EUVD-2026-66220

Kimai versions before 2.56.0 fail to restrict the config Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. Attackers with admin privileges can upload malicious templates to exfiltrate server-wide secrets including LDAP bind...

CVE-2026-36356

CVE-2026-36356: MeiG Smart FORGESLT711 GoAhead — Iniezione di comandi del sistema operativo non autenticata /action/SetRemoteAccessCfg CVE : CVE-2026-36356 CWE : CWE-78, CWE-306 Scopritore : Daniil Gordeev Divulgato : 2026-05-03 Riepilogo Il server web GoAhead incluso nei dispositivi CPE 4G LTE...

Security update for broot (moderate)

openSUSE security update: security update for broot ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21675-1 Rating: moderate References: bsc1275994 Cross-References: CVE-2026-72847 CVSS scores: CVE-2026-72847 SUSE : 4.6...

PT-2026-83499

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A security flaw allows remote attackers to perform SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. The issue exists in the...

PT-2026-83498

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A SQL injection issue exists due to improper processing of the /pages/emp edit.php endpoint. A remote attacker can exploit this by manipulating the ID argument to execute...

PT-2026-83501

Name of the Vulnerable Software and Affected Versions PHPGurukul Student Information System version 1.0 Description An issue exists in the /student edit1.php file where manipulating the ID argument allows for remote SQL injection. SQL injection is a technique where malicious SQL statements are...

socgholish_finder

SocGholish Finder Semplice script per scansionare siti web alla ricerca di inject SocGholish. Controlla e mostra l'inject se trovato, e deoffusca e mostra i domini URL shadow. root@kitploit: usage: finder.py -h -url URL -ua USERAGENT -f FILENAME -p PROXY -s SocGholish finder options: -h, --help...

hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

frostbyte

FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...

lab-cve-2025-57819

Lavori in corso FreePBX CVE-2025-57819 Lab - SQLi non autenticata → Catena RCE Nuclei POC Avvia un laboratorio FreePBX 15 riproducibile Docker per validare CVE-2025-57819 — una critica SQL injection non autenticata negli endpoint AJAX di userman che può essere concatenata per ottenere RCE. Includ...

MAL-2026-15524 Malicious code in tabbables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc629ecaf81d15034bbba33363e63776d106e6f58932e889baa4cb748b689eb package.json at line 11 declares a dependency whose key equals the package's own name tabbables and whose value is the raw HTTPS URL...

CVE-2023-27372

Exploit CVE-2023-27372 Exploit per CVE-2023-27372 , una vulnerabilità di esecuzione remota di codice non autenticata nel CMS SPIP che interessa le versioni precedenti alla 4.2.1. ⚠️ Solo a scopo educativo. Utilizzare esclusivamente su sistemi di propria proprietà o per i quali si dispone di...

Metabase-Setup-Endpoint-SQLi-Fix

CVE-2026-72898: SQLi-Patch für den Metabase-Setup-Endpunkt Dieses Repository enthält den Hotfix für CVE-2026-72898 , eine nicht authentifizierte SQL-Injection-Schwachstelle im Setup-Endpunkt von selbst gehosteten Metabase-Instanzen. Ohne den Patch können Angreifer die Validierung des Setup-Tokens...

CVE-2025-50881

CVE-2025-50881: Esecuzione di Codice Remoto in API Use it Flow tramite moniteur.php Identificativo: CVE-2025-50881 Prodotto Affetto: API Use it Flow Versione 8.2.0 Rev 15851, Versione 9.2.0 Rev 18093 Editore: https://www.tenorsolutions.com precedentemente https://api-sas.fr/ Componentei Affettoi:...

PoC-CVE-2025-62222

PoC: CVE-2025-62222 - GitHub Copilot Chat RCE Dieses Repository enthält einen Proof of Concept PoC für die Schwachstelle CVE-2025-62222. Es zeigt, wie eine Remote Code Execution RCE auf dem Rechner eines Entwicklers erreicht werden kann, indem der Kontext von GitHub Copilot Chat in VS Code durch...

CVE-2022-36804-Bitbucket-RCE-Analysis

CVE-2022-36804: Bitbucket Remote Command Execution RCE Analisi Tecnica & Sfruttamento in Laboratorio dell'Argument Injection tramite Null-Byte Riepilogo della Vulnerabilità CVE-2022-36804 è una vulnerabilità di Argument Injection ad alta gravità/critica all'interno dell'API REST di Atlassian...

CVE-2024-51482-ZoneMinder-v1.37.-1.37.64-SQL-Injection-POC

ZoneMinder Time-Based SQL Injection CVE-2024-51482 📌 Panoramica della vulnerabilità CVE ID: CVE-2024-51482 Avviso di sicurezza: GHSA-qm8h-3xvf-m7j3 Versioni interessate: ZoneMinder 1.37. fino alla 1.37.64 inclusa Versione corretta: 1.37.65 📖 Descrizione Questo repository contiene un exploit...

CVE-2024-11003-POC

CVE-2024-11003-POC Beschreibung Qualys entdeckte, dass needrestart vor Version 3.8 unsanitisierte Daten an eine Bibliothek Modules::ScanDeps übergibt, die sichere Eingaben erwartet. Dies könnte es einem lokalen Angreifer ermöglichen, beliebige Shell-Befehle auszuführen. Siehe auch die zugehörige...

CVE-2025-66034

CVE-2025-66034 — fontTools varLib Scrittura Arbitraria di File → RCE PoC exploit per una vulnerabilità di Scrittura Arbitraria di File + Iniezione XML infontTools.varLib Testato su HackTheBox — VarIaType Vulnerabilità fontTools.varLib elabora file XML .designspace per creare font variabili. Due...

GHSA-XVR9-35CR-46V9 org.mariadb.jdbc:mariadb-java-client has Inappropriate Encoding for Output Context

Summary The connector encodes and decodes all character data assuming the connection character set is UTF-8. A server can change charactersetclient mid-session to a non-UTF-8 charset, after which the driver and server interpret the same bytes under different encodings, causing silent data...