purpleteam-orchestrator

orchestratore purpleteam Componente orchestratore di purpleteam - Attualmente in alpha Clona questo repository. cd nella directory root del repository ed esegui: root@kitploit: npm install Configurazione...

purpleteam-tls-checker

purpleteam-tls-checker Componente di controllo TLS di purpleteam...

purpleteam-server-scanner

purpleteam-server-scanner Componente di scansione server di purpleteam...

CVE-2016-3510

CVE-2016-3510...

CVE-2026-50979

A command injection vulnerability in the 'advanced/curl' component of Osbil Technology oPanel v1.19.50 and earlier allows authenticated attackers to execute arbitrary shell commands via the 'url' parameter...

CVE-2026-50979

Osbil Technology oPanel (v1.19.50 and earlier) contains a command injection vulnerability in the advanced/curl endpoint. The url parameter is not adequately sanitized before being passed to the system's curl execution routine. An authenticated attacker can bypass space restrictions using shell va...

PT-2026-83134

A command injection vulnerability in the 'advanced/curl' component of Osbil Technology oPanel v1.19.50 and earlier allows authenticated attackers to execute arbitrary shell commands via the 'url' parameter...

PT-2026-83300

Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection. Attackers on the same network can invoke PromoteRollout, AbortRollout, RestartRollout, SetRolloutImage, UndoRollout, and RetryRollout...

CVE-2026-50980

oPanel (a web hosting control panel) contains a Stored XSS in its DNS lookup/management component, affecting versions before v1.20.25 . The root cause is the lack of HTML encoding when DNS responses (specifically TXT records) are rendered in the panel's web interface. An attacker who controls a n...

CVE-2023-37190

CVE-2023-37190 — Issabel-PBX 4.0.0-6: Cross-Site Scripting XSS persistente 📋 Panoramica...

CVE-2026-37198

An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted GTP packet...

CVE-2026-30612

An issue in Time4 Popcorn for Windows = 6.2.1.18 and Time4Popcorn for MacOS = 6.2.1.17 and Time4Popcorn for Android = 3.5.0.173 allows a remote attacker to execute arbitrary code via the updater.exe for windows, PT.updd on MacOS components...

framework_base_AOSP10_r33_CVE-2021-39704

Dieses Repository hat keine README-Datei...

hostap

Questa non è la sede di sviluppo per hostap.git. Vedi il progetto upstream su https://w1.fi/...

EUVD-2026-67006

A vulnerability has been identified in Element maps-ng V47 All versions V47.12.3, Element maps-ng V48 All versions V48.11.3, Element maps-ng V49 All versions V49.16.1. The si-map component does not properly neutralize user-controllable input of the points property that is used to render the toolt...

CVE-2026-75898

CVE-2026-75898 — Componente Invoke di RAGFlow SSRF Server-Side Request Forgery CWE-918 nel componente "Invoke" del flusso agente di RAGFlow, prima della versione 0.26.3...

CVE-2025-24893

CVE-2025-24893...

EUVD-2026-66939

Editor PHP Object Injection in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-80581

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Ignore IPC errors for pipeline state change if the firmware state is crashed or the IPC has timed out. If the firmware has crashed the kernel still needs t...

CVE-2026-30612

Time4 Popcorn (Windows ≤ 6.2.1.18, macOS ≤ 6.2.1.17, Android ≤ 3.5.0.173) contains a vulnerability that allows a remote attacker to execute arbitrary code via the updater.exe component on Windows and the PT.updd component on macOS. The underlying root cause is not further detailed in the provided...