GNUnet P2P Framework 0.26.2

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...

CVE-2023-51764

CVE-2023-51764 Postfix SMTP Smuggling - Expect Script POC send an email that is legitimate, but inside the email there is many others emails different senders, recipients, subjet, etc. The initial email is check for SPF/DKIM/DMARC, the others inside are not ! usage: ./cve-2023-51764.sh mx.fqdn po...

CVE-2025-67733

RESP Protocol Injection PoC Proof-of-concept demonstrating RESP Protocol Injection vulnerability via Lua script error messages in Valkey/Redis. Files backend.py Flask backend simulating a web application with shared Valkey connection connection pooling. Endpoints:...

spring-boot-log4j-cve-2021-44228-docker-lab

Spring Boot Log4j - CVE-2021-44228 The Log4Shell vulnerability CVE-2021-44228 ultimately is a quite simple JNDI Injection flaw, but in a really really bad place. Log4J will perform a JNDI lookup while expanding placeholders in logging messages or indirectly as parameters for formatted messages...

CVE-2020-17008

CVE-2020-17008 splWOW64 Elevation of Privilege C:\Windows\splwow64.exe Poc From: https://bugs.chromium.org/p/project-zero/issues/detail?id=2096 0x01 Set splwow64poc.exe Low cd splwow64poc\x64\Release icacls splwow64poc.exe /setintegritylevel L root@kitploit: /setintegritylevel CIOI level explicit...

Security Bulletin: The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure (CVE-2025-36348)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the information disclosure vulnerability Vulnerability Details CVEID:CVE-2025-36348 DESCRIPTION: IBM Sterling B2B Integrator versions 6.1.0.0 through 6.1.2.72, 6.2.0.0 through 6.2.0.5, and 6.2.1.0 through 6.2.1.1, an...

EUVD-2026-67297

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages must come from a device that has already joined the network. Only provisioners supporting extended advertisements may b...

EvilSlackbot

EvilSlackbot Un framework di attacco Slack per condurre esercitazioni Red Team e phishing all'interno degli spazi di lavoro Slack. Disclaimer Questo strumento è destinato esclusivamente ai professionisti della sicurezza. Non utilizzare questo strumento contro un'area di lavoro Slack senza esplici...

Security Bulletin: Security Vulnerability in Apache Kafka affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-35554, CVE-2026-33558)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the vulnerability. Vulnerability Details CVEID:CVE-2026-33558 DESCRIPTION: Information exposure vulnerability has been identified in Apache Kafka. The NetworkClient component will output entire requests and responses...

git-vuln-finder

git-vuln-finder Finden von potenziellen Software-Sicherheitslücken aus Git-Commit-Nachrichten. Das Ausgabeformat ist ein JSON mit dem zugehörigen Commit, der einen Fix bezüglich einer Software-Sicherheitslücke enthalten könnte. Die Suche basiert auf einer Reihe von regulären Ausdrücken, die nur a...

twittor

Twittor Un backdoor stealthy basato su Python che utilizza Twitter Messaggi Diretti come server di comando e controllo. Questo progetto è stato ispirato da Gcat che fa lo stesso ma utilizzando un account Gmail. Setup Per farlo funzionare hai bisogno di: Un account Twitter Usa un account dedicato!...

libtaxii

libtaxii Una libreria Python per la gestione dei messaggi v1.x di Trusted Automated eXchange of Indicator Information TAXII™ e per l'invocazione dei servizi TAXII. :Origine: https://github.com/TAXIIProject/libtaxii/ :Documentazione: https://libtaxii.readthedocs.io/ :Informazioni:...

CVE-2026-30056

A NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via supplying crafted NGAP messages during the initialization of a new RAN connection...

CVE-2026-26459

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a vulnerability in the option parsing logic that causes a segmentation fault when processing malformed COAP messages with insufficient option data...

cve-2016-1764

Codice Exploit PoC per CVE-2016-1764 Recupero dei dati iMessage in chiaro senza violare la crittografia Autori Shubham Shah di Bishop Fox Joe DeMesy di Bishop Fox Matthew Bryant CVE-2016-1764 Vendor: Apple Data di rilascio: 8 aprile 2016 Data della patch: 21 marzo 2016 Sistemi interessati: Messag...

CVE-2026-31281

CVE-2026-31281 Beschreibung Totara LMS ist anfällig für HTLM-Injection. Ein Angreifer kann bösartigen HTLM-Code in eine Nachricht injizieren und sie an alle Benutzer der Anwendung senden, was zur Ausführung des Codes führt und zu Session-Hijacking sowie zur Ausführung von Befehlen im Browser des...

CFB

Was ist das? !CAUTION CFB ist für Forschungs- und Debug-Zwecke gedacht und sollte niemals auf Produktionssystemen eingesetzt werden. Es kann zu BSoD kommen. Du wurdest gewarnt. Canadian Furious Beaver ist ein ProcMon-ähnliches Werkzeug, das ausschließlich zum Erfassen von IRPs entwickelt wurde, d...

Copy-Fail-CVE-2026-31431-Statically-PoC

PoC statico in Go per Copy-Fail CVE-2026-31431 Questo repository contiene una portabilità in Go del proof of concept pubblico in Python di theori-io/copy-fail-CVE-2026-31431. Il programma è solo per Linux. Utilizza l'interfaccia Linux AFALG, i messaggi di controllo AEAD e splice2 per preservare i...

Ghost CMS - User Enumeration

Ghost CMS 5.9.4 contains a user enumeration vulnerability in the login functionality. The application reveals whether a user account exists through different error messages, allowing attackers to enumerate valid user accounts via specially-crafted HTTP requests. id: CVE-2022-41697 info: name: Gho...

WordPress User Messages <= 1.2.4 - Reflected XSS

WordPress User Messages plugin = 1.2.4 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires victim to load a...