277899 matches found
CVE-2019-9193
GenPostgresRCEExploit es una herramienta PoC diseñada para explotar una vulnerabilidad de Ejecución Remota de Código RCE autenticada en versiones específicas de PostgreSQL 9.3 - 11.7. Permite a usuarios autenticados ejecutar comandos del sistema en un servidor de base de datos PostgreSQL que sea...
iMonitorSDK
中文 Introducción iMonitorSDK es un kit de desarrollo que proporciona monitorización del comportamiento del sistema para la seguridad en endpoints y la nube. Está diseñado para ayudar a aplicaciones industriales como seguridad, gestión de endpoints y auditoría a implementar rápidamente las funcione...
CVE-2018-19320-LPE
CVE-2018-19320 LPE Exploit Descripción Explotación de escalada de privilegios local de CVE-2018-19320. El exploit utiliza las funciones expuestas en gdrv.sys que permiten a un usuario de bajo nivel asignar y escribir datos en la memoria para escalar los privilegios a SYSTEM. Captura de pantalla...
sysmon-config
sysmon-config | Un archivo de configuración de Sysmon para que todos lo bifurquen Esta es una plantilla de archivo de configuración de Sysmon de Microsoft Sysinternals con un seguimiento de eventos predeterminado de alta calidad. El archivo debería funcionar como un excelente punto de partida par...
CVE-2026-102163 Security Advisory 0195
On affected Arista access points with Wireless Intrusion Prevention System WIPS active, an unauthenticated attacker within radio frequency RF proximity can send a crafted frame to crash the sensor service, disabling WIPS monitoring on the access point, or potentially achieve remote code execution...
CVE-2026-102163 Security Advisory 0195
On affected Arista access points with Wireless Intrusion Prevention System WIPS active, an unauthenticated attacker within radio frequency RF proximity can send a crafted frame to crash the sensor service, disabling WIPS monitoring on the access point, or potentially achieve remote code execution...
EUVD-2026-93965
On affected Arista access points with Wireless Intrusion Prevention System WIPS active, an unauthenticated attacker within radio frequency RF proximity can send a crafted frame to crash the sensor service, disabling WIPS monitoring on the access point, or potentially achieve remote code execution...
CVE-2026-102163
Affected Arista access points with the Wireless Intrusion Prevention System (WIPS) active are vulnerable to a flaw where an unauthenticated attacker in radio frequency (RF) proximity can send a crafted frame . This action can crash the sensor service , leading to the disablement of WIPS monitorin...
CVE-2026-101157 Security Advisory 0192
A stored cross-site scripting XSS vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the attacker to compromise the victim's authenticated...
CVE-2026-101157
A stored cross-site scripting (XSS) vulnerability exists that may allow an unauthenticated attacker with adjacent-network access to inject malicious content. This content executes when an authenticated user views the affected content, potentially allowing the attacker to compromise the victim's a...
CVE-2026-101157 Security Advisory 0192
A stored cross-site scripting XSS vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the attacker to compromise the victim's authenticated...
CVE-2022-23131
zabbix-saml-bypass-poc cve-2022-23131 Este programa es solo para uso interno de autoevaluación de riesgos por parte de los usuarios empresariales del cliente. Prohibido su uso para cualquier forma de prueba de seguridad no autorizada. fofa: app="ZABBIX-监控系统" && body="saml" Uso: go build -o zexp...
umap
umap - the USB host security assessment tool Based on Facedancer by Travis Goodspeed: http://goodfet.sourceforge.net/hardware/facedancer21/ Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com...
MASAPT
MASAPT 🤖 ↔ 🤖 ↔ 🤖 ❗ Aviso Esta herramienta se desarrolla con fines académicos y de investigación como parte del curso universitario. El uso de MASAPT para atacar objetivos sin consentimiento previo es ilegal. Los desarrolladores no asumen ninguna responsabilidad por cualquier daño causado con esta...
cve-2021-1675
〖EXP〗Ladon Impresión de vulnerabilidad de escalada de privilegios CVE-2021-1675 Reproducción http://k8gege.org/p/CVE-2021-1675.html Información básica El 9 de junio, Microsoft publicó el parche de actualización de seguridad de junio, que corrigió 50 vulnerabilidades de seguridad, incluida una...
witchcraft
🎉 Tu compañero de OPSEC. Ejecuta witchcraft help o witchcraft manual para el manual completo 🎉 ¿Qué hace? WITCHCRAFT es mucho más que un simple alias; es un sistema de inicio que puede funcionar con busybox, un shell y un motor de automatización para hacking, OSINT, forense, etc. NOMBRE witchcraf...
CVE-2026-86361
Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-86362
Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-86360
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...
CVE-2026-56952
In platformmsghandlerinit of defaultmsghandlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...