CVE-2019-17564-FastJson-Gadget

CVE-2019-17564 Gadget FastJson + SpringFramework per Dubbo 2.7.3 La nostra analisi completa è disponibile su https://www.checkmarx.com/blog/apache-dubbo-unauthenticated-remote-code-execution-vulnerability Nota che questo non è un exploit ; è una catena di gadget POC utilizzata in un exploit per...

CVE-2019-0708-test

CVE-2019-0708-test CVE-2019-0708 Verifica vulnerabilità C Linguaggio di programmazione: C Software di programmazione: Visual Studio 2012 Ambiente di programmazione: .Net Framework 4.5 Software scritto in C per verificare la vulnerabilità CVE-2019-0708 Richiama 0708detector.exe rilasciato dal team...

CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit

🔐 ReactRCE-Scanner CVE-2025-55182 — Framework avanzato di exploit e valutazione RCE per React Server Components 📑 Indice Dichiarazione legale e avviso etico Panoramica Funzionalità principali Guida rapida Architettura e approfondimento delle funzionalità Riferimento alla configurazione Suite di...

Larascript

| | | | | | / || '| / |/ | / || '|| || ' \ | | | | | | || | | | |\ | | | | || | || | || ,||| ,||/ ||| ||| ./ | || Autori: @pwnedshell & @rsgbengi 📌 Cos'è Larascript? Larascript è uno script che sfrutta CVE-2018-15133 e può eseguire comandi remoti se un'app Laravel vulnerabile è esposta. Puoi...

SocialEngineering-Templates

SocialEngineering-Templates templates per il framework SET...

evillcode

🔥 Evillcode - Framework MITM Modulare Framework modulare di cybersecurity sviluppato in Python per l'analisi, il monitoraggio e la simulazione di attacchi MITM su reti locali. Permette a studenti e professionisti di comprendere il funzionamento interno di reti, protocolli e vulnerabilità in...

Untrue

Untrue Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Richard Turnbull, richard dot turnbull at nccgroup dot com http://www.github.com/nccgroup/untrue Released under AGPL, see LICENSE for more information Description Untrue is a tool for checking passwords agains...

sliver v1.7.8

Sliver Sliver is an open-source, cross-platform adversary emulation and red team framework designed for organizations of all sizes to perform authorized security testing. Sliver implants support command-and-control C2 over Mutual TLS mTLS, WireGuard, HTTPS, and DNS. Implants are dynamically...

OctoberCMS - Account Takeover

octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request. The issue has been patched in Build 472 and v1.1.5. id:...

[SECURITY] Fedora 45 Update: xmms2-0.9.7-9.fc45

XMMS2 is an audio framework, but it is not a general multimedia player - it will not play videos. It has a modular framework and plugin architecture for audio processing, visualisation and output, but this framework has not been designed to support video. Also the client-server design of XMMS2 an...

[SECURITY] Fedora 45 Update: mlt-7.40.0-3.fc45

MLT is an open source multimedia framework, designed and developed for television broadcasting. It provides a toolkit for broadcasters, video editors,media players, transcoders, web streamers and many more types of applications. The functionality of the system is provided via an assortment of rea...

[SECURITY] Fedora 45 Update: libaccounts-glib-1.25-28.fc45

Accounts framework for Linux and POSIX based platforms...

[SECURITY] Fedora 45 Update: gvfs-1.62.0-2.fc45

The gvfs package provides backend implementations for the gio framework in GLib. It includes ftp, sftp, cifs...

[SECURITY] Fedora 45 Update: gstreamer1-plugins-good-1.28.7-2.fc45

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

[SECURITY] Fedora 45 Update: gpac-26.07.0-5.fc45

GPAC is a multimedia framework based on the MPEG-4 Systems standard developed from scratch in ANSI C. The original development goal is to provide a clean, small and flexible alternative to the MPEG-4 Systems reference software. GPAC features the integration of recent multimedia standards SVG/SMIL...

[SECURITY] Fedora 45 Update: fcitx-4.2.9.9-15.fc45

Fcitx is an input method framework with extension support. Currently it supports Linux and Unix systems like FreeBSD. Fcitx tries to provide a native feeling under all desktop as well as a light weight core. You can easily customize it to fit your requirements...

EvoRiskBench: An Evolving Benchmark for Runtime Security Risks in Workspace Agents

Workspace agents combine large language models with execution harnesses to perform stateful, multi-step tasks that access or modify external resources. Existing benchmarks leave gaps in executable coverage of their runtime security risks, while evolving model capabilities, harnesses, tools, and...

metasploitable-exploitation-lab

Exploitation Lab — Attacking Metasploitable 2 with Kali & Meta...

CLSA-2026-1790868507 TuxCare security update for laravel/framework (1 CVE)

TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 12.58.0-p4+tuxcare...

WordPress Redux Framework plugin <= 4.5.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by daroo in WordPress Plugin Redux Framework versions = 4.5.14...