CVE-2023-51802

CVE-2023-51802 Simple Student Attendance System v.1.0 - attendancereport में क्रॉस-साइट स्क्रिप्टिंग XSS कमजोरियाँ विवरण : Simple Student Attendance System v.1.0 में क्रॉस साइट स्क्रिप्टिंग कमजोरी एक दूरस्थ हमलावर को attendancereport घटक में "page" या "classmonth" पैरामीटर में एक क्राफ्टेड पेलोड ...

CVE-2017-7269

PT GenWebDavIISExploit é uma ferramenta PoC que demonstra um exploit para uma vulnerabilidade conhecida no componente WebDAV do IIS6. Esta ferramenta foi projetada para fins educacionais e de pesquisa, a fim de mostrar como a vulnerabilidade pode ser explorada para executar código arbitrário em u...

CVE-2026-66109

A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege...

CVE-2026-69665

SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege...

CVE-2026-68959

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

CVE-2026-68062

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

CVE-2026-68960

A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has th...

[SECURITY] [DLA 4754-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4754-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 25, 2026 https://wiki.debian.org/LTS -...

CVE-2026-22005-OAuth-2.0-Device-Code-Phishing-Short-Interval-

CVE-2026-22005 – Phishing del Codice Dispositivo OAuth 2.0 Intervallo Breve Codice Programma Python root@kitploit: devicecodeserver.py - Authorization server with too-fast polling import time, secrets codes = @app.route'/device/code' def devicecode: code = secrets.tokenurlsafe16 codescode =...

CVE-2019-9193

EN GenPostgresRCEExploit هي أداة PoC مصممة لاستغلال ثغرة تنفيذ التعليمات البرمجية عن بُعد RCE التي تتطلب مصادقة في إصدارات معينة من PostgreSQL 9.3 - 11.7. تتيح للمستخدمين الموثّقين تنفيذ أوامر النظام على خادم قاعدة بيانات PostgreSQL المعرّض للثغرة CVE-2019-9193. الميزات استغلال RCE : تنفيذ أوامر...

CVE-2024-9932

CVE-2024-9932 Wux Blog Editor = 3.0.0 - Caricamento arbitrario di file non autenticato Description: Il plugin Wux Blog Editor per WordPress è vulnerabile a caricamenti arbitrari di file a causa di una validazione insufficiente del tipo di file nella funzione 'wuxbtinsertImageNew' nelle versioni...

CVE-2023-38831-PoC

CVE-2023-38831 PoC Dieses Repository ist nur ein Proof-of-Concept für CVE-2023-38831 , eine Zero-Day-Schwachstelle in WinRAR RARLabs WinRAR vor Version 6.23 ermöglicht Angreifern die Ausführung beliebigen Codes, wenn ein Benutzer versucht, eine harmlose Datei innerhalb eines ZIP-Archivs anzuzeige...

second-order

Second Order Examina aplicações web em busca de takeover de subdomínio de segunda ordem ao rastrear a aplicação e coletar URLs e outros dados que correspondem a certas regras, ou respondem de uma certa forma. Instalação A partir do binário Baixe um binário pré-compilado da página de releases e...

PrintNightmare-CVE-2021-1675-CVE-2021-34527

CVE-2021-1675 / CVE-2021-34527 Implementazione Impacket del PoC PrintNightmare creato originariamente da Zhiniang Peng @edwardzpeng e Xuefeng Li @lxf02942370 Testato su un Domain Controller 2019 completamente aggiornato Esegui DLL dannose in remoto o localmente Aggiornamento della patch Microsoft...

CVE-2019-9978_Exploit

CVE-2019-9978 Exploit Social WarFare Plugin =3.5.2 Remote-Code-Ausführung...

CVE-2026-44825-Apache-Solr-Scanner

CVE-2026-44825 Apache Solr Scanner Questo repository contiene uno scanner basato su Go per rilevare e testare istanze Apache Solr che potrebbero essere affette da CVE-2026-44825, relativa a condizioni di Remote Code Execution RCE tramite Velocity Template. Lo strumento può scansionare un singolo...

CVE-2024-22120-RCE-with-gopher

Utilizzo root@kitploit: python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime Riepilogo Questo exploit è stato creato per sfruttare una XXE XML External Entity. Attraverso di essa, ho letto il codice backend del servizio web e ho trovato un endpoint dove potevo usare gopher per...

CVE-2023-30253-PoC

CVE-2023-30253 CVE-2023-30253 PoC Descrizione Questa è la mia PoC per la CVE-2023-30253 Dolibarr 17.0.0 PHP Code Injection: quando il plugin CMS Website core è abilitato, un attaccante autenticato può ottenere l'esecuzione remota di comandi tramite iniezione di codice PHP, bypassando le restrizio...

CVE-2021-44909

CVE-2021-44909 Título do Exploit: orangescrum 1.8.0 - Execução Remota de Comandos RCE não autenticado Data: 03/12/2021 Homepage do Fornecedor: https://www.orangescrum.org/ Link do Software: https://github.com/Orangescrum/orangescrum Versão: 1.8.0 Testado em: Windows 10 x64 usando XAMPP 7.4.23,...

TrojanSourceFinder

TrojanSourceFinder TrojanSourceFinder aiuta gli sviluppatori a rilevare la vulnerabilità "Trojan Source" nel codice sorgente. La vulnerabilità Trojan Source permette a un attaccante di far apparire innocuo del codice malevolo. In generale, l'attaccante cerca di ingannare facendo passare il suo...