BreakEscape

BreakEscape: Motor de Rails Juego de sala de escape de entrenamiento en ciberseguridad como un motor de Rails montable. Características Más de 24 escenarios de sala de escape de ciberseguridad Seguimiento del progreso del lado del servidor con esquema de 2 tablas Contraseñas aleatorias por...

burp_global_match_replace

Global Match & Replace GMR Burp Suite Extension Global Match & Replace GMR extends Burp Suite with match/replace rules to apply globally or across multiple tools of your choice Repeater, Intruder, Proxy, etc.. It provides per-request and response diffs so you can see exactly what changed. This...

CVE-2025-24813

Condiciones de explotación Función de escritura de DefaultServlet habilitada: es necesario configurar readonly=false en web.xml Soporte de solicitudes PUT parciales: Tomcat admite la carga por fragmentos de forma predeterminada Persistencia de sesiones de archivo habilitada: es necesario configur...

CVE-2025-24813-Apache-Tomcat-Partial-PUT-Deserialization-RCE-

CVE-2025-24813 - Apache Tomcat PUT Parcial + Deserialización RCE 📋 Resumen CVE-2025-24813 es una vulnerabilidad de alta gravedad en Apache Tomcat que permite ejecución remota de código no autenticada cuando se cumplen tres condiciones: 1. El servlet predeterminado tiene habilitado el acceso de...

Tomcat-CVE-2025-24813

Condiciones de Uso La función de escritura de DefaultServlet está habilitada: es necesario configurar web.xml con inreadonly=false Soporte de solicitudes PUT parciales: Tomcat admite la subida por bloques por defecto Habilitar la persistencia de sesiones en archivos: es necesario configurar...

Burp-Recordadora

🧙‍♂️ Recordadora Recordadora is a BurpSuite extension inspired by Harry Potter. Like Neville's Remembrall, it helps you not to forget or lose context of your tests. ✨ Features Save and restore Proxy history Export and import Repeater requests Persist Intruder payloads Support for .log files to...

java-vulnerable

Consumidor de demostración para CVE-2016-0714 RCE de persistencia de sesión de Tomcat + CVE-2013-1814 divulgación de información de UserApi de Apache Rave más cuatro vulnerabilidades de OSS de Java de filter-padding. context.xml habilita PersistentManager → cadena de Tomcat ACTIVA;...

CVE-2026-34828

CVE-2026-34828 Persistencia de sesión de listmonk tras el restablecimiento y cambio de contraseña Introducción Encontré este problema al revisar listmonk , un gestor de boletines y listas de correo de código abierto, con una simple pregunta de seguridad en mente: Cuando un usuario cambia o...

CVE-2025-24813

Descripción Este repositorio es un entorno de reproducción para la última RCE de Tomcat CVE-2025-24813. ¡Solo para fines de aprendizaje e investigación! Condiciones de explotación La aplicación tiene habilitada la función de escritura de DefaultServlet, que está desactivada por defecto La...

Session-Persistence-After-Enabling-2FA-CVE-2025-60425

Persistencia de sesión después de habilitar 2FA Resumen La aplicación Nagios Fusion versiones 2024R1.2 y 2024R2 contiene una falla de seguridad alta donde las sesiones existentes siguen siendo válidas incluso después de habilitar la Autenticación de Dos Factores 2FA. Específicamente, cuando se...

CVE-2025-62343

HCL IntelliOps Event Management IEM is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion...

CVE-2025-62343 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion...

CVE-2025-62343

HCL IntelliOps Event Management (IEM) is affected by an Admin Session Concurrency Vulnerability that may allow user sessions to remain active after logout or session deletion. The assigned CVSS 3.1 score is 3.1 (LOW) , reflecting a network attack vector with high complexity and required user inte...

ANT-2026-96NHD13X · supabase/auth · auth-bypass

auth-bypass low Severity Claude low · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-96NHD13X: Factor-type string mismatch prevents session AAL downgrade In supabase/auth, DowngradeSessionsToAAL...

CVE-2026-66376

Credentials for a deleted user may remain valid for a short period under specific conditions...

CVE-2026-17600

Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or revoke their cached permissions when that user's account was deleted, deactivated, or had its password changed. A user whose account was already logged in at the time of one of these actions could continue...

CVE-2026-17599

Nexus Repository 3 contained an endpoint used to change the administrator account password during initial onboarding. This endpoint did not verify that onboarding was still in progress before allowing the password change, relying instead on the presence of a local onboarding artifact. As a result...

CVE-2026-19019 poco-ai poco-agent Claude File workspace.py WorkspaceManager._setup_session_persistence cleanup

A security flaw has been discovered in poco-ai poco-agent up to 0.5.4. Affected is the function WorkspaceManager.setupsessionpersistence of the file executor/app/core/workspace.py of the component Claude File Handler. The manipulation results in incomplete cleanup. The attack may be performed fro...

CVE-2026-19019 poco-ai poco-agent Claude File workspace.py WorkspaceManager._setup_session_persistence cleanup

A security flaw has been discovered in poco-ai poco-agent up to 0.5.4. Affected is the function WorkspaceManager.setupsessionpersistence of the file executor/app/core/workspace.py of the component Claude File Handler. The manipulation results in incomplete cleanup. The attack may be performed fro...

EUVD-2026-53818

A security flaw has been discovered in poco-ai poco-agent up to 0.5.4. Affected is the function WorkspaceManager.setupsessionpersistence of the file executor/app/core/workspace.py of the component Claude File Handler. The manipulation results in incomplete cleanup. The attack may be performed fro...