Reachability-Check

Controllo di Raggiungibilità 🌐 EN | TR Controllo di raggiungibilità basato su browser — testa la connettività di rete, le regole del firewall e le restrizioni di accesso. File HTML singolo. Zero dipendenze. Nessun server web necessario per eseguirlo. Caratteristiche Doppia misurazione: HTTP Fetch...

CVE-2026-65400

CVE-2026-65400 Spenden Unterstütze die Wartung dieses Projekts mit PayPal oder durch Scannen des QR-Codes unten. ⚡ Einfache Nutzung Verwende dieses Projekt nur in sicheren und autorisierten Umgebungen wie: Lokale virtuelle Maschinen Docker-Container Isolierte Laborumgebungen Autorisierte...

CVE-2026-68514

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13, the PyOpenEXR Python bindings contain a heap out-of-bounds write triggered when reading a crafted deep...

CVE-2026-68515

OpenEXR is the reference implementation for the EXR image format used in the motion picture industry. A heap out-of-bounds write exists in the exrmultiview utility when combining two attacker-supplied, individually valid scanline EXR files whose union dataWindow is not aligned to one view's chann...

CVE-2022-29464

CVE-2022-29464 WSO2 RCE Verwendung : root@kitploit: python3 exploit.py https://host:9443/ ArbitraryShellName.jsp...

CVE-2025-29927-NextJS

📦 Next.js CVE-2025-29927 - Proof of Concept Dieses Repository enthält einen minimalen Proof of Concept PoC zur Ausnutzung von CVE-2025-29927, einer schwerwiegenden Schwachstelle, die bestimmte Versionen von Next.js betrifft und unbefugten Zugriff auf interne Anwendungsdateien über manipulierte UR...

CVE-2026-80050

ContiNew Admin fails to apply file-upload permission checks or file-type allowlist validation to multipart upload endpoints, allowing authenticated users to store files with arbitrary extensions. Attackers can initialize chunked uploads, send file parts, and complete uploads to leave arbitrary...

CVE-2026-61555

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable to crashing. This occurs when Imf::GetChannelsInMultiPartFile processes a...

lst2x64dbg

lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example...

CVE-2026-55609

sublinear-time-solver is a Rust and WebAssembly library for solving asymmetric diagonally dominant systems in sublinear time. Prior to consciousness-explorer 1.1.2 and sublinear-time-solver 1.6.0, the exportstate and importstate tools in src/consciousness-explorer/mcp/server.js pass the...

sudowp-postgallery

SudoWP PostGallery Fork de Segurança Contribuidores: SudoWP, WP Republic Autores Originais: RTO GmbH Tags: galeria, segurança, corrigido, cve-2025-13543 Requer pelo menos: 5.8 Testado até: 6.7 Tag estável: 1.12.6 Licença: GPLv2 ou posterior Aviso de Segurança Este é um fork endurecido contra...

vuln-chain-lab

File Upload Bypass + Stored XSS PoC Labor Eine bewusst verwundbare Webanwendung, die zeigt, wie ein File-Upload-Bypass mit Stored-XSS verkettet wird, um Backdoor-Admin-Konten zu erstellen, selbst wenn CSP-, CORS- und CSRF-Schutzmaßnahmen vorhanden sind. Ausführlicher Blogbeitrag: KurtiseBear Blog...

CVE-2026-65979

OpenEXR (the reference implementation for the EXR image format, widely used in the motion picture industry) versions 3.4.0 through 3.4.12 contain an out-of-bounds read in the HTJ2K decoder . The decoder parses a header-length field (PLEN ) from a chunk's compressed data and advances the codestrea...

CVE-2026-17106

CVE-2026-17106 — CopyEscape:docker cp scrittura arbitraria di file dal container all'host Immagine di distribuzione HackSpeak. Questo repository è un'immagine di distribuzione del PoC CopyEscape CVE-2026-17106 pubblicato dalla red team di Imperva Ron Masas , il codice è identico a quello upstream...

notes

Notizen Ein Archiv meiner Notizen zur Sicherheitsforschung. Meistens erweiterte Ausführungen von Twitter...

consciousness-explorer / sublinear-time-solver MCP export_state has an arbitrary file write

Impact An arbitrary file write vulnerability CWE-73, External Control of File Name or Path exists in the consciousness-explorer component of sublinear-time-solver. The MCP exportstate and importstate tool accepted a user-supplied filepath argument and passed it directly to fs.writeFileSync /...

NPM: consciousness-explorer / sublinear-time-solver MCP export_state has an arbitrary file write

NPM: consciousness-explorer / sublinear-time-solver MCP exportstate has an arbitrary file write vulnerability discovered by ? in WordPress Npm consciousness-explorer versions 1.1.2...

NPM: consciousness-explorer / sublinear-time-solver MCP export_state has an arbitrary file write

NPM: consciousness-explorer / sublinear-time-solver MCP exportstate has an arbitrary file write vulnerability discovered by ? in WordPress Npm sublinear-time-solver versions 1.6.0...

sudowp-dropzone-elementor

SudoWP DropZone per Elementor Contributori: SudoWP, WP Republic Autori originali: WEB-SHOP-HOSTING Tags: elementor, dropzone, upload, security-patch, fork, cve-2024-5153, honeypot Richiede almeno: 5.6 Testato fino a: 6.7 Versione stabile: 1.7.17 Licenza: GPLv2 o successiva Avviso di sicurezza...

EUVD-2026-65706

sublinear-time-solver is a Rust and WebAssembly library for solving asymmetric diagonally dominant systems in sublinear time. Prior to consciousness-explorer 1.1.2 and sublinear-time-solver 1.6.0, the exportstate and importstate tools in src/consciousness-explorer/mcp/server.js pass the...