Sitecore Experience Platform - Deserialization of Untrusted Data

Sitecore Experience Platform before 8.2 Update-7 and 9.0 before Update-2 is vulnerable to a remote code execution vulnerability CVE-2019-9874. An attacker can exploit this issue to execute arbitrary code on the affected system via a crafted request to the...

Barco/AWIND OEM Presentation Platform - Remote Command Injection

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pr...

Sitecore - Remote Code Execution

Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3. id: CVE-2023-35813 info: name: Sitecore - Remote Code Execution author: DhiyaneshDk,iamnoooob severity: critical description: | Multiple Sitecore...

XWiki < 4.10.20 - Remote code execution

XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, XWiki's database search allows remote code execution through the search text. This allows remote code execution for any visitor of a public wiki or user of a close...

XWiki Platform - Remote Code Execution

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Improper escaping in the document SkinsCode.XWikiSkinsSheet leads to an injection vector from view right on that document to programming rights, or in other words, it is possible to execute...

Open Automation Software OAS Platform V16.00.0121 - Missing Authentication

An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to unauthenticated use of the REST API. An attacker can send a series of HTTP requests to trigger this...

ServiceNow - Incomplete Input Validation

ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addresse...

GiveWP - PHP Object Injection

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the 'givetitle' parameter. id: CVE-2024-5932 info: name: GiveWP - PHP Object Injection author:...

SAP Memory Pipes (MPI) Desynchronization

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable to request smuggling and request concatenation attacks. An unauthenticated attacker can prepend a victim's request with arbitrary data. This...

DataEase - Remote Code Execution

DataEase is an open-source business intelligence and data visualization platform. Public advisories state that CVE-2025-49002 is related to a bypass in the previous fix for CVE-2025-32966 involving case-insensitive handling of restricted H2 JDBC keywords. This template is a non-invasive detection...

d8-copy-fail-mitigation

Mitigazione CVE-2026-31431 per Deckhouse Kubernetes Platform Lingua: English | Русский | Italiano Informazioni sulla vulnerabilità CVE-2026-31431 è una vulnerabilità nel modulo algifaead del kernel Linux, che espone l'API crittografica del kernel allo spazio utente attraverso la famiglia di socke...

libptrace

libptrace libptrace è un framework per il debug, tracing e manipolazione di processi/thread guidato dagli eventi. È scritto in C e ha binding per Python 2.7 e 3.7. È progettato per essere usato come libreria. L'API è stata pensata con il supporto multipiattaforma in mente. Sebbene la versione...

ZipCracker

ZipCracker ZipCracker è un'utility semplice ma potente per la forza bruta delle password, progettata per decifrare archivi ZIP protetti da password. È costruito con Qt e integra un motore di cracking personalizzato, offrendo supporto sia CLI che GUI. ⚡ Disclaimer: Questo strumento è destinato...

CVE-2025-29722

🛡️ CVE-2025-29722 – Cross Site Request Forgery CSRF in Commercify v1.0 Scoperto da: David P.S Abraham alias Davycipher CVE ID CVE-2025-29722 è stato assegnato a questa vulnerabilità da MITRE Corporation. Riepilogo Una vulnerabilità CSRF è stata identificata in Commercify v1.0 , una piattaforma di...

WebGoat.NET

Webgoat.NET الكود المصدري: https://github.com/jerryhoff/WebGoat.NET تحميل zip: https://github.com/jerryhoff/WebGoat.NET/zipball/master تطبيق الويب هذا هو منصة تعليمية تحاول التعليم عن عيوب أمن الويب الشائعة. يحتوي على عيوب أمنية عامة تنطبق على معظم تطبيقات الويب. كما يحتوي على دروس تتعلق تحديدًا ...

NoFilter

NoFilter Strumento per abusare della piattaforma di filtro di Windows per l'escalation dei privilegi. Può avviare una nuova console come "NT AUTHORITY\SYSTEM" o come un altro utente che ha effettuato l'accesso alla macchina. Utilizzo root@kitploit: Usage: NoFilter.exe -s SESSIONID Crediti Ron Ben...

silicon2022-capturetheflag

silicon2022-ctf Über Eine CTF mit 41 Flags, die auf der RootTheBox-Plattform basiert. Die Infrastruktur wurde größtenteils auf dem Azure Kubernetes Service bereitgestellt. Terminal-Challenges wurden über Docker-Images mit einer modifizierten Version von WeTTY bereitgestellt. Erstellen Die meisten...

faraday-cli

Faraday on the terminal Use faraday directly from your favorite terminal faraday-cli is the official client that make automating your security workflows, easier. Before installing, we recommend creating and activating a Python virtual environment to avoid affecting your system Python packages. Fo...

apache__jspwiki_CVE-2019-10077_2-11-0-M3

Apache JSPWiki 2.11 - Dokumentation root@kitploit: Lizenziert unter der Apache Software Foundation ASF im Rahmen einer oder mehrerer Mitwirkenden-Lizenzvereinbarungen. Siehe die NOTICE-Datei, die mit dieser Arbeit verteilt wird, für zusätzliche Informationen bezüglich des Urheberrechts. Die ASF...

apache__jspwiki_CVE-2019-0225_2-11-0-M2

Apache JSPWiki 2.11 - Documentazione root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...