CVE-2019-18988

CVE-2019-18988 Entschlüsselung gespeicherter TeamViewer-Anmeldeinformationen...

ecologyExp.jar

ecologyExp.jar Чтение файла конфигурации базы данных Weaver OA java -jar ecologyExp.jar http://127.0.0.1 Исходный код package com.test; import org.apache.http.HttpEntity; import org.apache.http.client.methods.CloseableHttpResponse; import org.apache.http.client.methods.HttpGet; import...

CVE-2019-5489

CVE 2019-5489 इस रिपॉजिटरी में Linux के लिए Page Cache Side Channel Attacks CVE-2019-5489 का प्रूफ ऑफ कॉन्सेप्ट है। पेज कैश साइड चैनल का मूल्यांकन करने के लिए, मैंने दो प्रक्रियाओं के बीच कोवर्ट चैनल लागू किया है। सेंडर प्रक्रिया पेज कैश साइड चैनल के माध्यम से रिसीवर प्रक्रिया को गोपनीय डेटा भेजत...

CVE-2018-3639

CVE-2018-3639 Bypass speculativo del negozio CVE-2018-3639 proof of concept per Linux Scarica root@kitploit: git clone [email protected]:mmxsrup/CVE-2018-3639.git Compila root@kitploit: cd CVE-2018-3639 make Esegui root@kitploit: ./specter Output root@kitploit: $ ./spectre idx: 0, highest:P,...

cve-2023-32784

CVE-2023-32784 KeePass 2.X versione 2.54 è suscettibile a una vulnerabilità per cui la password principale può essere recuperabile da un dump di memoria di un database KeePass sbloccato. A questo è stato assegnato CVE-2023-32784 Questo programma mira a recuperare la password principale da un dump...

CVE-2026-55584

CVE-2026-55584 - phpSysInfo IP-Whitelist-Umgehung CWE-290, CVSS 7.5 High, phpSysInfo = 3.4.5 Referenzen: GHSA-786w-p5pm-cvgh, CVE.org PSIALLOWED löst die Client-IP aus den vom Angreifer kontrollierten Headern X-Forwarded-For dann Client-IP auf, bevor auf REMOTEADDR zurückgegriffen wird. Es gibt...

CVE-2026-52776

A flaw was found in compliance-trestle. The URLSecurityValidator, intended to prevent Server-Side Request Forgery SSRF, contains a bypass vulnerability. This bypass occurs because the validator does not properly handle IPv4-mapped IPv6 addresses or the unspecified address 0.0.0.0. A remote...

CVE-2026-11106-DNS-Zone-Transfer-AXFR-Information-Disclosure

CVE-2026-11106 – Divulgazione di informazioni sul trasferimento di zona DNS AXFR Codice del programma server DNS Python + attacco root@kitploit: dnsserversim.py - Simulated DNS server allowing AXFR from dnslib import DNSRecord, QTYPE, RR, TXT, A import socketserver, socket class...

CVE-2021-47996

A flaw was found in Nokogiri, specifically within its bundled libxml2 library. A remote attacker could exploit multiple vulnerabilities, including memory leaks, buffer over-reads, heap-based buffer overflows, and out-of-bounds reads, by processing specially crafted XML documents. This could lead ...

CVE-2023-26258-ArcServe

Das TL; DR; Wenn du im Netzwerk bist, kannst du mit ArcServeRadar.py nach standardmäßig konfigurierten Instanzen scannen. Ich habe versucht, es nach C zu portieren, aber es nicht geschafft – wenn du weißt, wie es geht, kannst du das gerne tun : root@kitploit: c:\Users\vagrant\Desktoppython...

CVE-2021-33558.

CVE : CVE-2021-33558. Codice exploit di CVE-2021-33558 Sommario In Boa/0.94.13 ci sono varie configurazioni errate. Espone varie informazioni sensibili. Prova di concetto https://target.com/backup.html https://target.com/preview.html https://target.com/js/log.js https://target.com/log.html...

CVE-2024-22275

CVE-2024-22275: Lettura parziale di file in VMware vCenter Server Il vCenter Server contiene una vulnerabilità di lettura parziale dei file. Un attore malintenzionato con privilegi amministrativi sulla shell dell'appliance vCenter potrebbe sfruttare questo problema per leggere parzialmente file...

CVE-2026-79674

A flaw was found in NLTK. A path traversal vulnerability in corpus-reader constructors allows a remote attacker to bypass the intended data root sandbox. By supplying arbitrary corpus root paths to LinThesaurusCorpusReader and PanLexLiteCorpusReader constructors, an attacker can read files and...

etherleak-checker

Etherleak-Schwachstellenprüfer Dieses Python-Skript hilft, die Etherleak-Schwachstelle CVE-2003-0001 auf einem Zielhost zu erkennen, indem es die Padding-Daten in Netzwerkpaketen analysiert. Das Skript verwendet Scapy, um verschiedene Arten von Anfragen ICMP, ARP oder TCP zu senden und prüft, ob...

CVE-2021-40352

CVE-2021-40352 Opnemr Versione 6.0.0 Presenta una vulnerabilità di sicurezza in cui un attaccante con accesso da Medico può leggere messaggi che sono stati inviati ad altri membri, compresi i messaggi dell'amministratore. la vulnerabilità si trova nella funzionalità di stampa dei messaggi =...

EUVD-2026-67127

Affected versions of Flowintel expose the /myassignment/user API endpoint to any authenticated API user. The endpoint accepts a userid parameter identifying the user whose assignments should be returned, but previously had no role restriction beyond general API authentication. As a result, a...

CVE-2026-81658

A flaw was found in Foreman. The template revision endpoint does not enforce object-level authorization when retrieving an audited template revision. An authenticated, low privileged user with a template-related permission, such as viewptables, can obtain historical template contents belonging to...

CVE-2026-81659

Affected versions of Flowintel allow attacker-controlled note content to be processed by Pandoc and XeLaTeX during PDF export in a way that can cause local files on the Flowintel server to be read and incorporated into the generated export...

CVE-2023-27703

CVE-2023-27703 CVE-2023-27703 Una vulnerabilità di leak dell'interfaccia di debug degli elementi nella versione Android di pikpak V1.29.2 fix at pikpak 1.30.1 Descrizione suggerita La versione Android di pikpak v1.29.2 è risultata contenere una fuga di informazioni tramite l'interfaccia di debug...

CVE-2026-76844

A flaw was found in webpack-dev-middleware. A remote attacker can exploit a path traversal vulnerability when the configured publicPath lacks a trailing slash. By sending a specially crafted request, the attacker can bypass a security guard, allowing the middleware to resolve files from one...