evilnotify

EvilNotify تطبيق iOS بسيط حقاً يتعامل مع CVE-2025-24091؛ ليس مفيداً حقاً، فقط للمتعة التثبيت 1. احصل على أحدث ملف .ipa من تبويب الإصدارات 2. ثبّته عبر LiveContainer أو أي خدمة سايدلود الاستخدام أضف مفاتيح مخصصة أو استخدم المفاتيح المُعدّة مسبقاً. !NOTE إذا وجدت أي مفاتيح رائعة، أرسلها لي عبر...

RAU_crypto

RAUcrypto Exploit combinato per Telerik UI per ASP.NET AJAX. Caricamento file per CVE-2017-11317 e CVE-2017-11357 - caricherà automaticamente il file Deserializzazione .NET per CVE-2019-18935 Ora supporta il test della capacità del target di recuperare payload remoti da un servizio SMB ospitato...

CVE-2026-41490

CVE-2026-41490 — SQL Injection nei database I/O manager di Dagster tramite chiavi di partizione dinamiche Gravità : Alta CVSS 8.x — AV:N/AC:L/PR:L/UI:N + C:H/I:H/A:H CWE : CWE-89 — SQL Injection Interessati : integrazioni I/O manager per database di dagster — dagster-duckdb, dagster-snowflake,...

EUVD-2026-67233

Dolibarr before 24.0.0 contains a SQL injection in its CSV and XLSX import wizard. The wizard reads its update keys with GETPOST'updatekeys', 'array' in htdocs/imports/import.php, which applies only the generic alphanohtml filter: that strips HTML but leaves SQL keywords, comment markers,...

Fix-CVE-2023-36884

Fix-CVE-2023-36884.ps1 Soluzione temporanea per mitigare la vulnerabilità CVE-2023-36884. Questa vulnerabilità riguarda il sistema operativo Windows e può consentire l'esecuzione remota di codice dannoso. CVE-2023-36884 » CVE-2023-36884 La vulnerabilità CVE-2023-36884 è un difetto di sicurezza...

CVE-2026-81527 NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation

A NoSQL/expression injection weakness exists in the LINQ-to-aggregation query translation layer of the MongoDB C Driver, in both aggregation expression and query filter translation. When application-supplied values are embedded in certain query constructs, special elements contained within those...

CVE-2026-81527

CVE-2026-81527 is a NoSQL/expression injection flaw in the MongoDB C# Driver , specifically in the LINQ-to-aggregation query translation layer affecting both aggregation expression and query filter translation. The root cause is that unquoted constant GroupBy keys in LINQ pipeline translation are...

CVE-2025-14611-CentreStack-and-Triofox-full-Poc-Exploit

CVE-2025-14611 CentreStack e Triofox PoC/Exploit completo Riepilogo Questa vulnerabilità deriva da chiavi crittografiche hardcoded nei prodotti Gladinet CentreStack e Triofox, consentendo la lettura arbitraria di file tramite ticket di accesso falsificati. L'implementazione della crittografia...

EUVD-2026-67173

There is no allow list for property keys when Spring Cloud Commons writable /actuator/env is enabled. Spring Cloud Commons 5.0.0 - 5.0.2 Spring Cloud Commons 4.3.0 - 4.3.3 Spring Cloud Commons 4.0.0 - 4.2.6 Spring Cloud Commons 3.1.10 and earlier...

CVE-2026-59284

Spring Cloud Commons lacks an allow list for property keys when the writable /actuator/env endpoint is enabled. Affected versions include 5.0.0–5.0.2 , 4.3.0–4.3.3 , 4.0.0–4.2.6 , and 3.1.10 and earlier . The vulnerability requires high privileges (CVSS 3.1: 7.6 HIGH , scope changed) and can lead...

CVE-2026-81703

opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...

aws_pwn

AWS pwn Zusammenfassung Dies ist eine Sammlung von schrecklich geschriebenen Skripten zur Durchführung verschiedener Aufgaben im Zusammenhang mit Penetrationstests von AWS. Seien Sie nicht traurig, wenn es bei Ihnen nicht funktioniert. Möglicherweise hat sich AWS geändert, seit ein bestimmtes Too...

meshtastic-cve-2025-52464-poc

Prova di concetto di Meshtastic CVE-2025-52464 Panoramica Questo progetto è una prova di concetto esclusivamente software che dimostra CVE-2025-52464 , una vulnerabilità che interessa le versioni del firmware Meshtastic dalla 2.5.0 alla 2.6.10. L'implementazione riproduce il comportamento...

shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...

shhgit

🚨 shhgit não é mais mantido. Se precisar de suporte ou consultoria para seus esforços de varredura de segredos, envie um e-mail para [email protected] 🚨 shhgit ajuda equipes de desenvolvimento, operações e segurança com visão de futuro a proteger seus segredos em todo o código antes que isso...

CVE-2020-0688

CVE-2020-0688 Microsoft Exchange Server - Esecuzione di codice in remoto RCE tramite chiave crittografica fissa Invece di avere chiavi generate casualmente per ogni installazione, tutte le installazioni di Microsoft Exchange Server hanno gli stessi valori validationKey e decryptionKey in...

SecretFinder

Informazioni su SecretFinder SecretFinder è uno script python basato su LinkFinder, scritto per scoprire dati sensibili come apikey, token di accesso, autorizzazioni, jwt, ecc. nei file JavaScript. Lo fa utilizzando jsbeautifier per python in combinazione con un'espressione regolare piuttosto...

CVE-2026-81703

openssl_encrypt versions before 1.4.9 fail to validate the encryption status of embedded post-quantum private keys in file metadata. An attacker can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext wit...

EUVD-2026-67059

opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...

CVE-2026-81703 openssl_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Key

opensslencrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft files with unencrypted embedded PQC keys that decrypt under any password, bypassing authentication and producing attacker-chosen plaintext with false...