dnspooq

dnspooq DNSpooq PoC - avvelenamento della cache dnsmasq CVE-2020-25686, CVE-2020-25684, CVE-2020-25685 Solo per scopi educativi Requisiti Docker compose Docker Exploit Avvia i contenitori $ docker-compose up -d Esegui exploit.py $ docker-compose exec attacker bash bash-5.0 python exploit.py...

NeuVector - Information Disclosure

NeuVector through 5.4.9 contains an information disclosure vulnerability caused by missing authentication and cached sensitive data in the manager /network/graph API, letting remote attackers access sensitive information, exploit requires no special privileges. id: CVE-2026-25703 info: name:...

redsnarf

. \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and domain controllers...

CVE-2025-14269

CVE-2025-14269 È stato scoperto un problema di sicurezza nella versione in-cluster di Headlamp in cui utenti non autenticati potrebbero essere in grado di riutilizzare credenziali memorizzate nella cache per accedere alle funzionalità di Helm tramite l'interfaccia utente di Headlamp. I cluster...

mscache

mscache uno strumento per manipolare le credenziali della cache di dominio DCC nel registro di Windows, basato principalmente sul lavoro di mimikatz e impacket requisiti python2 pycrypto passlib impacket esempio python mscache.py --security security --system system dumping domain cached credentia...

go-secdump

go-secdump Description Package go-secdump is a tool built to remotely extract hashes from the SAM registry hive as well as LSA secrets and cached hashes from the SECURITY hive without any remote agent and without touching disk. The tool is built on top of the library go-smb and use it to...

CVE-2018-7600

CVE-2018-7600 - Esecuzione remota di codice in Drupal 7 Un'implementazione in Rust dell'exploit CVE-2018-7600 che prende di mira installazioni Drupal 7 vulnerabili = 7.57. Questa CLI riproduce il seguente flusso PoC: avvelena un form renderizzabile in cache tramite il percorso user/password, estr...

msi-search

MSI Search Windows memorizza nella cache i file MSI in C:\Windows\Installer\ con nomi di file casuali composti da lettere e numeri seguiti dall'estensione ".msi". Questo strumento semplifica il compito degli operatori red team e dei team di sicurezza di identificare quali file MSI corrispondono a...

bind9.16 security, bug fix, and enhancement update

32:9.16.23-0.22-16 - Backport 'Do not use headerprev in expirelruheaders' from upstream. 32:9.16.23-0.22-15 - Reenable unit tests during build 32:9.16.23-0.22.14 - Prevent assertion failure in dns64 mode with break-dnssec yes CVE-2026-19666 - Prevent crash on wildcard responses containing both NS...

Oracle Linux 9 : bind9.18 (ELSA-2026-75578)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-75578 advisory. - Prevent assertion failure in dns64 mode with break-dnssec yes CVE-2026-19666 - Prevent memory leak on following HTTPS/SVCB RR CVE-2026-81563 - Preve...

CVE-2026-106037

Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the Store REST service, which binds to 0.0.0.0 without authentication on any route. Unauthenticated attackers can call routes such as /api/get, /api/put, /api/removeall and /api/mount to read cached KV data with user...

CVE-2026-106037 Mooncake through 0.3.13.post1 Missing Authentication in Store REST Service

Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the Store REST service, which binds to 0.0.0.0 without authentication on any route. Unauthenticated attackers can call routes such as /api/get, /api/put, /api/removeall and /api/mount to read cached KV data with user...

CVE-2026-106037

Versions of Mooncake through 0.3.13.post1 are affected by a missing authentication vulnerability in the Store REST service . The service binds to 0.0.0.0 without requiring authentication on any route. This allows unauthenticated attackers to access specific endpoints, including /api/get , /api/pu...

CVE-2026-106037 Mooncake through 0.3.13.post1 Missing Authentication in Store REST Service

Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the Store REST service, which binds to 0.0.0.0 without authentication on any route. Unauthenticated attackers can call routes such as /api/get, /api/put, /api/removeall and /api/mount to read cached KV data with user...

PT-2026-106741

Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the Store REST service, which binds to 0.0.0.0 without authentication on any route. Unauthenticated attackers can call routes such as /api/get, /api/put, /api/remove all and /api/mount to read cached KV data with use...

CVE-2022-28368-handler

CVE-2022-28368-handler Questo repository contiene uno script Python che gestisce la maggior parte dell'exploit del font cache di dompdf CVE-2022-28368, tutto ciò che devi fare è creare la richiesta. Fornirà anche una stringa trigger per avviare l'exploit : Utilizzo usage: CVE-2022-28368.py -h -d...

Astra Linux – Vulnerability in Firefox

One phishing tactic on the internet involves providing a link with HTTP Auth. For example, it might look like “https://[email protected]”. To mitigate this type of attack, Firefox will display a warning dialog box. However, this warning dialog would not be shown if evil.com used a...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ovl: fixed null pointer dereference in ovlgetaclrcu The following processes are involved: P1 P2 pathopenat linkpathwalk maylookup inodepermissionrcu ovlpermission aclpermissioncheck checkacl getcachedaclrcu ovlget inodeacl...

CVE-2026-97637

The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and including, 3.1.2. The vulnerability exists because the required PI-Media/json-api parent plugin caches controller dispatch results in transients keyed sole...

EUVD-2026-91259

The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and including, 3.1.2. The vulnerability exists because the required PI-Media/json-api parent plugin caches controller dispatch results in transients keyed sole...