cve-2020-0688

cve-2020-0688 cve-2020-0688 Accedere con un utente che ha un privilegio sull'indirizzo email non è nulla di cui preoccuparsi. Ottieni - VIEWSTATEGENERATOR dal sorgente della pagina Ottieni - il valore del cookie ASP.NETSessionId per il valore di viewstateuserkey Scarica YSO qui root@kitploit:...

silverboxcc

Malware Android sottoposto a reverse engineering chiamato Red Alert V2.0. Al momento dell'analisi, non erano più in esecuzione server C2, quindi non siamo stati in grado di osservare alcun traffico tra il malware e il server C2. Così abbiamo ricostruito il protocollo C2 e scritto questo pannello ...

CVE-2023-41362_MyBB_ACP_RCE

CVE-2023-41362 - MyBB ACP RCE Exploit für CVE-2023-41362 Blogbeitrag: https://blog.sorcery.ie/posts/mybbacprce...

CPLDCOMTrigger

CPLDCOMTrigger Descrizione Uno script Python che dipende dagli script Impacket per attivare il caricamento di un file .cpl in memoria utilizzando un oggetto DCOM. Il percorso del file CPL deve essere già aggiunto al registro. Lo script utilizza la funzione Open nell'interfaccia IOpenControlPanel...

CPLDCOMTrigger

CPLDCOMTrigger Beschreibung Ein Python-Skript, das auf Impacket-Skripten basiert, um das Laden einer .cpl-Datei in den Speicher mittels eines DCOM-Objekts auszulösen. Der CPL-Dateipfad muss bereits in der Registry vorhanden sein. Das Skript verwendet die Open-Funktion im...

SecurityNotFound

Webshell 404 Pagina Non Trovata 📼 Clonami! Clona o scarica il progetto: root@kitploit: git clone --depth=1 https://github.com/CosasDePuma/SecurityNotFound.git 📦 "Installazione" Il file src/404.php dovrebbe essere situato sul server di destinazione e deve avere la capacità di eseguire file .php...

AhMyth-Android-RAT

AhMyth Android Rat Beta-Version Es besteht aus zwei Teilen : Serverseite : Desktop-Anwendung basierend auf dem Electron-Framework Kontrollzentrum Clientseite : Android-Anwendung Backdoor Erste Schritte Sie haben zwei Möglichkeiten, es zu installieren 1 Aus dem Quellcode Voraussetzung : Electron u...

cyberpanel

🛠️ CyberPanel Painel de Controlo de Alojamento Web alimentado por OpenLiteSpeed, concebido para simplificar a gestão de alojamento. 🔧 Funcionalidades e Serviços 🔐 Diferentes Níveis de Acesso de Utilizador via ACLs. 🌌 SSL Automático para sites seguros. 💻 Servidor FTP para transferências de...

EUVD-2026-39432

3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation...

CVE-2026-78416 Authenticated RCE via `condition.config` JSON cleanse bypass

Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in control panel element-search condition handling. A JSON cleanse bypass in condition.config allows Yii behavior/event configuration keys to be interprete...

CVE-2026-36670

CVE-2026-36670 A time-based blind SQL injection exploit for the OpenSIPS Control Panel. This exploit abuses an authenticated sql injection vulnerability within the aliasmanagement.php module of opensips. The table GET parameter is improperly sanitized, allowing an attacker to inject a crafted...

CVE-2026-45128

MyBB is free and open source forum software. Prior to 1.8.40, the ACP Users View Manager module does not validate requests correctly, allowing same-site attackers to change a victim administrator's default user list view by embedding a specially crafted URL. The Set as Default control named...

CVE-2026-45119

MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP UTF-8 Conversion module does not validate certain requests correctly, allowing same-site attackers to alter table encoding and deny service with a specially crafted URL. The do=all control flow in...

CVE-2026-45119

MyBB versions prior to 1.8.40 expose a CSRF flaw in the Admin CP UTF-8 Conversion module. The do=all flow in admin/modules/tools/system_health.php performs ALTER TABLE operations and fulltext index rebuilds on GET requests without request verification, allowing same-site attackers to alter table ...

CVE-2026-45126

MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP Security Questions module does not validate the anti-CSRF token correctly, allowing same-site attackers to enable or disable registration challenge questions with a specially crafted URL. The controller processes GET...

PT-2026-77181

MyBB is free and open source forum software. Prior to 1.8.40, the ACP Users View Manager module does not validate requests correctly, allowing same-site attackers to change a victim administrator's default user list view by embedding a specially crafted URL. The Set as Default control named set...

CVE-2026-72787

Craft CMS versions before 5.10.8 contain a stored cross-site scripting vulnerability in the control panel where draft names are rendered without HTML encoding in element chips and cards. A low-privilege user who can create element drafts can inject malicious JavaScript that executes in the browse...

CVE-2026-72787 Craft CMS 5.0.0-RC1 before 5.10.8 Stored XSS via Draft Name

Craft CMS versions before 5.10.8 contain a stored cross-site scripting vulnerability in the control panel where draft names are rendered without HTML encoding in element chips and cards. A low-privilege user who can create element drafts can inject malicious JavaScript that executes in the browse...

EUVD-2026-57447

Craft CMS versions before 5.10.8 contain a stored cross-site scripting vulnerability in the control panel where draft names are rendered without HTML encoding in element chips and cards. A low-privilege user who can create element drafts can inject malicious JavaScript that executes in the browse...

CVE-2026-72787

CVE-2026-72787 affects Craft CMS versions before 5.10.8. A stored XSS exists in the control panel where draft names are rendered without HTML encoding in element chips and cards. A low-privilege user who can create element drafts can inject malicious JavaScript that executes in the browser of hig...