Get-RBCD-Threaded

Get-RBCD-Threaded Strumento per scoprire percorsi di attacco di Resource-Based Constrained Delegation in ambienti Active Directory Basato quasi interamente sui meravigliosi articoli "Wagging the Dog: Abusing Resource-Based Constrained Delegation to Attack Active Directory" di Elad Shamir e "A Cas...

CVE-2021-41773

CVE-2021-41773 Apache 2.4.49 Path Traversal Vulnerability Checker – Verificatore di vulnerabilità di Path Traversal Esempio Piattaforma Linux e Windows...

SharpML

SharpML SharpML è un proof of concept per il data mining di condivisioni file che utilizza Machine Learning in Python e C. Lo strumento è discusso in maggior dettaglio sul nostro blog qui, ma è riassunto anche di seguito: SharpML è uno strumento basato su C e Python che esegue una serie di...

CVE-2026-93883

The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phone' parameter in all versions up to, and including, 3.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

packages_apps_Nfc_AOSP10_r33_CVE-2021-0594

Questo repository non contiene un README...

onelogon

Onelogon: Compromissione degli account Active Directory tramite Netlogon Questo repository contiene il codice e i dati che accompagnano il nostro articolo Onelogon: Compromissione degli account Active Directory tramite Netlogon WOOT'26. 1. Contesto 2. Come citare 3. Struttura e configurazione...

OUned

OUned Il progetto OUned, uno strumento di exploitation che automatizza l'abuso degli ACL delle Organizational Units tramite la manipolazione di gPLink. Per una spiegazione dettagliata del principio alla base dell'attacco, della configurazione necessaria e dell'utilizzo dello strumento, puoi fare...

CVE-2021-21234

CVE-2021-21234 Vulnerabilità di directory traversal nella libreria spring-boot-actuator-logview https://blogg.pwc.no/styringogkontroll/unauthenticated-directory-traversal-vulnerability-in-a-java-spring-boot-actuator-library-cve-2021-21234...

CVE-2022-20128

CVE-2022-20128 Il bridge di debug di Android adb era vulnerabile ad attacchi di directory traversal che potevano essere eseguiti da demoni adb dannosi o compromessi durante un'operazione adb pull. Il dispositivo malevolo: ./adbdirtrav.py -lp 5111 --content "hello world" --destination-path...

CVE-2026-93883

The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 3.4.4 . The root cause is insufficient input sanitization and output escaping of the 'phone' parameter . An authenticated attacker with custom-level acc...

CVE-2026-93883 Advanced Classifieds & Directory Pro <= 3.4.4 - Authenticated (Custom+) Stored Cross-Site Scripting via 'phone' Parameter

The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phone' parameter in all versions up to, and including, 3.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-96028

The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phone' parameter in all versions up to, and including, 3.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2023-42442

CVE-2023-42442 CVE-2023-42442 Vulnerabilità di download arbitrario delle registrazioni delle sessioni di JumpServer Descrizione della vulnerabilità CVE-2023-42442 è una vulnerabilità composita che include due bug in Jumpserver 1. Accesso API non autorizzato che causa la divulgazione di informazio...

CVE-2025-3102-exploit

Questo repository non contiene un README...

NetAlert X - Arbitary File Read

A directory traversal vulnerability has been identified in NetAlertX versions v24.7.18 - v24.9.12. id: CVE-2024-48766 info: name: NetAlert X - Arbitary File Read author: s4e-io severity: critical description: | A directory traversal vulnerability has been identified in NetAlertX versions v24.7.18...

Zimbra Collaboration Suite 8.8.15/9.0 - Remote Code Execution

Zimbra Collaboration Suite ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication i.e., not having an authtoken, an attacker can upload arbitrary files to the system, leading to directory traversal and remote code...

Cisco Unified Communications Manager 7/8/9 - Directory Traversal

A directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815 id: CVE-2013-5528 info: name:...

WordPress Plugin DukaPress 2.5.2 - Directory Traversal

A directory traversal vulnerability in the dpimgresize function in php/dp-functions.php in the DukaPress plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the src parameter to lib/dpimage.php. id: CVE-2014-8799 info: name: WordPress Plugin...

Copyparty <= 1.8.2 - Directory Traversal

Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the .cpr subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside the web document root directory. This...

Milesight Routers - Information Disclosure

A critical security vulnerability has been identified in Milesight Industrial Cellular Routers, compromising the security of sensitive credentials and permitting unauthorized access. This vulnerability stems from a misconfiguration that results in directory listing being enabled on the router...