evtx

EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...

pulledpork

PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...

zBang

zBang es una herramienta especial de evaluación de riesgos que detecta posibles amenazas de cuentas privilegiadas en la red escaneada. Las organizaciones y los equipos rojos pueden utilizar zBang para identificar posibles vectores de ataque y mejorar la postura de seguridad de la red. Los...

Invoke-SessionHunter

Invoke-SessionHunter Recupera y muestra información sobre las sesiones de usuario activas en equipos remotos. No se requieren privilegios de administrador. La herramienta utiliza el servicio de registro remoto para consultar la sección del registro HKEYUSERS en los equipos remotos. Identifica y...

wodat

wodat Windows Oracle Database Attack Tool Puerto simple de la popular Oracle Database Attack Tool ODAT https://github.com/quentinhardy/odat a C .Net Framework. Créditos a https://github.com/quentinhardy/odat ya que gran parte de la funcionalidad está portada desde su código. Realizar ataques...

CVE-2020-0665

CVE-2020-0665 - SID Filter Bypass Proof of Concept for CVE-2020-0665, which allows bypassing SID Filtering in Active Directory Forests Cross Forest Attack. Requirements for the attack Target Domain Controller machine must not be patched after February, 2020. Having previously compromised a Domain...

CVE-2024-3495-POC

CVE-2024-3495-POC Il plugin WordPress Country State City Dropdown CF7 versioni fino alla 2.7.2 è vulnerabile a SQL Injection tramite i parametri 'cnt' e 'sid'. L'escape insufficiente e la mancata preparazione della query SQL consentono ad attaccanti non autenticati di aggiungere query, estraendo...

GlobalUnProtect

GlobalUnProtect PoC tool per decrittare e raccogliere configurazione, cookie e file HIP di GlobalProtect da installazioni client Windows. Post del blog: https://rotarydrone.medium.com/4a1d8fc7773e Utilizzo Eseguire come standalone o in-memory tramite execute-assembly o equivalente. Raccoglie tutt...

CVE-2026-81576

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

CVE-2026-81576 Improper Authentication of Session Handles

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

EUVD-2026-66983

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

CVE-2026-81576 Improper Authentication of Session Handles

If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 issues handles per connection and relies on a cryptographically weak SID as sole authenticator. An attacker can brute-force the SID, recover another session's handle number, and read license information belonging to anoth...

CVE-2026-81576

CodeMeter Runtime (WIBU), when configured as a server in versions before 8.41a and 9.10 , issues a per-connection session handle and relies on a cryptographically weak SID as the sole authenticator. An attacker with network access can brute-force the SID , recover another session's handle number,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Networking: dsa: mv88e6xxx: Fix –ENOENT when deleting VLANs and MST is not supported. Russell King reported that on version ZII dev rev B, deleting a bridge VLAN from a user port results in the error –ENOENT:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: An out-of-bounds access issue in parsesecdesc has been fixed. If osidoffset, gsidoffset, and dacloffset can be greater than smbntsdstruct.size. If they are smaller, it could lead to an out-of-bounds situation. Additionally...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100498)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100498 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active,...

DEBIAN-CVE-2026-68097

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities setntacldacl validates sid.numsubauth before copying an ACE, but does not verify that the declared ACE size contains all sub-authorities described by that field. An undersized...

UBUNTU-CVE-2026-68097

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities setntacldacl validates sid.numsubauth before copying an ACE, but does not verify that the declared ACE size contains all sub-authorities described by that field. An undersized...

CVE-2026-68097

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities setntacldacl validates sid.numsubauth before copying an ACE, but does not verify that the declared ACE size contains all sub-authorities described by that field. An undersized...

EUVD-2026-55478

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities setntacldacl validates sid.numsubauth before copying an ACE, but does not verify that the declared ACE size contains all sub-authorities described by that field. An undersized...