CVE-2026-65641

A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account...

Honeypot-Project

Progetto Honeypot OWASP L'obiettivo del Progetto Honeypot OWASP è identificare attacchi emergenti contro applicazioni web e segnalarli alla comunità, al fine di facilitare la protezione contro tali attacchi mirati. Basato sul precedente Progetto OWASP/WASC Distributed Web Honeypots...

CVE-2025-61229

CVE-2025-61229 Descrição Do blog do desenvolvedor: Scripts shell Before/After definíveis pelo usuário são executados com privilégios elevados, com as permissões de Full Disk Access Acesso Total ao Disco do TCC do SuperDuper. Como esses scripts shell são referenciados pelos arquivos de configuraçõ...

ad-autopwn

AD AutoPwn Null-Authentifizierung zu Domain-Administrator — Automatisierte Active-Directory-Angriffskette Ein vollautomatisiertes Penetrationstest-Tool, das 25+ Angriffstechniken zu einer Kette verknüpft, um Active-Directory-Umgebungen zu kompromittieren. Entwickelt für autorisierte...

CVE-2021-36630

CVE-2021-36630 I dispositivi della serie SmartZone di Ruckus presentano rischi per la sicurezza. Dopo aver notificato il produttore, hanno organizzato attivamente personale tecnico per condurre indagini. Durante questo periodo, abbiamo anche fornito più volte suggerimenti di sicurezza e metodi di...

CVE-2025-65354

CVE-2025-65354 — Vulnerabilità di SQL Injection Riepilogo Esiste una vulnerabilità di SQL Injection nell'applicazione event-management PuneethReddyHC versione 1.0 a causa di una gestione impropria degli input. Tipo di vulnerabilità Iniezione SQL Componente interessato Endpoint:...

cloudfoxable

Inizia a fare hacking: CloudFoxable Leggi il blog per maggiori dettagli: Presentazione di CloudFoxable: una sandbox gamificata per l'hacking cloud Background CloudFox aiuta i penetration tester e i professionisti della sicurezza a individuare percorsi di attacco sfruttabili nell'infrastruttura...

omnisci3nt

⭐️ Se trovi utile questo repository GitHub, considera di dargli una stella! ⭐️ 🕵️‍♂️ Omnisci3nt: Toolkit Unificato per la Ricognizione Web Omnisci3nt è un framework completo di ricognizione web e intelligence progettato per professionisti della sicurezza informatica, hacker etici e ricercatori di...

CVE-2025-32463

Sudo Version 1.9.17 hat eine kritische Schwachstelle CVE-2025-32463, die es lokalen Benutzern erlaubt, Root-Zugriff zu erlangen, indem sie die chroot-Option ausnutzen, was zu ernsthaften Sicherheitsrisiken führen kann. Benutzern wird empfohlen, auf Version 1.9.17p1 oder neuer zu aktualisieren, um...

POC_CVE-2025-29943_Write-what-where-Condition

StackWarp: PoC für CVE-2025-29943 Proof-of-Concept für die Hardware-Sicherheitslücke StackWarp CVE-2025-29943 bei AMD-Prozessoren. Dieser Fehler erlaubt einem Angreifer mit Administratorrechten auf einem Host Hypervisor, die Konfiguration der CPU-Pipeline zu manipulieren, um den Stack-Pointer...

bind: BIND: Denial of Service via specially crafted DNS messages

A flaw was found in the bind component, specifically within the named daemon. This vulnerability allows a remote attacker to send specially crafted Domain Name System DNS messages. These messages, which use unusual classes or meta-classes, can trigger assertion failures in the named daemon when...

bind: bind9: Potential memory usage beyond configured limits

A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the...

EUVD-2026-66669

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning...

http2-security-lab

🦣 TuskMads Laboratorio di Sicurezza HTTP/2 Un laboratorio di simulazione e difesa degli attacchi HTTP/2 costruito da zero in puro Python. Cosa Fa Simula 3 attacchi HTTP/2 reali contro un server vulnerabile, poi dimostra 5 livelli di difesa che bloccano tutti e 3 su un server protetto. Attacchi...

EUVD-2026-66656

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

EUVD-2026-66641

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...

CVE-2020-15878

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the information from the LibreNMS database via a SQL injection in the address parameter in the /ajaxtable.php API endpoint...

CVE-2026-79288

A flaw was found in Google Chrome's Autofill feature on Android. Improper input validation allows a remote attacker to obtain sensitive information by tricking a user into visiting a specially crafted HTML page. This vulnerability could lead to the exposure of sensitive user data...

CVE-2026-79077

A flaw was found in WebProtect in Google Chrome. This incorrect authorization vulnerability allows a remote attacker to bypass system access restrictions. By crafting a malicious HTML page, the attacker can exploit this flaw to gain unauthorized access to restricted parts of the system...

CVE-2026-79223

A flaw was found in Chromium. An integer overflow vulnerability allows a remote attacker to read sensitive memory within the sandbox. This can be exploited by tricking a user into opening a specially crafted file, potentially leading to the disclosure of confidential information...