EDR-Freeze

EDR-Freeze Dies ist ein Tool, das die Software-Sicherheitslücke von WerFaultSecure ausnutzt, um die Prozesse von EDRs und Antimalware anzuhalten, ohne die BYOVD-Angriffsmethode Bring Your Own Vulnerable Driver verwenden zu müssen. EDR-Freeze arbeitet im Benutzermodus, sodass Sie keine zusätzliche...

CVE-2024-45337

Proof of Concept exploit per CVE-2024-45337 Questa repository contiene un exploit proof of concept per CVE-2024-45337. Può essere utilizzato per incapsulare ssh quando si interagisce con un server SSH implementato usando golang.org/x/crypto = v0.30.0, che memorizza le autorizzazioni in modo non...

CVE-2026-31431-copy-fail

Exploit CVE-2026-31431 Copy Fail Parte 1: Concetto Teorico Come funziona CVE-2026-31431 Invece di recuperare costantemente i file direttamente dal lento disco rigido fisico—il che spreca molto tempo—il sistema Linux crea una copia temporanea del file nella RAM, nota come Page Cache. Ciò consente ...

TelemetrySourcerer

Telemetry Sourcerer Introduzione Telemetry Sourcerer è in grado di enumerare e disabilitare le fonti comuni di telemetria utilizzate da AV/EDR su Windows. I red teamer e gli appassionati di sicurezza possono utilizzare questo strumento in un ambiente di laboratorio per: Identificare i punti ciech...

CVE-2026-81819

Affected versions of Flowintel expose the /myassignment/user API endpoint to any authenticated API user. The endpoint accepts a userid parameter identifying the user whose assignments should be returned, but previously had no role restriction beyond general API authentication. As a result, a...

CVE-2026-81818

Affected versions of Flowintel contain an authorization flaw in the administrative user-edit API. The existing authorization check correctly prevented an organization administrator from editing users in another organization, but it did not prevent them from editing a full administrator within the...

CVE-2026-81686

opensslencrypt 1.4.x before 1.4.9 contains an optional D-Bus crypto service whose org.freedesktop.DBus.Properties.Set method performs neither a polkit authorization check nor value validation. Any local user on the system bus can call Set without authorization and set MaxConcurrentOperations to...

CVE-2025-25967

CVE-2025-25967: Cross-Site Request Forgery CSRF DDSN Interactive cm3 Acora CMS versione 10.1.1 è vulnerabile a Cross-Site Request Forgery CSRF. Questa falla consente agli attaccanti di indurre utenti autenticati a eseguire azioni non autorizzate, come l'eliminazione di account o la creazione di...

CVE-2026-34674

Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-16279

An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access to some user accounts...

CVE-2025-62342

HCL IntelliOps Event Management IEM is affected by a Session Deletion Vulnerability. It may allow improper handling of user sessions, resulting in sessions not being fully terminated after logout or deletion...

CVE-2021-22911

CVE-2021-22911 Se hai già registrato un utente, questo reimposta solo la password dell'amministratore, e non entrambe. Ciò rende l'exploit molto più veloce. python3 exploit.py -u test -a [email protected] -t http://chat.rocket.thm -i 10.10.4.24 -p 80...

CVE-2026-54721 Silverstripe UserForms: Remote code execution via userforms email subject

Silverstripe UserForms provides a visual form builder for the Silverstripe CMS. From 6.0.0 until 6.4.9, 7.0.7, and 7.1.1, the userform email recipient subject field in the CMS accepts a specially crafted payload that can be interpreted as executable server-side code. An authenticated CMS user wit...

CVE-2026-54721 Silverstripe UserForms: Remote code execution via userforms email subject

Silverstripe UserForms provides a visual form builder for the Silverstripe CMS. From 6.0.0 until 6.4.9, 7.0.7, and 7.1.1, the userform email recipient subject field in the CMS accepts a specially crafted payload that can be interpreted as executable server-side code. An authenticated CMS user wit...

CVE-2026-54721

Silverstripe UserForms (a visual form builder module for Silverstripe CMS) contains a remote code execution vulnerability in the email recipient subject field. Between versions 6.0.0 and the fixed releases, a specially crafted payload in the subject field is interpreted as executable server-side ...

CVE-2026-46243

🚨 CVE-2026-46243 - CIFSwitch Escalation locale dei privilegi del kernel Linux LPE Vulnerabilità di escalation locale dei privilegi che interessa il client CIFS/SMB del kernel Linux. 📖 Panoramica CVE-2026-46243 è una vulnerabilità di escalation locale dei privilegi LPE all'interno del client...

CVE-2025-57520-Stored-XSS-in-Decap-CMS-3.8.3-

CVE-2025-57520 – XSS persistente in Decap CMS Passaggi 1. Accedi come Contributor/Editor privilegio basso. 2. Crea una nuova voce del blog. 3. Inserisci il payload in uno dei campi vulnerabili es. titolo. 4. Salva la voce. 5. Accedi come Admin privilegio elevato. 6. Apri la voce in Anteprima. 7. ...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Escalada de Privilégio Local Versões Afetadas Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Uso gcc exploit.c -o exploit chmod +x exploit ./exploit Descrição "Problema específico do Ubuntu no sistema de arquivos overlayfs do kernel...

CVE-2023-36085_SISQUALWFM-Host-Header-Injection

CVE-2023-36085 Vulnerabilità di Host Header Injection in SISQUALWFM Questo repository contiene informazioni relative a una vulnerabilità di host header injection scoperta in SISQUALWFM versione 7.1.319.103, che consente a un attaccante di manipolare i collegamenti delle pagine web o reindirizzare...

ansible_CVE-2016-5195_check

Descrizione Playbook per testare la vulnerabilità dirty cow CVE-2016-5195. Dipendenze utente locale sul sistema con privilegi sudo Esecuzione root@kitploit: ansible-playbook -i host, check.yml -u jondoe -k -K Collegamenti http://dirtycow.ninja...