Geoserver-CVE-2023-25157

Exploit di SQL Injection in Geoserver Quest'anno è stata pubblicata una CVE per Geoserver con ID CVE-2023-25157. Ho visto questa vulnerabilità in uno dei miei progetti e ho provato a sfruttarla. Ed eccolo qui, l'exploit completo. In questa repo https://github.com/0x2458bughunt/CVE-2023-25157 puoi...

EternalBlueC

EternalBlueC La suite EternalBlue rifatta in C/C++ che include: Exploit MS17-010 include DoublePulsar Rilevatore di vulnerabilità EternalBlue/MS17-010 Rilevatore di DoublePulsar Caricamento DLL con DoublePulsar Caricamento shellcode con DoublePulsar Caricamento DLL con struttura SMB con...

Android-CVE-2026-43499

CVE-2026-43499 Detector Android-App, die die Kernel-Sicherheitslücke CVE-2026-43499 erkennt – eine Use-after-free in rtmutex, ausgelöst über futexrequeue. Sicherheitslücke | ---|--- CVE| CVE-2026-43499 Typ| Use-after-free Komponente| kernel/locking/rtmutex.c Auslöser| futexrequeue →...

ansible-role-log4shell

lucab85.ansiblerolelog4shell ========= Ruolo Ansible per scansionare host Linux target utilizzando lo script di rilevamento ufficiale Red Hat Log4j RHSB-2021-009 per Log4Shell CVE-2021-44228. Testato con Red Hat versione 1.3 del rilevatore 2022-01-10. Ansible Playbook Codice disponibile anche com...

cpanel-cve-41940-detector

cPanel IOC-Detektor für CVE-2026-41940 Schreibgeschützter IOC-Detektor für cPanel/WHM-Server, die möglicherweise von CVE-2026-41940 und damit verbundenen Aktivitäten nach einer Kompromittierung betroffen sind. Das Skript hilft einem Operator, .sorry-Ransomware-Indikatoren, MrRot13...

kubeeye

English | 中文 KubeEye is a cloud-native cluster inspection tool specifically designed for Kubernetes, capable of identifying issues and risks within the Kubernetes cluster based on custom rules. QuickStart Installation Download the installation package from Releases, which includes Helm chart, dem...

CVE-2021-21974_vuln_dectection

Rilevatore Vulnerabilità CVE-2021-21974 Uno strumento di sicurezza basato su Python per rilevare la vulnerabilità CVE-2021-21974 nelle implementazioni SLP Service Location Protocol, mirato specificamente ai sistemi VMware ESXi. Questo strumento esegue un rilevamento sicuro, non sfruttativo,...

doona

Doona - Network fuzzing tool .:: About ::. Doona is a fork of the Bruteforce Exploit Detector Tool BED. BED is a program which is designed to check daemons for potential buffer overflows, format string bugs etc. Doona is Australian for duvet. It adds a significant enough number of features/change...

CVE-2025-55182-Exploit-extension

RSC Fingerprint Detector Eine Chrome-Erweiterung zur Erkennung von React Server Components RSC - und Next.js App Router -Fingerabdrücken auf Webseiten. ⚠️ Wichtiger Hinweis Diese Erweiterung ist ausschließlich zu Bildungs- und Sicherheitsforschungszwecken bestimmt. Sie enthält Funktionen, die zum...

react2shell_detector

React2Shell Detector Scanner Heurístico para Vulnerabilidades de Componentes de Servidor React RSC — incluindo comportamento estilo React2Shell CVE-2025-55182 Visão Geral react2shelldetector.py é um scanner de segurança seguro e não invasivo projetado para detectar sistemas potencialmente exposto...

zeek-netsupport-detector

NetSupport Contexto https://unit42.paloaltonetworks.com/cortex-xdr-detects-netsupport-manager-rat-campaign/ PCAP de teste: https://app.any.run/tasks/b5d9853f-0dca-45ef-9532-83feeedcbf42 Exemplo: root@kitploit: $ zeek -Cr b5d9853f-0dca-45ef-9532-83feeedcbf42.pcap $ cat notice.log separator \x09...

bordair-detector

Bordair Detector Un rilevatore a due stadi per tentativi di prompt injection e jailbreak negli input LLM. Un gate regex smista la maggioranza facile del traffico senza toccare il modello; tutto ciò che è ambiguo passa a un classificatore DeBERTa-v3 quantizzato che gira in ONNX. Lo stesso motore...

nginx-ultimate-bad-bot-blocker

REPO| DIVENTA UNO SPONSOR ---|--- | Il tuo logo e il link al tuo dominio appariranno qui se diventi uno sponsor. Basta inviarmi un'email a [email protected] se desideri sponsorizzare questo progetto, dato che il Sudafrica non è ancora supportato dal programma sponsor di Github. | Aiutami a...

wp2shell-lab

Lab wp2shell e detector + PoC RCE pre-auth Un laboratorio autonomo, detector non distruttivo e proof-of-concept completo di RCE pre-autenticazione per wp2shell — la catena di vulnerabilità pre-autenticazione nel core di WordPress:...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: node-problem-detector, k8sgpt, amazon-cloudwatch-agent-operator, minio-operator, karma, trillian, cloud-sql-proxy, certificate-transparency, tempo, minio, mc, grafana, opentelemetry-collector, datadog-agent, jaeger, metrics-server, prometheus-pushgateway, keda,...

CVE-2026-71848

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen separated subtags. To...

GHSA-54FX-42GC-7VW4 Hono: Algorithmic Complexity DoS in Language Middleware

Summary The languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen-separated subtags. Details To implement progressive language-tag truncation, normalizeLanguage repeatedly calls parts.slice0...

Hono: Algorithmic Complexity DoS in Language Middleware

Summary The languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen-separated subtags. Details To implement progressive language-tag truncation, normalizeLanguage repeatedly calls parts.slice0...

CVE-2026-71848

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen separated subtags. To...

CVE-2026-71848 Hono: Algorithmic Complexity DoS in Language Middleware

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.0 to 4.12.33, the languageDetector middleware is vulnerable to algorithmic complexity denial of service when processing a crafted language tag containing a large number of hyphen separated subtags. To...