CVE-2023-7028

CVE-2023-7028 ⚠️ Questo exploit è a scopo difensivo e dovrebbe essere utilizzato da professionisti della cybersecurity per identificare possibili server GitLab vulnerabili. Descrizione CVE-2023-7028 - Account Takeover tramite Password Reset senza interazione dell'utente in GitLab Community Edition...

docker-bench-security

Docker Bench for Security The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the CIS Docker Benchmark v1.6.0. We are making this available as an open-source utili...

Top10

OWASP Top 10 2017 de This folder contains the German version of the OWASP Top 10 - 2017. The official website is here: https://wiki.owasp.org/index.php/Germany/Projekte/Top10 OWASP Top 10 2017 German Version PPTX OWASP Top 10 2017 German Version PDF Please report issues by mail to top10owaspde...

CVE-2024-35584

CVE-2024-35584 OpenSIS Authentifizierte SQL-Injection Beschreibung Es besteht eine SQL-Injection-Schwachstelle in Ajax.php, ForWindow.php, ForExport.php, Modules.php, functions/HackingLogFnc.php. Dieser Befund betrifft OpenSIS Community Edition 9.1 bis 8.0 und möglicherweise niedrigere Versionen...

xlsx

SheetJS La SheetJS Community Edition offre soluzioni open-source collaudate per estrarre dati utili da quasi qualsiasi foglio di calcolo complesso e generare nuovi fogli di calcolo che funzioneranno con software sia legacy che moderni. SheetJS Pro offre soluzioni che vanno oltre l'elaborazione de...

payara__Payara_CVE-2022-37422_5-2022-2

Payara Platform Community Edition Crea. Innova. Eleva. Payara Platform Community Edition offre runtime server open source per progetti di sviluppo e applicazioni Jakarta EE e MicroProfile containerizzate. Payara Server Community è una piattaforma middleware open source, innovativa e cloud-native...

CVE-2022-27925

CVE-2022-27925 Descrizione Il 10 maggio 2022, Zimbra ha rilasciato le versioni 9.0.0 patch 24 e 8.8.15 patch 31 per affrontare multiple vulnerabilità in Zimbra Collaboration Suite, incluse CVE-2022-27924 di cui abbiamo scritto in precedenza e CVE-2022-27925. Inizialmente, Zimbra ha definito...

CVE-2025-69690-CVE-2025-69691

🔐 CVE-2025-69690 & CVE-2025-69691 Esecuzione di codice da remoto autenticata in Netgate pfSense Community Edition 📋 Riepilogo...

CVE-2026-65931 LimeSurvey Community Edition 7.0.5 - Improper authorization in survey menu entry creation endpoint

LimeSurvey Community Edition 7.0.5 contains an authenticated improper authorization vulnerability in the survey menu entry creation endpoint. An authenticated user with only the global settings:read permission can directly invoke POST /index.php/admin/menuentries/sa/create and create new survey...

CVE-2023-49964

CVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco In Hyland Alfresco Community Edition =7.2.0 wurde ein Problem entdeckt. Durch das Einfügen von schädlichem Inhalt in die Datei folder.get.html.ftl kann ein Angreifer SSTI-Angriffe Server-Side Template Injection durchführen, die...

CVE-2022-27925

CVE-2022-27925 Zimbra RCE 2022 यह रेपो hgrab-framework का हिस्सा है dork title: "Zimbra Web Client Sign In" प्रभावित उत्पाद Zimbra Collaboration Suite Network Edition 9.0.0 Patch 23 और पुराने Zimbra Collaboration Suite Network Edition 8.8.15 Patch 30 और पुराने स्थापना सर्वर पर ऐप स्थापित करें...

bugsy

Bugsy Bugsy ist ein Kommandozeilen-Tool CLI, das automatische Behebung von Sicherheitslücken in Ihrem Code bietet. Es handelt sich um die Community-Edition von Mobb, dem ersten anbieterneutralen Tool zur automatischen Behebung von Sicherheitslücken. Bugsy hilft Entwicklern dabei, Sicherheitslücke...

CVE-2026-65930

LimeSurvey Community Edition 7.0.5 contains an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog used by the administrative question editor.This issue affects LimeSurvey: 7.0.5...

CVE-2026-63360 LimeSurvey Community Edition 7.0.5 - Reflected XSS in user activation confirmation endpoint

LimeSurvey Community Edition 7.0.5+260623 contains an authenticated reflected Cross-Site Scripting vulnerability in the user activation confirmation endpoint. The action query parameter is copied into the response and inserted into a hidden input attribute without HTML attribute encoding. This...

CVE-2026-16809

CVE-2026-16809 affects LimeSurvey Community Edition 7.0.5 and is a stored cross-site scripting (XSS) vulnerability in the survey quota creation workflow. An authenticated low-privileged user with the ability to create and manage their own survey can store malicious JavaScript in a quota message ,...

CVE-2026-16809 LimeSurvey Community Edition 7.0.5 - Stored XSS in quota message rendering

LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the survey quota creation workflow. An authenticated low-privileged user who can create and manage their own survey can store malicious JavaScript in a quota message. This issue affects LimeSurvey: 7.0.5...

CVE-2026-16809 LimeSurvey Community Edition 7.0.5 - Stored XSS in quota message rendering

LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the survey quota creation workflow. An authenticated low-privileged user who can create and manage their own survey can store malicious JavaScript in a quota message. This issue affects LimeSurvey: 7.0.5...

CVE-2026-65930 LimeSurvey Community Edition 7.0.5 - Stored XSS in replacement-fields

LimeSurvey Community Edition 7.0.5 contains an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog used by the administrative question editor.This issue affects LimeSurvey: 7.0.5...

CVE-2026-65930

LimeSurvey Community Edition 7.0.5 is affected by an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog within the administrative question editor. An attacker with low privileges can inject a persistent script that executes in the context of other users who i...

CVE-2026-65930 LimeSurvey Community Edition 7.0.5 - Stored XSS in replacement-fields

LimeSurvey Community Edition 7.0.5 contains an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog used by the administrative question editor.This issue affects LimeSurvey: 7.0.5...