CVE-2026-79233

A flaw was found in CustomTabs in Google Chrome on Android. A remote attacker could exploit a user interface UI misrepresentation vulnerability by crafting a malicious HTML page. This could allow the attacker to spoof the address bar, potentially deceiving users about the authenticity of a websit...

CVE-2026-78974

A flaw was found in chromium-browser. This user interface UI misrepresentation vulnerability allows a remote attacker, through social engineering, to bypass system access restrictions by tricking a user into interacting with a specially crafted HTML page. This could lead to unauthorized access to...

CVE-2018-25031

CVE-2018-25031 CVE-2018-25031 exploits tests Swagger UI before 4.1.3 could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. HowTo Find the documentation endpoint a...

zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...

gha-lab-3b0a828a69

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of gluestack/gluestack-ui at commit...

heapinspect

HeapInspect Pwnning is an art. HeapInspect is designed to make heap much more prettier. Now this tool is a plugin ofnadbg. Try it! Features Free of gdb and other requirement Multi glibc support 2.19, 2.23-2.27 currently tested both 32bit and 64bit Nice UI to show heap HeapShower detailed...

CVE-2023-34840

CVE-2023-34840 Explicación de la vulnerabilidad Todas las versiones de angular-ui-notification son vulnerables a XSS debido a que la librería no sanitiza las entradas proporcionadas por el usuario. Para usar esta librería de forma segura, se recomienda encarecidamente sanitizar / codificar los...

CVE-2019-18935-bypasswaf

CVE-2019-18935-bypasswaf Modified from the original project: https://github.com/noperator/CVE-2019-18935 1. The attack malicious payload is passed from the cookie 2. Metadata data is passed in through an encrypted interface and deserialized 3. Default proxy 127.0.0.1:8080 4. Default attack payloa...

CVE-2026-87562

A flaw was found in chromium-browser. A remote attacker could exploit incorrect reference resolution in the Accessibility feature by enticing a user to visit a specially crafted HTML page. This could allow the attacker to potentially spoof user interface UI elements, leading to confusion or...

CVE-2026-0047-poc

CVE-2026-0047: Falta de comprobación de permisos en ActivityManagerService Un montón de mapas de bits robados de cada aplicación en ejecución — cero permisos, cero interacción del usuario. La falta de la comprobación enforceCallingOrSelfPermissionDUMP en ActivityManagerService.dumpBitmapsProto...

Exihibitor-RCE

Exhibitor-RCE Exhibitor Web Ui 1.7.1 RCE, CVE-2019-5029 Paso 1: $ git clone https://github.com/thehunt1s0n/Exihibitor-RCE/ Paso 2: $ cd Exihibitor-RCE/ Paso 3 opcional: Es posible que necesites editar la carga útil de datos json en el script. Para ello, simplemente captura la solicitud usando Bur...

CVE-2018-25031

CVE-2018-25031 Descripción: Swagger UI anterior a 4.1.3 podría permitir que un atacante remoto realice ataques de suplantación de identidad. Al persuadir a una víctima para que abra una URL manipulada, un atacante podría explotar esta vulnerabilidad para mostrar definiciones OpenAPI remotas...

Azure-APIM-Cross-Tenant-Signup-Bypass

Azure APIM Cross-Tenant Signup Bypass Status 01.12.2025: This vulnerability is still live and exploitable. Microsoft has not patched this issue and considers it "by design." Security Advisory GHSA-vcwf-73jp-r7mv CVE-2025-66390 Summary A security vulnerability in Azure API Management APIM Develope...

Veto

Veto Un cliente de VirusTotal de código abierto para Android Gratuito y de código abierto. Usa tu propia clave de API de VirusTotal para escanear archivos, enlaces y aplicaciones instaladas contra más de 70 motores, con una interfaz Material 3. Sin cuentas, sin rastreo, sin anuncios. ¿Qué es Veto...

security_monkey

NOTE: Security Monkey is in maintenance mode and will be end-of-life in 2020. For AWS users, please make use of AWS Config. For GCP users, please make use of Cloud Asset Inventory. Security Monkey Security Monkey monitors your AWS and GCP accounts for policy changes and alerts on insecure...

tiuku

Tiuku Tiuku es una herramienta para escanear varios tipos de sistemas y entornos en busca de información relacionada con la seguridad y mostrar los resultados en una interfaz de usuario basada en navegador. También puede detectar y resaltar algunos problemas automáticamente. Tanto los scripts de...

RedbloodC2

Versión pública de Redblood C2 root@kitploit: This is a simple command and control server to handle sessions and your victims instalación root@kitploit: $ git clone https://github.com/kira2040k/RedbloodC2.git $ cd RedbloodC2 $ npm install $ node server.js Uso root@kitploit: Después de instalar...

CVE-2021-21972

Uso:CVE-2021-21972.py option -u or --url: URL objetivo -t or --type: Tipo de payload ssh/webshell -f or --file: Archivo a cargar webshell o authorizedkeys Ejemplo: CVE-2021-21972.py -u https://127.0.0.1 -t webshell -f shell.jsp -p or --proxy: Configurar proxy Ejemplo: CVE-2021-21972.py -u...

Cisco SSM On-Prem <= 8-202206 - Password Reset Account Takeover

A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process...

Kafka UI 0.7.1 Command Injection

An issue discovered in provectus kafka-ui 0.4.0 through 0.7.1 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/topic/messages. id: CVE-2023-52251 info: name: Kafka UI 0.7.1 Command Injection author: yhy0,iamnoooob severity: high description: | An...