CVE-2023-38041-POC

CVE-2023-38041-POC Ivanti Pulse Secure Client Connect elevazione dei privilegi locale CVE-2023-38041 Prova di concetto...

EUVD-2026-96037

The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to Authentication Bypass via Unverified Password Change in all versions up to, and including, 2.9.0 The adfoinultimatememberacsenddata function, which powers the Ultimate Member "Update Profile Field"...

CVE-2025-0282

PoC per CVE-2025-0282 Stack Buffer Overflow Remoto Non Autenticato nei Prodotti Ivanti Panoramica Questa proof-of-concept dimostra lo sfruttamento di CVE-2025-0282, una vulnerabilità critica che colpisce: Ivanti Connect Secure Ivanti Policy Secure Ivanti Neurons for ZTA gateways Basata sulla...

Ivanti-Connect-Secure-Logs-Parser

Parsing dei Log di Ivanti Secure Connect Questo repository fornisce uno script Python progettato per convertire i file di log .vc0 di Ivanti Secure Connect in formato CSV, per l'analisi forense digitale e la risposta agli incidenti. In particolare, il parser: Estrae i timestamp dai file di log di...

CVE-2023-43208-mirth-connect-rce-poc

Vulnerabilità RCE in Mirth Connect CVE-2023-37679 e CVE-2023-43208 Questo script exploit e PoC sono stati scritti per un'analisi approfondita delle CVE su vsociety. CVE-2023-43208 è un grave bug di sicurezza in NextGen Mirth Connect, uno strumento utilizzato da ospedali e cliniche per condividere...

CVE-2025-0282

CVE-2025-0282 Ivanti Connect Secure, Policy Secure e ZTA Gateways - CVE-2025-0282 Comando: python3 CVE-2025-0282.py urlsIvanti.txt python3 CVE-2025-0282.py TARGET Riferimento:...

CVE-2026-62367

Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider emailfallback option on an OpenID Connect provider, Vikunja links an SSO login to a pre-existing local username+password account using only the email cla...

CVE-2026-62367 Vikunja: OIDC email-fallback account linking ignores email_verified, enabling local-account takeover

Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider emailfallback option on an OpenID Connect provider, Vikunja links an SSO login to a pre-existing local username+password account using only the email cla...

CVE-2021-22893

CVE-2021-22893 Vulnerabilità RCE di Pulse Connect Secure CVE-2021-22893 Shodan : https://www.shodan.io/search?query=http.component%3A%22pulse+secure%22...

mirth-connect-security-poc

PoC delle vulnerabilità di NextGen Connect 4.5.2 Exploit proof-of-concept funzionanti per tre vulnerabilità raggiungibili via rete in NextGen Connect Mirth Connect 4.5.2. Gli harness eseguono l'immagine container ufficiale, creano solo la configurazione del canale necessaria al finding, eseguono...

CVE-2026-23744-PoC

CVE-2026-23744-PoC Haftungsausschluss: Dieser Proof-of-Concept wird ausschließlich für autorisierte Sicherheitsforschung, Bildungszwecke und kontrollierte Laborumgebungen z. B. HTB, CTF oder interne Penetrationstests mit ausdrücklicher schriftlicher Zustimmung bereitgestellt. Die unbefugte Nutzun...

MAL-2026-17389 Malicious code in bungoma (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

CVE-2026-107815

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset...

CVE-2026-107815

A flaw was found in MariaDB. An authenticated user with permission to use the CONNECT storage engine can exploit an incorrect boundary check when handling DOS table types to write beyond the allocated stack buffer. This flaw could lead to arbitrary code execution or cause the database server to...

CVE-2026-107815

The MariaDB server (versions 10.6.1 through 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2) contains a one-byte out-of-bounds (OOB) write in the CONNECT engine 's DOS table type. The vulnerability is caused by an incorrect boundary check , allowing an attacker-controlled offset to trigger...

CVE-2026-107815 MariaDB: one byte OOB write in DOS tables of the CONNECT engine

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset...

CVE-2022-26269

CVE-2022-26269 L'app Suzuki connect viene utilizzata per ottenere informazioni sull'auto come carburante, stato di accensione, posizione attuale, stato della cintura di sicurezza, ecc. Nell'auto Ignis, variante Zeta, se i messaggi CAN del carburante e lo stato della cintura di sicurezza vengono...

ivantiunlocker

ivantiunlocker Previeni CVE-2025-22457 e altri problemi di sicurezza con Juniper/Ivanti Secure Connect SSL VPN Molti problemi di sicurezza hanno riguardato i dispositivi SSL VPN di recente. Non puoi più sentirti al sicuro. E poi c'è CVE-2025-22457 ! Leggi la storia dietro :...

CVE-2025-0282-Ivanti-exploit

CVE-2025-0282-Ivanti-exploit CVE-2025-0282 è una vulnerabilità critica trovata in Ivanti Connect Secure, che consente l'esecuzione remota di comandi RCE tramite uno sfruttamento di buffer overflow. Questa vulnerabilità consente agli attaccanti di caricare file dannosi ad esempio, web shell ed...

midonescanner-android

MidONe Scanner اسکنر حرفه‌ای آی‌پی تمیز CDN · CLOUDFLARE · DNS ⬇️ دانلود APK · 🖥️ دانلود Windows · 📣 کانال تلگرام 🔍 چرا MidONe Scanner؟ بیشتر ابزارهای اسکن IP فقط یک ping ساده می‌زنند — عددی که هیچ ربطی به سرعت واقعی اتصال ندارد. MidONe Scanner متفاوت است: داده واقعی دانلود می‌کند. سرعتی که اپ نشان...