CVE-2026-77990 Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager 5.0.1 - A non-manager can therefore read attendee names, usernames, registration dates and statuses for events they do not manage, including lists belonging to unpublished events...

CVE-2026-77990

Joomla Event Manager (a Joomla extension) before 5.0.1 contains an access control flaw in its attendee list feature. Any logged-in user who is not the event manager can read attendee names, usernames, registration dates, and statuses for events they do not manage, including those belonging to unp...

CVE-2026-77035

Joomla Event Manager (joomlaeventmanager.net) versions prior to 5.0.1 are affected by a cross-user event and venue takeover vulnerability. A registered user with edit-own rights (via the eventowner=1 setting or core.edit.own permission) can forge form fields by POSTing another user's record ID to...

CVE-2026-77035 Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

EUVD-2026-66863

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

CVE-2026-77035 Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

Evtx_Log_Browser

Navegador de Logs Evtx xml Navegue pelos logs de eventos do Windows evtx e exporte para xml A versão mais recente estáaqui Dependências: .NET Framework 4.8 Powershell Versão: 5.1...

WinBypass

Windows-UAC-Bypass | Privilegieneskalation Slui-Dateihandler-Hijack LPE - Windows 8-10 SluiHijackBypass.ps1 UAC-Bypass über FodHelper - Windows 10 FodhelperBypass.ps1 UAC-Bypass über die Ereignisanzeige - Windows 7 EventVwrBypass.ps1 Metasploit-Framework-Modul bypassuacsluihijack.rb kopieren...

async-pico-hub

Async PICO HUB Async PICOs é um framework para executar Beacon Object Files de longa duração e orientados a eventos dentro de um processo Beacon do Cobalt Strike. Ele fornece execução assíncrona, rastreamento de tarefas, encerramento gracioso e saída assíncrona segura ao combinar os PICOs do...

CVE-2025-56605

CVE-2025-56605 XSS Vulnerabilidade de Cross-Site Scripting CVE-2025-56605 — XSS refletido no Event Management System 1.0 Descrição: Existe uma vulnerabilidade de Cross-Site Scripting XSS refletido no register.php do PuneethReddyHC/event-management 1.0. O parâmetro POST mobile é validado de forma...

sysmon-modular

sysmon-modular | Un repository di configurazioni Sysmon personalizzabile da tutti Questo è un repository di configurazioni per Sysmon di Microsoft Sysinternals scarica qui, strutturato in modo modulare per semplificare la manutenzione e la generazione di configurazioni specifiche. Tieni presente...

Purpleteam

Purpleteam lavori in corso Script che ho creato per generare eventi per le rilevazioni SOC, mappati alle tecniche MITRE ATT&CK...

attack_monitor

Attack Monitor Attack Monitor is Python application written to enhance security monitoring capabilites of Windows 7/2008 and all later versions workstations/servers and to automate dynamic analysis of malware. Current modes mutually exclusive: Endpoint detection ED Malware analysis on dedicated...

ekoparty

EKOPARTY MIAMI Übersicht Folien und Materialien für EKOPARTY Miami. YouTube-Link: https://youtu.be/FdvrwQH7LYU?si=MVD8NMykO39dP0v9 Google-Videolinks sind in das PDF eingebettet...

CVE-2026-30050

free5gc v4.1.0 , an open-source 5G Core implementation, is affected by a Denial of Service vulnerability in the ModifyAMFEventSubscriptionProcedure function located in processor/event_exposure.go. An unauthenticated attacker can trigger the DoS by supplying a crafted PATCH request over the networ...

CVE-2026-30050

An issue in the ModifyAMFEventSubscriptionProcedure function processor/eventexposure.go of free5gc v4.1.0 allows attackers to cause a Denial of Service DoS via supplying a crafted PATCH request...

logira

logira Auditing runtime a livello di sistema operativo per automazione imprevedibile. logira è una CLI Linux di sola osservazione che registra eventi runtime exec, file e net tramite eBPF. Ti aiuta a vedere cosa è realmente accaduto durante le esecuzioni di agenti AI e altre forme di automazione,...

CVE-2021-32644

CVE-2021-32644 该漏洞是影响 Ampache 4.4.3 之前版本的 XSS 漏洞。 https://nvd.nist.gov/vuln/detail/CVE-2021-32644 安装及运行步骤 1. Ampache 安装 进行安装时，请先在 docker-compose.yml 文件中配置端口转发。 当前安装的 Ampache 版本为 4.4.2。 root@kitploit: $docker-compose up 2. 访问 Amapache 转到 http://web-server ip:port/ 2. 访问 Amapache 并配置 MySQL 转到...

CVE-2026-23918-poc

CVE-2026-23918 — Apache modhttp2 이중 해제 영향받는 버전: Apache HTTP Server 2.4.66에 modhttp2 + Event MPM 수정 버전: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 HIGH — 인증되지 않은 원격 코드 실행 가능 CWE: CWE-415 이중 해제 취약점 개요 Apache 2.4.66의 modhttp2는 h2mplx.c:mstreamcleanup 내부에 이중 해제 버그가 있습니다. 이 문제는 클라이언트가 동일한 스트림에서 HEADERS...

DIAL

DIAL I carichi di lavoro sul cloud offrono pari opportunità agli hacker tanto quanto ai team interni. Le aziende cloud-native sono esposte ad attacchi sia esterni che interni. Con il crescente rischio di violazioni della sicurezza e la configurazione errata del cloud come uno dei fattori più...