CVE-2026-61783 Wazuh: RBAC permission-effect check in mask_sensitive_config allows low-privilege users to read cluster.key

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, an authenticated low-privilege user can read the cluster secret from the manager configuration because the logic that masks sensitive values is...

CVE-2026-61783 Wazuh: RBAC permission-effect check in mask_sensitive_config allows low-privilege users to read cluster.key

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, an authenticated low-privilege user can read the cluster secret from the manager configuration because the logic that masks sensitive values is...

BlueMap

BlueMap: Un Toolkit Interattivo di Exploitation per Azure BlueMap aiuta penetration tester e red teamer a eseguire auditing, discovery & enumeration e exploitation di Azure in modalità interattiva, risparmiando complesse opsec e overhead che solitamente esistono nei progetti di penetration testin...

CVE-2026-54084 Wazuh agent enrollment NULL pointer dereference via malformed manager response

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0 through 4.14.6, a malicious or man-in-the-middle enrollment manager can crash a Wazuh agent during enrollment by returning a malformed key response with fewer...

CVE-2026-54084 Wazuh agent enrollment NULL pointer dereference via malformed manager response

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.0.0 through 4.14.6, a malicious or man-in-the-middle enrollment manager can crash a Wazuh agent during enrollment by returning a malformed key response with fewer...

Spring4Shell-POC

Spring4Shell-POC CVE-2022-22965 Spring4Shell CVE-2022-22965 Proof Of Concept/Informazioni + Un server Tomcat vulnerabile con un'applicazione spring4shell vulnerabile. Questa mattina presto, molteplici fonti hanno segnalato un possibile exploit RCE nel popolare framework Java Spring. La...

CVE-2026-82072

Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-82072

Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

SharpDecryptPwd

SharpDecryptPwd Windows-Tool zum Auslesen von Passwörtern gängiger Programme: SharpDecryptPwd Verwendung SharpDecryptPwd.exe Autor: Uknow Github: https://github.com/uknowsec/SharpDecryptPwd Referenz: https://rcoil.me/2019/09/SharpDecryptPwd/ Usage: SharpDecryptPwd.exe -NavicatCrypto...

knockbleed

knockbleed CVE-2014-0160 Massentest gegen Subdomains Voraussetzungen: Knock Subdomain Scan von Gianni 'guelfoweb' Amato - https://github.com/guelfoweb/knock check-ssl-heartbleed von Steffen Ullrich - https://github.com/noxxi/p5-scripts perl python Verwendung: root@kitploit: sid@sweethome:$...

Enterprise-Information-Security-Risk-Assessment-Oracle-E-Business-Suite-Case-Study

Informationssicherheit: DSGVO-Compliance & Incident Response Ein umfassendes Sicherheits- und Datenschutz-Compliance-Framework für Hochrisiko-Biometrie-Überwachungssysteme CCTV, Gesichtserkennungstechnologie und zentralisierte Kontaktverfolgung, einschließlich vergleichender Framework-Analyse ISO...

CVE-2025-55182

CVE-2025-55182 - React & Next.js Server Actions RCE Exploit Vollwertiger Remote-Code-Ausführungs-Exploit und Scanner für CVE-2025-55182 in React/Next.js Server Actions. Original PoC: Spritualkb/CVE-2025-55182-exp Übersicht CVE-2025-55182 ist eine kritische Schwachstelle durch Prototype Pollution ...

CVE-2025-55462

CVE-2025-55462 Zusammenfassung der Schwachstelle In Eramba Community- und Enterprise-Editionen v3.26.0 wurde eine Fehlkonfiguration von Cross-Origin Resource Sharing CORS festgestellt. Die Anwendung spiegelt vom Angreifer kontrollierte Origin-Header im Antwort-Header Access-Control-Allow-Origin d...

CVE-2018-10920_PoC

CVE-2018-10920PoC Knot Resolver CVE-2018-10920 / NICHT MISSBRAUCHEN...

PIL-CVE-2017-8291-study

PIL-CVE-2017-8291 White Hat School, 3. Jahrgang, Klasse 13, Baek Seunghun @shun1403 https://github.com/shun1403/PIL-CVE-2017-8291.git Umgebung: Ubuntu Linux Umgebung einrichten Upgrade auf V2 mit sudo apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin...

Superset_auth_bypass_check

Supersetauthbypasscheck Tool zur Erkennung der Apahce-Superset-Authentifizierungsumgehung-Schwachstelle CVE-2023-27524 Behoben am: 3.8.2023 Behoben: Sitzungsfehler aufgrund abgelaufener hartcodierter Sitzungszeiträume; Ersetzung durch das Tool flasksessioncookiemanager zur Generierung von...

CVE-2021-30657

CVE-2021-30657 Ein einfacher POC für CVE-2021-30657, der macOS betrifft Details zur Schwachstelle Eine Schwachstelle in syspolicyd ermöglicht es speziell präparierten, aus dem Internet heruntergeladenen App-Bundles, grundlegende macOS-Sicherheitsfunktionen wie File Quarantine, Gatekeeper und...

CVE-2021-28312

CVE-2021-28312 POC und Beschreibung für CVE-2021-28312 Windows-NTFS-Denial-of-Service-Schwachstelle Link: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-28312 Reproduktion Aus cmd: folgenden Befehl eingeben cd c::$i30:$bitmap Remote-Ausnutzung: Kann durch Hinzufügen des...

Trawler

Setacciare Windows per la Persistenza Cos'è? Trawler è uno script PowerShell progettato per aiutare gli Incident Responder a scoprire potenziali indicatori di compromissione su host Windows, focalizzato principalmente su meccanismi di persistenza tra cui Attività pianificate, Servizi, Modifiche a...

CVE-2026-81851 Fireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service

A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon iked, resulting in a denial of service, by saving a specially crafted configuration...