1436484 matches found
CVE-2026-81766
The Really Simple Security WordPress plugin (aka Really Simple SSL) before 9.8.0 contains a missing permission check in the rsp_upgrade_install_plugin function, which allows a subsite administrator on a WordPress multisite network to install and execute arbitrary code from a user-supplied URL int...
EUVD-2026-68160
The Really Simple Security WordPress plugin before 9.8.0 does not check that the user is allowed to install Really Simple Security WordPress plugin before 9.8.0 before installing one from a user-supplied URL, allowing an administrator of a subsite on a multisite network to install and execute...
ElasticSearch - Remote Code Execution
ElasticSearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script to the Groovy scripting engine. id: CVE-2015-1427 info: name: ElasticSearch - Remote Code Execution author: pikpikcu...
PaperCut - Unauthenticated Remote Code Execution
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. ...
BlueToolkit
Marco extensible de pruebas de vulnerabilidades Bluetooth para BR/EDR y BLE. Documentación • Instalación • Uso • Exploits • Hardware • Pendientes • Evaluación Automotriz • Recursos de Bluetooth • Licencia BlueToolkit es un marco modular de pruebas de seguridad Bluetooth de caja negra para Bluetoo...
api-security-audit-action
GitHub Action: 42Crunch REST API Static Security Testing The REST API Static Security Testing action locates REST API contracts that follow the OpenAPI Specification OAS, formerly known as Swagger and runs thorough security checks on them. Both OAS v2 and v3.0.x are supported, in both JSON and YA...
nmap
nmap Esta biblioteca tiene como objetivo proporcionar bindings idiomáticos de nmap para desarrolladores de Go, con el fin de facilitar la escritura de herramientas de auditoría de seguridad usando golang. Qué es nmap Nmap Network Mapper es un escáner de redes gratuito y de código abierto creado p...
dnsgen
DNSGen 2.0 - Motor Avanzado de Permutación de Nombres DNS 🚀 DNSGen es una herramienta de permutación de nombres DNS potente y flexible, diseñada para investigadores de seguridad y pentesters. Genera variaciones inteligentes de nombres de dominio para ayudar en el descubrimiento de subdominios y e...
kubesec
Kubesec 🚨 v1 API is deprecated, please read the release notes 🚨 Security risk analysis for Kubernetes resources...
cfn_nag
Antecedentes La herramienta cfn-nag busca patrones en las plantillas de CloudFormation que puedan indicar infraestructura insegura. En términos generales, buscará: Reglas de IAM demasiado permisivas comodines Reglas de grupos de seguridad demasiado permisivas comodines Registros de acceso que no...
MSRC-Security-Research
Introducción Este proyecto aloja investigaciones de seguridad del Centro de Respuesta de Seguridad de Microsoft MSRC. Contribuciones Por el momento, este proyecto no acepta contribuciones externas, pero esperamos hacerlo en el futuro. La mayoría de las contribuciones requieren que aceptes un...
criticality_score
Open Source Project Criticality Score Beta This project is maintained by members of the Securing Critical Projects WG. Goals 1. Generate a criticality score for every open source project. 2. Create a list of critical projects that the open source community depends on. 3. Use this data to...
ROOT-OS-DEBIAN-13-CVE-2025-40064 CVE-2025-40064 in linux - Patched by Root
Root has patched CVE-2025-40064 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-38660 CVE-2025-38660 in linux - Patched by Root
Root has patched CVE-2025-38660 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-40197 CVE-2025-40197 in linux - Patched by Root
Root has patched CVE-2025-40197 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-40048 CVE-2025-40048 in linux - Patched by Root
Root has patched CVE-2025-40048 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-31516 CVE-2026-31516 in linux - Patched by Root
Root has patched CVE-2026-31516 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-40322 CVE-2025-40322 in linux - Patched by Root
Root has patched CVE-2025-40322 in the linux package for Root:Debian:13. Multiple fixed versions available...