CVE-2022-26134

CVE-2022-26134 - Confluence OGNL injection vulnerability Uso dello script Installare le librerie Python pip install -r requirements.txt Verifica della vulnerabilità python3 CVE-2022-26134check.py -u url -c whoami Scansione batch python3 CVE-2022-26134check.py -f url.txt -c whoami Versioni...

CVE-2025-24893-PoC

CVE-2025-24893-PoC Exploit XWiki RCE non autenticato Versioni XWiki interessate Versioni 15.10.11 Versioni 16.4.1 Versioni 16.5.0RC1 Descrizione della vulnerabilità Le versioni interessate di XWiki contengono una vulnerabilità di esecuzione di codice in remoto RCE causata da una gestione non sicu...

CVE-2022-22963

CVE-2022-22963 Automazione proof-of-concept a scopo didattico per CVE-2022-22963, dimostrata in un ambiente lab Hack The Box autorizzato. Panoramica CVE-2022-22963 è una vulnerabilità di Spring Cloud Function che coinvolge l'header spring.cloud.function.routing-expression. Con configurazioni...

CVE-2025-68613-n8n-rce-analysis

Matrix GIF...

safe-expr-eval

safe-expr-eval Valutatore di espressioni veloce e leggero per JavaScript e TypeScript. Un parser di espressioni moderno con un'API familiare, zero dipendenze e pieno supporto TypeScript. Funzionalità Parsing e valutazione rapidi delle espressioni Leggero e senza dipendenze Supporto completo per...

CVE-2022-22963-Exploit

CVE-2022-22963 Exploit Dieses Repository enthält einen Rust-basierten Exploit für die Schwachstelle CVE-2022-22963, die in Spring Cloud Function Versionen 3.1.6, 3.2.2 und älteren, nicht unterstützten Versionen gefunden wurde. Die Schwachstelle ermöglicht die Ausführung von Remote-Code und den...

miasm

What is Miasm? Miasm is a free and open source GPLv2 reverse engineering framework. Miasm aims to analyze / modify / generate binary programs. Here is a non exhaustive list of features: Opening / modifying / generating PE / ELF 32 / 64 LE / BE Assembling / Disassembling X86 / ARM / MIPS / SH4 /...

CVE-2024-23346

🚀 CVE-2024-23346 Chemistry - HTB Questo repository contiene un file di informazioni cristallografiche CIF destinato all'uso sulla macchina "Chemistry" su Hack The Box HTB. Esempio di file CIF root@kitploit: dataExample celllengtha 10.00000 celllengthb 10.00000 celllengthc 10.00000 cellanglealpha...

pwnfaces

😛 pwnfaces Exploit di iniezione EL in PrimeFaces 5.X 🕵️ Cos'è pwnfaces? 🕵️ pwnfaces è uno strumento Golang creato per sfruttare la vulnerabilità definita come CVE-2017-1000486 iniezione EL in PrimeFaces 5.X ⚡ Installazione / Per iniziare Una guida rapida su come installare e usare pwnfaces...

titus

Titus: High-Performance Secrets Scanner Titus is a high-performance secrets scanner that detects credentials, API keys, and tokens in source code, files, and git history. It ships with 487 detection rules covering hundreds of services and credential types, drawn from NoseyParker and Kingfisher...

Linux Distros Unpatched Vulnerability : CVE-2026-78367

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an...

CVE-2026-41848

CVE-2026-41848...

CVE-2026-41849

CVE-2026-41849...

CVE-2019-19204

CVE-2019-19204 È stato scoperto un problema in Oniguruma 6.x precedente alla 6.9.4rc2. Nella funzione fetchintervalquantifier precedentemente nota come fetchrangequantifier in regparse.c, PFETCH viene chiamata senza controllare PEND. Ciò porta a una lettura oltre i limiti di un buffer basato su...

awesome-mba

Dieses Repo enthält Links zur Mixed-Boolean-Arithmetic MBA-Obfuskation. PRs sind willkommen. Beachte, dass einige der hier aufgeführten Ressourcen nicht strikt mit MBA zusammenhängen, auch wenn alle in irgendeiner Weise relevant sind. Publikationen Information Hiding in Software with Mixed...

CVE-2026-77415 JSONata: Arbitrary Code Execution via crafted JSONata expressions

JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.1, crafted JSONata expressions could chain several object-integrity weaknesses to execute arbitrary code. The chain could overwrite $clone to mutate objects through evaluateTransformExpression, expose and deconstruct...

EUVD-2026-64166

JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.1, crafted JSONata expressions could chain several object-integrity weaknesses to execute arbitrary code. The chain could overwrite $clone to mutate objects through evaluateTransformExpression, expose and deconstruct...

ROOT-APP-MAVEN-CVE-2026-41850 CVE-2026-41850 in org.springframework:spring-expression - Patched by Root

Root has patched CVE-2026-41850 in the org.springframework:spring-expression package for Root:Maven. Multiple fixed versions available...

action-octoscan

📦 :octocat: action octoscan Eine GitHub Action, die einen Sicherheitsscan deiner GitHub-Actions durchführt. Diese Action basiert auf octoscan 🤸 Verwendung Anpassung inputs outputs Berechtigungen 🤸 Verwendung Hier ist ein einfaches Beispiel, wie diese Action verwendet wird. Dies funktioniert sowoh...

python: Python: Denial of Service via super-linear regular expression work in csv.Sniffer.sniff()

A flaw was found in the csv.Sniffer.sniff function within Python. An attacker can exploit this by providing specially crafted CSV samples, which can trigger super-linear regular-expression processing during dialect sniffing. This excessive processing consumes significant CPU resources, potentiall...