unredacter

Unredacter Zeigt dir, warum du niemals, niemals, niemals Pixelierung als Schwärzungstechnik verwenden solltest. Für eine ausführlichere Erklärung, wie das funktioniert, wirf einen Blick auf meinen Blogbeitrag hier. So probierst du es aus Installiere die Abhängigkeiten: npm install Starte dann mit...

CVE-2026-77438 Trilium unauthenticated share-search discloses password-protected and hidden shared notes

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the public share-search endpoint does not enforce the per-note shareCredentials and shareHiddenFromTree controls, allowing an unauthenticated visitor to read the titles, tree paths, and conten...

CVE-2026-77438 Trilium unauthenticated share-search discloses password-protected and hidden shared notes

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the public share-search endpoint does not enforce the per-note shareCredentials and shareHiddenFromTree controls, allowing an unauthenticated visitor to read the titles, tree paths, and conten...

CVE-2026-77438

Trilium (open-source hierarchical note-taking app), in versions up to and including 0.103.0 , has an authorization flaw in its public share-search endpoint . The endpoint authorizes only the ancestor note supplied in the request, then performs a full-text search across the entire published subtre...

EUVD-2026-67230

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the public share-search endpoint does not enforce the per-note shareCredentials and shareHiddenFromTree controls, allowing an unauthenticated visitor to read the titles, tree paths, and conten...

CVE-2025-12585

MxChat Basic = 2.5.1 - MxChat – AI Chatbot for WordPress = 2.5.1 - Esposizione di Informazioni Non Autenticata Il plugin MxChat Basic non verifica la proprietà della sessione nell'endpoint AJAX mxchatfetchconversationhistory, consentendo a utenti non autenticati di accedere alla cronologia delle...

Active-Scanning-and-Information-Gathering-in-ICS-SCADA-Networks-Using-Network-Mapper-NMAP

Aktives Scannen und Informationssammlung in ICS/SCADA-Netzwerken mit Network Mapper NMAP Türkisch Diese Forschungsarbeit wurde bereits zuvor veröffentlicht; Sie können die Original-PDF-Version auch hier finden...

Apache-Solr-Arbitrary-File-Read

Lettura Arbitraria di File in Apache Solr Hit Counter Apache Solr sta per Searching On Lucene with Replication è un motore di ricerca gratuito e open-source basato sulla libreria Apache Lucene. Scritto in Java. Apache Solr dispone di API RESTful XML/HTTP e JSON e di librerie client per molti...

eos

Nemici di Symfony EOS EOS saccheggia informazioni da un target Symfony in modalità debug: Sezione| Descrizione ---|--- General| Ottieni informazioni generali sul target. Phpinfo| Estrai le variabili d'ambiente Symfony dalla phpinfo esposta. Route| Ottieni l'elenco delle route registrate. Log dell...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file (CVE-2026-1918)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to sensitive information in a log file. Vulnerability Details CVEID:CVE-2026-1918 DESCRIPTION: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through...

CVE-2022-1972-infoleak-PoC

CVE-2022-1972 infoleak PoC Exploit infoleak per CVE-2022-1972. Puoi trovare l'articolo associato sul nostro blog Requisiti I namespace utente devono essere disponibili per utenti non privilegiati. root@kitploit: $ sysctl kernel.unprivilegedusernsclone kernel.unprivilegedusernsclone = 1 Compilazio...

CVE-2026-33829-Writeup

CVE-2026-33829-Analisi Caso di studio di vulnerabilità: CVE-2026-33829 Coercizione NTLM nello Strumento di cattura di Windows Riepilogo esecutivo Questa analisi descrive la replica tecnica di CVE-2026-33829 , una vulnerabilità di divulgazione di informazioni presente nell'architettura applicativa...

CVE-2025-53640

CVE-2025-53640 – Enumerazione di utenti autenticati in Indico del CERN Vulnerabilità BOLA PoC e analisi tecnica di CVE-2025-53640: una vulnerabilità di Broken Object Level Authorization BOLA in Indico consente l'enumerazione di utenti autenticati tramite endpoint, esponendo nomi, email e...

SwaggerUI-CVE-2018-25031

Exploit Swagger UI - CVE-2018-25031 Exploit Swagger UI - Travisamento dell'Interfaccia Utente UI di Informazioni Critiche CVE-2018-25031. Questo exploit verifica se la Swagger UI utilizzata è suscettibile allo sfruttamento della vulnerabilità di Travisamento dell'Interfaccia Utente UI di...

CVE-2023-23752

Questa è una POC per CVE-2023-23752 scritta in Python che mostra le informazioni relative a nome utente e password. CVE-2023-23752 Joomla! 4.0.0 4.2.8 Usage = python3 exploit.py L'esecuzione dello script è dimostrata nella GIF seguente:...

CVE-2021-21042

CVE-2021-21042 Ispirato da https://www.zerodayinitiative.com/blog/2021/2/17/zdi-21-171-getting-information-disclosure-in-adobe-reader-through-the-id-tag...

kygocera

kygocera CVE-2022-1026 Versão melhorada em Golang do PoC da Rapid7 para CVE-2022-1026 https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ créditos para Aaron Herndon / https://twitter.com/ac3lives saudações para https://github.com/D4RKMATT3R...

CVE-2026-34616 DNG SDK | Out-of-bounds Read (CWE-125)

DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information from memory. Exploitation of this issue requires user interaction in that a victim must...

CVE-2026-34616

CVE-2026-34616 affects Adobe DNG SDK versions 1.7.1 2502 and earlier , containing an out-of-bounds read (CWE-125) that can lead to sensitive memory exposure . Exploitation requires user interaction : a victim must open a malicious file. The CVSS 3.1 score is 5.5 (MEDIUM) , with local attack vecto...

EUVD-2026-67214

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...