarkus/config-api or quarkus/runtime). There is no access-log-pattern mechanism in this version capable of the described header disclosure.
Bulletin has no description...
ECHO-F035-45D7-D0F3
Bulletin has no description...
ECHO-8C0B-1F50-633C
Bulletin has no description...
ECHO-0030-65EC-F55D
Bulletin has no description...
Penetration-Testing-Tools
Una colección de mis herramientas, scripts y cheatsheets de pruebas de penetración Esta es una colección de más de 160+ herramientas, scripts, cheatsheets y otros botines que he estado desarrollando durante años para pruebas de penetración y auditorías de seguridad informática. La mayoría de ello...
CVE-2018-6574
This repository does not have a README...
CVE-2008-1611
Este repositorio no tiene un README...
CVE-2023-6710
CVE-2023-6710 Exploit POC Explore the depths of CVE-2023-6710 with our comprehensive Proof of Concept PoC. This CVE, identified as a potential security vulnerability, has been meticulously examined to demonstrate its impact and provide a hands-on understanding of the associated risks. Installatio...
CVE-2022-1388
CVE-2022-1388...
CVE-2025-29556
CVE-2025-29556 – ExaGrid Security Officer Account Creation Bypass 📝 Overview Vulnerability Title : Unauthorized Creation of Security Officer Account Product : ExaGrid EX10 Backup Appliance Version Affected : Tested on current version at disclosure Versions Affected : 6.3 – 7.0.1.P08 CVE ID :...
WebAccess-CVE-2017-16720-
Este repositorio no tiene un README...
CVE-2021-46422-poc
This repository does not have a README...
CVE-2024-10924-Exploit
CVE-2024-10924-Exploit Really Simple Security Free, Pro, and Pro Multisite 9.0.0 - 9.1.1.1 - Authentication Bypass 📖 Description This script exploits a vulnerability in the Really Simple Security plugin versions 9.0.0 - 9.1.1.1 for WordPress.The flaw allows authentication bypass due to improper...