amasty-chekout-POC-rce

CVE-2026-53787 - Amasty Order Attributes Caricamento File Non Autenticato Descrizione CVE-2026-53787 è una vulnerabilità critica di caricamento file arbitrario non autenticato nell'estensione Amasty Order Attributes per Magento 2 nelle versioni precedenti alla 4.0.0. La vulnerabilità consente agl...

https-nj.gov---CVE-2018-14042

https-nj.gov---CVE-2018-14042 Report di vulnerabilità del sito ufficiale del New Jersey In Bootstrap precedente alla versione 4.1.2, è possibile XSS nell'attributo principale collapse data. L'attributo data-target, l'attributo data-parent e l'attributo data-container sono vulnerabili ad attacchi...

CVE-2024-40635_POC

CVE-2024-40635POC Codice Proof of Concept per dimostrare la vulnerabilità CVE-2024-40635 Dati raccolti da: https://nvd.nist.gov/vuln/detail/CVE-2024-40635 1. Importazione della libreria Docker root@kitploit: import docker Questo importa la libreria Python docker, che consente di interagire con...

CVE-2017-6913

CVE-2017-6913 Esta é uma vulnerabilidade que encontrei no webmail do open-xchange OX App Suite https://www.open-xchange.com/ há algum tempo. Detalhes da vulnerabilidade O webmail era vulnerável a um XSS armazenado ao abrir um e-mail, devido aos atributos de evento da tag HTML time não serem...

automato

automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...

CVE-2024-30088

CVE-2024-30088 Bug: Il bug si trova all'interno della funzione AuthzBasepCopyoutInternalSecurityAttributes quando il kernel copia la struttura AUTHZBASEPSECURITYATTRIBUTESINFORMATION del token corrente nello spazio utente, la quale ha una struttura come questa: root@kitploit: //0x30 bytes sizeof...

galer

galer root@kitploit: /' '/'' | | /'' ' | || | | | '\ ','\ | /' @dwisiswant0 A fast tool to fetch URLs from HTML attributes by crawl-in. Inspired by the @omespino Tweet, which is possible to extract src, href, url and action values by evaluating JavaScript through Chrome DevTools Protocol...

galer

galer root@kitploit: /' '/'' | | /'' ' | || | | | '\ ','\ | /' @dwisiswant0 Uno strumento veloce per ottenere URL dagli attributi HTML tramite crawling. Ispirato dal tweet di @omespino, che permette di estrarre i valori di src, href, url e action valutando JavaScript attraverso il protocollo...

CrushFTP < 10.5.1 - Unauthenticated Remote Code Execution

CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes. id: CVE-2023-43177 info: name: CrushFTP 10.5.1 - Unauthenticated Remote Code Execution author: iamnoooob,rootxharsh,pdresearch severity: critical description: | CrushFTP prior...

Magento 2 Amasty Order Attributes < 4.0.0 - Unauthenticated Arbitrary File Upload

Amasty Order Attributes for Magento 2 4.0.0 contains an unrestricted file upload vulnerability caused by lack of authentication and validation in the upload endpoint, letting unauthenticated attackers upload arbitrary files including PHP, enabling remote code execution or malware hosting. id:...

EUVD-2026-65304

A vulnerability has been found in cleverbrush framework and deep up to 4.4.0. This impacts the function deepExtend of the file libs/deep/src/deepExtend.ts. The manipulation leads to improperly controlled modification of object prototype attributes. Remote exploitation of the attack is possible. T...

CVE-2023-2640-32629

Ubuntu Privilege Escalation: CVE-2023-2640 und CVE-2023-32629 Dies ist eine lokale Privilege-Escalation-Schwachstelle, die bestimmte Ubuntu-Kernel betrifft. Sie ermöglicht es unprivilegierten Benutzern, privilegierte erweiterte Attribute auf eingehängten Dateien zu setzen, Sicherheitsprüfungen zu...

CVE-2020-17530

CVE-2020-17530 POC rapido per CVE-2020-17530. In Apache Struts versioni 2.0.0 - 2.5.25, una valutazione forzata di Object Graph Navigational Language OGNL sull'input grezzo dell'utente negli attributi dei tag può portare all'esecuzione remota di codice RCE. root@kitploit: $ python CVE-2020-17530....

CVE-2026-7465-Lab

CVE-2026-7465 - Laboratorio Locale Spectra Gutenberg Blocks Laboratorio Docker locale per analizzare e riprodurre CVE-2026-7465 nel plugin WordPress Spectra Gutenberg Blocks ultimate-addons-for-gutenberg. Il laboratorio confronta: vuln: Spectra 2.19.25 patched: Spectra 2.19.26 La prova è...

CVE-2026-46456

CVE-2026-46456 — camel-aws2-sqs Inbound Message-Attribute Header Injection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack| Hijacked sink| Demonstrated impact ---|---|---|---|--- Camel Spring Boot| camel-spring-boot/| Sprin...

kernel: net: openvswitch: reject oversized nested action attrs

A flaw was found in Open vSwitch in the Linux kernel. Improper handling of oversized nested action attributes can lead to a truncated length field, which could be exploited by a local attacker to alter kernel memory. This alteration might result in the disclosure of sensitive information or a loc...

CVE-2026-49452

A flaw was found in WeasyPrint, a tool designed to create PDF documents from web content. When processing untrusted HTML with presentational hints enabled, WeasyPrint embeds unescaped HTML attribute values directly into CSS declarations. This vulnerability allows a remote attacker to inject...

CVE-2026-10618

Hugo versions 0.93.0 through 0.165.0 are affected by a stored cross-site scripting vulnerability in the default fenced-code-block renderer. The root cause is in markup/internal/attributes/attributes.go: the New function converts attribute values from byte slices to strings before storage, bypassi...

CVE-2026-64531

🔥 CVE-2026-64531 — OVSwrap Corruzione della memoria Open vSwitch nel kernel Linux 🩸 Panoramica della vulnerabilità CVE-2026-64531 è una vulnerabilità di sicurezza che interessa il sottosistema di rete Open vSwitch OVS del kernel Linux. Il difetto risiede nella gestione degli attributi Netlink...

packj

Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...