CVE-2026-55632 GoCD is vulnerable to authorization bypass via pipeline structure API

GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal pipeline structure API used for autocompletion while editing pipeline, template, environment, and user-preference configuration returns its users-and-roles mode to regular authenticated users without requiring an...

CVE-2026-55632

The continuous delivery server GoCD is affected by an authorization bypass vulnerability in the internal pipeline structure API (versions 20.2.0 through 26.1.0). The API, which is used for autocompletion when editing configurations like pipelines, templates, environments, and user preferences, in...

python-haystack

python-haystack memoria forense |travis| |coverage| |landscape| |pypi| |docs| Inicio rápido: Guía de uso rápido en la carpeta docs/. CLI de Haystack-reverse en la carpeta docs/. Más documentación Introducción: python-haystack es un framework de análisis de heap, enfocado en la búsqueda e ingenier...

ossem-power-up

OSSEM A tool to assess data quality, built on top of the awesome OSSEM project. Mission Answer the question: I want to start hunting ATT&CK techniques, what log sources and events are more suitable? Create transparency on the strengths and weaknesses of your log sources Provide an easy way to...

ldsview

ldsview Offline search tool for LDAP directory dumps in LDIF format. Features Fast and memory efficient parsing of LDIF files Build ldapsearch commands to extract an LDIF from a directory Show directory structure UAC and directory time format translation Config Config options can be passed as CLI...

tesseract

Pruebas unitarias de Tesseract Requisitos Archivos y estructura root@kitploit: ├── langdatalstm │ ├── common.punc │ ├── common.unicharambigs │ ├── desiredbigrams.txt │ ├── eng │ │ ├── desiredcharacters │ │ ├── eng.config │ │ ├── eng.numbers │ │ ├── eng.punc │ │ ├──...

PortexAnalyzerGUI

PortexAnalyzerGUI Interfaz gráfica para PortEx, una biblioteca de análisis de ejecutables portátiles y malware Descarga Página de versiones Características Información de cabecera de: Cabecera MSDOS, Cabecera Rich, Cabecera de Archivo COFF, Cabecera Opcional, Tabla de Secciones, Metadatos .NET...

CVE-2026-91805

Foxit PDF Editor/Reader contains a use-after-free vulnerability in its PDF page-tree handling mechanism. A specially crafted PDF can trigger page-structure changes during rendering, which causes the application to access released page objects . This vulnerability can lead to memory corruption and...

ROS-20260922-73-0042

The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the TLS protocol implementation in the Linux operating system is related to incorrect access to elements of the structure. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality...

EUVD-2026-84013

The Intel SEDI IPM inter-processor mailbox driver in drivers/ipm/ipmsedi.c handles an inbound message interrupt in ipmeventdispose. It read the peer-written doorbell register, extracted the payload length with IPCHEADERGETLENGTH, and passed that length straight to sediipcreadmsg to copy the messa...

ROS-20260921-73-0129

The vulnerability in Golang is related to the lack of protection for the structure of web pages. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Winrar-Exploit-CVE-2023-38831

WinRAR Exploit Builder WinForms / .NET Framework WinRAR Versiones Anteriores a 6.23 Descripción general Este repositorio contiene una pequeña utilidad de escritorio/consola para Windows escrita en C .NET Framework 4.8 que demuestra una técnica de estructura de archivos comúnmente discutida en...

React2Shell-CVE-2025-55182

$$\ $$\ $$$$$$$\ $$\ $$\ $$$$$$$$\ $$\ $$\ $$$$$$\ $$$$$\ $$$\ $$$ |$$ $$\ $$$\ $$$ |$$ |$$ | $\ $$ |$$ $$\ $$ | $$$$\ $$$$ |$$ | $$ | $$$$\ $$$$ | $$ | $$ |$$$\ $$ |$$ / $$ | $$ | $$$$$$ $$ |$$$$$$$ | $$$$$$ $$ | $$ | $$ $$ $$$$ |$$ | $$ | $$ | $$ $$$ $$ |$$ $$ $$ $$$ $$ | $$ | $$$$ $$$$ |$$ | $...

CVE-2024-0582-dataonly

CVE-2024-0582 Un ataque solo de datos basado en CVE-2024-0582 Descripción El exploit sigue la estrategia de esta publicación de blog, excepto que no usé un proceso hijo para abrir archivos. Encontré algunos exploits en GitHub que siguen la estrategia de este artículo. Después de reproducir el...

resym

Artefacto ReSym Este repositorio proporciona los artefactos del artículo "ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries" CCS 2024. 🏆 Ganador del Premio ACM SIGSAC Distinguished Paper Nota : Estamos manteniendo/actualizando activamente nuestros...

WHS4_CVE-2021-4034

CVE-2021-4034 PwnKit - Local Privilege Escalation PoC 🔗 Proyecto original : berdav/CVE-2021-4034 Este proyecto es una versión analizada y modificada del original con fines educativos. Cumplimiento de la licencia MIT | Tarea educativa de White Hat School 📋 Descripción general CVE-2021-4034 es una...

SMS4_Decrypt

SMS4Decrypt 0x01 Introducción El algoritmo SMS4 es un algoritmo de cifrado utilizado en el estándar de red inalámbrica WAPI, ampliamente usado en China. Es un algoritmo de cifrado por bloques con estructura Feistel no balanceada e iterativa de 32 rondas, cuya longitud de clave y de bloque son amb...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

ShimMe

ShimMe Herramientas de la charla DEFCON 32 "SHIM me what you got - Manipulando Shim y Office para inyección de código" Office Injector - Invoca un método RPC en el servicio OfficeClickToRun que inyecta una DLL en un proceso suspendido que se ejecuta como NT AUTHORITY\SYSTEM lanzado por el servici...

The vulnerability of the ColdFusion software platform, related to the lack of measures taken to protect the website structure, allows attackers to enhance their privileges.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...