CVE-2017-8759

Toolkit per exploit per CVE-2017-8759 Non fare lo stronzo Semplice strumento scritto in C per gestire la vulnerabilità RCE in .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 e 4.7. noto anche come "Vulnerabilità di esecuzione remota di codice in .NET Framework." Aiuto C:\Users\Jonas...

CVE-2022-22965

Spring Framework Vulnerabilità di Esecuzione di Codice Remoto CVE-2022-22965 Analisi del Codice Analisi su BiliBili: https://www.bilibili.com/video/BV1jY4y1H7EC...

FreePBX-Vulns-December-25

Vulnerabilità FreePBX - Dicembre 2025 Questo repository contiene template Nuclei per il rilevamento di tre vulnerabilità critiche in FreePBX: CVE-2025-61675 : Iniezione SQL autenticata CVSS 8.6 - Colpisce il modulo endpoint CVE-2025-61678 : Caricamento arbitrario di file autenticato CVSS 8.6 -...

cve-2021-38314

CVE-2021-38314 Exploit Python Dettagli Il plugin Gutenberg Template Library & Redux Framework = 4.2.11 per WordPress registrava diverse azioni AJAX disponibili agli utenti non autenticati nella funzione includes in redux-core/class-redux-core.php, uniche per un dato sito ma deterministiche e...

CVE-2023-35674

Descrizione CVE-2023-35674 è una vulnerabilità di sicurezza di alto livello di tipo zero-day situata nel framework Android. Questa vulnerabilità consente a un utente malintenzionato di elevare i propri privilegi senza richiedere interazione da parte dell'utente o ulteriori permessi di esecuzione...

shisoserial

shisoserial English Document Cos'è questo? Un rapido strumento di sfruttamento per la vulnerabilità di deserializzazione di Shiro CVE-2016-4437 Collaboratori 4nth0ny @ Friday Lab Benvenuti a proporre issues/pr : Ambiente python 3.x JDK 1.8 Installazione python3 -m pip install -r requirements.txt...

ROOT-APP-MAVEN-CVE-2026-41842 CVE-2026-41842 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-41842 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

CVE-2025-55182

🔔 ⚠️Vietato il test di penetrazione non autorizzato Passaggi di compilazione go get fyne.io/fyne/v2@latest go build -ldflags="-s -w" . Screenshot...

CVE-2022-22965-PoC

CVE-2022-22965 PoC Esempio minimale di come riprodurre la CVE-2022-22965 Spring RCE. Eseguire con docker compose 1. Compilare l'applicazione usando Docker compose docker-compose up --build 2. Per testare l'app, andare su http://localhost:8080/handling-form-submission-complete/greeting 3. Eseguire...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: msi2500: Return of queued buffers upon failure in startstreaming The vb2 framework passes buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those...

Astra Linux – Vulnerability in ffmpeg

There is a heap-based Buffer Overflow vulnerability in FFmpeg 4.2, located in the file libavfilter/vfvmafmotion.c, within the convolutiony8bit module. This vulnerability could allow a remote malicious user to cause a Denial of Service attack...

Astra Linux – Vulnerability in qt4-x11, qtbase-opensource-src

A issue was discovered in Qt before version 5.15.15, in versions 6.x before 6.2.9, and in versions 6.3.x through 6.5.x before 6.5.1. When an SVG file containing an image is rendered, a QTextLayout buffer overflow can occur...

Astra Linux – Vulnerability in golang-github-gin-gonic-gin

This affects all versions of the package github.com/gin-gonic/gin. When gin is exposed directly to the internet, a client’s IP address can be spoofed by setting the X-Forwarded-For header...

Astra Linux – Vulnerability in ffmpeg

There is a heap-based Buffer Overflow vulnerability in FFmpeg 4.2, located in the file libavfilter/vffloodfill.c. This vulnerability may lead to memory corruption and other potential issues...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/stm: Avoid use-after-free issues with crtc and plane The function ltdcload calls the functions drmcrtcinitwithplanes, drmuniversalplaneinit, and drmencoderinit. These functions should not be called with parameters allocate...

Astra Linux – Vulnerability in python-tornado

Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, the provided “reason” phrase is used unescaped in HTTP headers where it could be used for header injection or in HTML on the default error page where it could be used for XSS attacks. This...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fixed a UAF in ieee80211scanrx The ieee80211scanrx function attempts to access scanreq-flags after a null check. However, a UAF Use-after-Allocation was observed when the scan is completed and ieee80211scancomplet...

Astra Linux – Vulnerability in libxstream-java

XStream is a simple library for serializing objects to XML and back again. In affected versions, this vulnerability may allow a remote attacker with sufficient rights to execute commands on the host by manipulating the input stream being processed. No users are affected as long as they follow...

ESFang

ESFang Dieses Tool wurde für den modularen Konsum von EndpointSecurity Framework ESF-Ereignissen in der macOS-Umgebung entwickelt. Es ist mein Versuch, eine Reihe von Problemen zu überwinden, die bei bestehenden Tools auftreten, darunter stilles Datenverwerfen, strikter Konsum von Ereignistypen,...

detectree

Detectree Detectree ist ein Datenvisualisierungstool für Blue Teams. Es bietet eine grafische Darstellung von Erkennungsdaten, die es einem Analysten ermöglicht, nahezu sofort Einschätzungen über die Art der zugrunde liegenden Aktivität zu treffen und komplexe Beziehungen zwischen den Datenpunkte...