reverse-shell

reverse-shell Reverse Shell as a Service - https://reverse-shell.sh Easy to remember reverse shell that should work on most Unix-like systems. Detects available software on the target and runs an appropriate payload. Usage 1. Listen for connection On your machine, open up a port and listen on it...

lynis

Documentación ¿Te gusta este software? Marca la estrella del proyecto y conviértete en un stargazer. lynis Lynis - Herramienta de auditoría de seguridad y hardening para sistemas basados en UNIX. Lynis es una herramienta de auditoría de seguridad para sistemas basados en UNIX como Linux, macOS, B...

punk.py

punk.py Herramienta 1337 de post-explotación SSH en Unix cómo funciona punk.py es una herramienta de post-explotación diseñada para ayudar en el pivoteo de redes desde una caja Unix comprometida. Recolecta nombres de usuario, claves SSH y hosts conocidos de un sistema Unix, y luego intenta...

Narthex

Narthex Narthex Griego: Νάρθηξ, νάρθηκας es un generador de diccionarios modular y minimalista para sistemas operativos Unix y similares a Unix escrito en C y Shell. Contiene programas autónomos al estilo Unix para la creación de diccionarios personalizados que pueden utilizarse para recuperación...

Shellshock

Exploit de Shellshock CVE-2014-6271 Exploit Descripción Este repositorio contiene un exploit para una vulnerabilidad que afecta a sistemas basados en Unix. Ten en cuenta que esto es meramente un script de prueba de concepto creado con fines educativos y debe usarse de manera responsable. Este...

CVE-2026-54241

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer size, allowing a crafted HEVC stream with large dimensions and 16-bit luma samples to cause an integer overflow, an...

GHSA-9MR8-PWPW-3J2W vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2026-67325 vulnerabilities

Vulnerabilities for packages: checkov, mlflow...

CVE-2026-87732

An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticatedecryptinto and Chacha20.authenticatedecryptinto functions write the decrypted plaintext into a caller-provided buffer and only then compares the tag. On a forged tag, the functions returns false,...

CVE-2026-82057

A security issue was discovered in MongoDB where an authenticated user...

GHSA-JXWJ-J7WR-GFRW vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter...

CVE-2026-54874 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

GHSA-528H-PC64-C93X vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu...

CVE-2026-78897 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-76172 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, prism, tensorflow-gpu-jupyter, nextcloud-server, keep, unleash, unleash-fips, keep-fips, kibana, wazuh-dashboard-fips, tileserver-gl, langfuse, langfuse-fips, vitess, gitlab-rails-ce-fips, opensearch-dashboards-fips, gitlab-rails-ce, unleash-proxy,...

CVE-2026-67315 vulnerabilities

Vulnerabilities for packages: langfuse, nextcloud-server, lerna, jitsucom-jitsu, kubeflow-centraldashboard, opensearch-dashboards, prism...

CVE-2026-27878 vulnerabilities

Vulnerabilities for packages: commercial-grafana, grafana, grafana-fips...

CVE-2026-55520

Protego is a pure-Python robots.txt parser with support for modern conventions. Prior to 0.6.2, protego.urlpattern.URLPattern.preparepatternforregex translates every asterisk in an Allow or Disallow directive into a lazy regular-expression wildcard, so a directive containing many asterisks create...

CVE-2026-54548

kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSHPRIVATEKEY or SSHPRIVATEKEYFILE creates /.ssh/config when no user-specific SSH configuration exists and adds a global Host rule containing StrictHostKeyChecking no. In kas/libcmds.py,...

CVE-2026-59981

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, the OpenEXRUtil library returns an out-of-bounds pointer from the SampleCountChannel::ro...