CVE-2024-0197-POC

CVE-2024-0197-POC Proof of concept per l'Escalation dei Privilegi Locali in Thales Sentinel HASP LDK. Inizialmente volevo svilupparne uno, ma alla fine si è rivelato non necessario. Non c'è una race condition da vincere, e un semplice hijacking dell'ordine di ricerca DLL da una posizione nota è...

Patch-the-Path-CVE-2025-55234-Detection-Defense

Patch-the-Path-CVE-2025-55234-Detection-Defense Dieses Playbook beschreibt Erkennungs-, Eindämmungs- und Behebungsstrategien für CVE-2025-55234, einen kritischen Windows-SMB-Privilegieneskalationsfehler. Von Mark Mallia Einleitung In der heutigen, sich ständig verändernden Cyber-Risikolandschaft...

gardyn-hack

Zusammenfassung Im Februar 2025 führte ich Sicherheitsforschung an einem Gardyn Home 4.0 Gerät durch. Während meiner Forschung entdeckte ich mehrere Schwachstellen und schlechte Sicherheitspraktiken. Durch Ausnutzung dieser Schwachstellen könnte ein Angreifer Systemzugriff auf ein Gardyn-Gerät...

UniFi Network Application - Path Traversal

UniFi Network Application contains a path traversal vulnerability allowing a network attacker to access and manipulate files on the underlying system, potentially leading to account access, exploit requires network access. id: CVE-2026-22557 info: name: UniFi Network Application - Path Traversal...

CVE-2026-69414 ShieldBreak Zero-Day: No Patch, and CISA BOD 26-04 Gives You 14 Days

Executive Summary ShieldBreak CVE-2026-69414 is a zero-day elevation-of-privilege vulnerability in the Microsoft Malware Protection Engine used by Microsoft Defender, allowing a low-privilege local attacker to escalate to SYSTEM. A public PoC was released on August 12, 2026, and Microsoft assigne...

CVE-2026-42980-POC

CVE-2026-42980 Divulgazione pubblica Questo repository contiene il materiale di divulgazione pubblica per CVE-2026-42980 , una vulnerabilità di integer-underflow WMI nel kernel Windows che può essere sfruttata per l'elevazione locale dei privilegi a NT AUTHORITY\SYSTEM su build di laboratorio...

eternalblue-ms17-010-research

💀 EternalBlue MS17-010 Ricerca sullo Sfruttamento Riproduzione controllata di CVE-2017-0144 — la vulnerabilità SMB dietro l'epidemia del ransomware WannaCry ⚠️ Disclaimer: Questa ricerca è stata condotta in un ambiente di laboratorio completamente isolato e controllato, esclusivamente per scopi...

Fsociety-CVE-2024-0670-CheckMK-LPE

🚀 Fsociety-CVE-2024-0670-CheckMK-LPE - وصول قوي للنظام بكل سهولة 📦 نظرة عامة مرحبًا صديقي. تفتح هذه الأداة وصولًا متقدمًا لـ CheckMK CVE-2024-0670. تستفيد من معالجة ضعيفة للملفات للحصول على دعم SYSTEM. تتضمن البرنامج ميزة استمرارية متخصصة. تم تطويره بلغة C++ ويهدف إلى تزويد المستخدمين بالأدوات...

Malicious code in npm_pkg_1094 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe875cbf7a0714bb15d688c4eeba441eb6d7f02a73dd3657c11ade00e64bbc00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-73429 vulnerabilities

Vulnerabilities for packages: yazi...

CVE-2026-73429 vulnerabilities

Vulnerabilities for packages: yazi...

GHSA-M65R-RPRJ-R5RG vulnerabilities

Vulnerabilities for packages: yazi...

MAL-2026-13841 Malicious code in vkldhcmieru6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25890a37fa8da48d2dc2868e010cef8cb3427faa42218cec4b858ac82db679d7 The package contains only index.html declared as main in package.json and a minimal package.json with no lifecycle scripts. The HTML impersonates a...

ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access

The security researcher going by the name Chaotic Eclipse aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse has released a proof-of-concept PoC for a new Microsoft zero-day called ShieldBreak. The vulnerability, rooted in Microsoft Defender for Windows, demonstrates a patch bypass for...

CVE-2026-72593

The CVE-2026-72593 entry concerns dulldusk/phpfm up to version 1.8.0, where a missing authentication flaw permits an unauthenticated remote attacker to access the full file management capabilities (read, write, delete, upload) on the server filesystem. The root cause is an authentication check in...

CVE-2026-54218

CVE-2026-54218 affects Tobit Laboratories AG TeamDavid’s Webbox. The issue stems from use of a hard-coded cryptographic key and password storage across locally created users in David, where passwords are stored in various files using only obfuscation. If an attacker can access the server’s file s...

The vulnerability of the context Isolation mechanism of the software platform for creating Electron applications allows a attacker to gain full access to the system.

The vulnerability of the context isolation mechanism of the Electron application development platform is related to the breach of data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to gain full access to the system...

CVE-2026-16315

OMICRON StationGuard before version 4.10 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate...

CVE-2026-16315 Authentication and authorization bypass via cryptographic timing side-channel attack in StationGuard

OMICRON StationGuard before version 4.10 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate...

CVE-2026-16315

CVE-2026-16315 affects OMICRON StationGuard prior to 4.10. The issue is a cryptographic timing side-channel in the backend authentication mechanism, allowing an unauthenticated attacker to forge valid credentials, bypass authentication/authorization, and impersonate legitimate clients. This can g...