bluefire-sharepoint-cve-2025-53770

🔐 Bluefire Redteam – Toolkit zur Erkennung und Behebung von SharePoint CVE-2025-53770 Dieses Open-Source-Toolkit bietet Sicherheitsteams kampferprobte Skripte zur Erkennung, Bewertung und Behebung der kritischen SharePoint Zero-Day-Schwachstelle CVE-2025-53770 CVSS 9.8 – derzeit wird sie in freie...

CVE-2025-49113-nuclei-template

Template di rilevamento vulnerabilità Nuclei - CVE-2025-49113 - Esecuzione di codice remoto post-autenticazione in Roundcube ≤ 1.6.10 ID CVE: CVE-2025-49113 Gravità: Critica CVSS 10.0 Scoperto da: Kirill Firsov FearsOff Data di divulgazione: 1 giugno 2025 Corretto in: Roundcube 1.6.11 / 1.5.10 LT...

CVE-2021-24884

CVE-2021-24884 XSS2RCE no Formidable 4.09.04 O Formidable 4.09.04 permitia a injeção de certas tags HTML como , , , e . Isso poderia permitir que um atacante remoto não autenticado explorasse uma injeção de HTML ao injetar um link malicioso. A injeção de HTML pode enganar usuários autenticados pa...

Flink_RCE

Apache Flink Web Dashboard: Unautorisierter Zugriff und Upload einer schädlichen JAR-Datei führen zu Remote-Code-Ausführung msf nc Python-Verwendung: python 02-Flink.py http://10.10.20.100:8081 nc.jar...

CVE-2025-55182-RCE-shell

CVE-2025-55182-RCE-shell Burp Suite/antsword - Shell interattiva dirottamento HTTP + POST + AES-256-CBC/BASE64 Rilevamento -dnslog Rilevamento senza output DNSLog Nuclei -poc Rilevamento Echo di vulnerabilità Sfruttamento -exp Shell interattiva echo base64 -exp2 Shell interattiva dirottamento HTT...

cve-2023-30253

CVE-2023-30253 विवरण Dolibarr 17.0.1 से पहले के संस्करण में, एक प्रमाणित उपयोगकर्ता अपरकेस हेरफेर के माध्यम से दूरस्थ कोड निष्पादन की अनुमति देता है: इंजेक्ट किए गए डेटा में ?PHP को ?php के बजाय उपयोग करना। दस्तावेज़ीकरण CVE-2023-30253 GitHub Advisory: GHSA-9wqr-5jp4-mjmh सेटअप root@kitploit: git...

CVE-2026-74997

A flaw was found in Roundcube Webmail. The cmdlearn driver of the markasjunk plugin is vulnerable to remote code execution via crafted placeholder replacement values...

Awesome-CVE-2021-44228

Awesome-CVE-2021-44228 Eine kuratierte Liste großartiger Repos zu CVE-2021-44228. PoC tangxiaofeng7 https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce christophetd https://github.com/christophetd/log4shell-vulnerable-app jas502n https://github.com/jas502n/Log4j2-CVE-2021-44228...

CVE-2023-27350

CVE-2023-27350 POC per CVE-2023-27350 che colpisce PaperCut MF/NG Versioni Affette 'PaperCut MF o NG versione 8.0 o successive escluse le versioni corrette su tutte le piattaforme OS.' Riepilogo Questo POC utilizza una vulnerabilità di bypass dell'autenticazione concatenata con l'abuso della...

CVE-2023-21716-POC

Storia Nel febbraio 2023, Microsoft ha corretto una vulnerabilità critica in Microsoft Word, identificata come CVE-2023-21716 con un punteggio CVSS di 9.8, che poteva consentire agli aggressori di eseguire codice remoto senza autenticazione. Questa vulnerabilità interessava anche il riquadro di...

CVE-2024-23222-Coruna-Exploit-Kit-Deobfuscated

🏴‍☠️ Coruna iOS Exploit Kit: Ricerca su CVE-2024-23222 📌 Panoramica Questo repository contiene un'analisi tecnica completa e una ricerca di deoffuscazione del Coruna iOS Exploit Kit. La ricerca si concentra sulla documentazione di come la catena di exploit prenda di mira CVE-2024-23222 — una...

CVE-2026-40877

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to PHP object injection in the user preference functionality, which can lead to remote code execution. This issue has been fixed in version 3.2.3...

CVE-2025-55182-PoC

⚡ React2Shell Exploit PoC CVE-2025-66478 Esecuzione remota di codice RCE su Next.js tramite inquinamento del prototipo nei Server Components 🕵️‍♂️ Panoramica Questo repository contiene una Prova di Concetto PoC per CVE-2025-66478 indicata anche come CVE-2025-55182 in alcuni contesti, una...

CVE-2024-10629

CVE-2024-10629 GPX Viewer = 2.2.8 - Authentifiziert Abonnent+ Beliebige Dateierstellung Beschreibung: Das GPX Viewer-Plugin für WordPress ist anfällig für die Erstellung beliebiger Dateien aufgrund einer fehlenden Berechtigungsprüfung und Dateityp-Validierung in der Funktion gpxvfileupload in all...

CVE-2026-40877 Combodo iTop: PHP Object Injection Leading to Remote Code Execution on user preferences

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to PHP object injection in the user preference functionality, which can lead to remote code execution. This issue has been fixed in version 3.2.3...

CVE-2026-40877 Combodo iTop: PHP Object Injection Leading to Remote Code Execution on user preferences

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to PHP object injection in the user preference functionality, which can lead to remote code execution. This issue has been fixed in version 3.2.3...

CVE-2026-40877

Combodo iTop , a web-based IT service management tool, is vulnerable to PHP object injection in its user preference functionality prior to version 3.2.3 , which can lead to remote code execution . The attack vector is network-based with low complexity and requires low privileges and user interact...

CVE-2025-67435-PoC

CVE-2025-67435 शोधकर्ता : Chowdhury Faizal Ahammed PluckCMS Zip Slip दूरस्थ कोड निष्पादन भेद्यता रिपोर्ट कार्यकारी सारांश यह रिपोर्ट PluckCMS में पाई गई एक गंभीर सुरक्षा भेद्यता का दस्तावेजीकरण करती है जो प्रमाणित हमलावरों को Zip Slip आक्रमण वेक्टर के माध्यम से दूरस्थ कोड निष्पादन प्राप्त करने की...

CVE-2026-39975 Combodo iTop: Remote code execution using external auth variable value

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, unauthenticated users could delete the .readonly file on iTop instances, leading to code execution. This file, created during the setup process, prevents users from performing write actions. This issue has been fixed in versi...

CVE-2026-39975 Combodo iTop: Remote code execution using external auth variable value

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, unauthenticated users could delete the .readonly file on iTop instances, leading to code execution. This file, created during the setup process, prevents users from performing write actions. This issue has been fixed in versi...