CVE-2021-46070

CVE-2021-46070 Titolo dell'exploit: Vehicle Service Management System - 'Service Requests' Stored Cross Site Scripting XSS Autore dell'exploit: SANU P.L CVE: CVE-2021-46070 CVSS: 4.8 MEDIO Riferimenti:...

CVE-2026-7791

CVE-2026-7791 PoC: Privilegiato per impostazione predefinita Proof-of-concept di ricerca per escalation dei privilegi locale in Amazon WorkSpaces TOCTOU + scrittura arbitraria di file a livello SYSTEM in Skylight Workspace Config Service. Dettagli tecnici completi: Cymulate blog | ---|--- CVE|...

Talon

Talon Talon è un agente di terze parti per Havoc scritto in C. È molto minimalista e ha lo scopo di mostrare come lavorare con l'API di servizio di Havoc. Talon.py è lo script che gestisce i callback, le richieste di registrazione e i task interagendo con l'API di servizio di Havoc...

JuicyPotatoNG

JuicyPotatoNG Solo un'altra escalation di privilegi locali di Windows da account di servizio a System. Dettagli completi su -- https://decoder.cloud/2022/09/21/giving-juicypotato-a-second-chance-juicypotatong/ Utilizzo root@kitploit: JuicyPotatoNG by decoderit & splintercode Mandatory args: -t...

StopDefender

StopDefender Interrompi Windows Defender a livello di programmazione creando un nuovo token utilizzando gli account di servizio TrustedInstaller e Windefend. Azione di arresto con un solo pulsante, nessuna necessità di fornire opzioni della riga di comando né pid. Utile per l'integrazione con...

CVE-2024-38063

CVE-2024-38063 PoC | DKob & N3TCR4SH Übersicht Dieses Skript ist ein Proof of Concept PoC für die Ausnutzung von CVE-2024-38063. Es erzeugt und sendet bösartige fragmentierte IPv6-Pakete mit spezifischen Zieloptionen, um einen Kernel anzugreifen, was potenziell einen Denial-of-Service oder...

CVE-2025-55184_Testing

CVE-2025-55184Testing Script Python per testare CVE-2025-55184 CVE-2025-55184 – Scanner DoS per React Server Components Uno script di validazione della sicurezza sicuro progettato per rilevare CVE-2025-55184 , una vulnerabilità denial-of-service DoS che colpisce React Server Components RSC. Quest...

CVE-2025-5548

⚡ CVE-2025-5548: Ricerca e Sfruttamento delle Vulnerabilità Questo repository fornisce un'analisi tecnica e un walkthrough di prova di concetto per CVE-2025-5548. Questa ricerca copre l'intero ciclo di vita della vulnerabilità, dall'ispezione binaria iniziale allo sfruttamento con successo. ⚠️...

[SECURITY] [DLA 4759-1] xrdp security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4759-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 29, 2026 https://wiki.debian.org/LTS -...

hi_my_name_is_keyboard

Ciao, mi chiamo Keyboard Questo repository contiene script proof-of-concept per CVE-2023-45866, CVE-2024-21306 e CVE-2024-0230. Ulteriori dettagli sono disponibili nel post del blog. Proof of Concept| Descrizione ---|--- Iniezione di tasti su Android| Associa forzatamente una tastiera Bluetooth...

Netis-N5VN-AC1200-DOS

Exploit-Titel: Netis N5VN AC1200 - Buffer-Overflow-DOS Denial of Service Datum: 05.03.2024 Exploit-Autor: Van Lam Nguyen Facebook: fb.com/vanlam1412 Hersteller-Webseite: Netis Systems Version: Netis N5VN AC1200 V1.0.1.1742 Getestet auf: Windows CVE : CVE-2024-44596 Übersicht Es existiert eine...

CVE-2026-0897

CVE-2026-0897 — Google Keras: Denial of Service tramite Shape Bomb HDF5 nel caricamento dei pesi -orange?style=for-the-badge -brightgreen?style=for-the-badge Panoramica...

CVE-2026-19500-poc

CVE-2026-19500 Poc and writeup Description Sureforms is vulnerable to a DOS vulnerability , when attacker can submit unlimited key-value pair, leads to resource exhaustion and the administrator can not watch entries temporary. How to reproduce Submit the Form which is made by Sureforms plugin, an...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Proof-of-concept exploit chain I have discovered assigned as CVE-2026-47301 for Microsoft Configuration Manager SCCM, combining broken access control, CAB extraction-path traversal arbitrary file write, certificate verification bypass, and DLL...

EUVD-2026-67937

A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when processing multipart/form-data requests. Insufficient validation of an attacker-controlled boundary parameter may allow a remote unauthenticated attacker to submit a crafted request that corrupts memory by...

EUVD-2026-67936

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger unexpected termination or instability of the process hosting the UPnP service. Successful exploitation may result in ...

EUVD-2026-67933

An unauthenticated party able to reach the port of a MongoDB Connector for BI mongosqld instance may generate enough routine connection log activity to exhaust the storage backing the configured log path. When a log write or log rotation operation subsequently fails, the resulting error is not...

EUVD-2026-67939

A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI authentication session open indefinitely by beginning a SASL-based login exchange and then declining to complete it. Because the negotiation loop had no overall time bound and the read from the client ha...

EUVD-2026-67960

IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of service due to improper limitation of resources...

EUVD-2026-67935

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action request containing unexpected XML content may cause the UPnP daemon to terminate unexpectedly. Successful exploitation may result in a...