857 matches found
betwixt
Betwixt ti aiuterĂ ad analizzare il traffico web al di fuori del browser utilizzando la familiare interfaccia di Chrome DevTools. Installazione Scarica l'ultima versione per il tuo sistema operativo, crea il tuo bundle o esegui Betwixt dal codice sorgente. Configurazione Per catturare il traffico...
CVE-2026-23520
CVE-2026-23520 PoC di Esecuzione Remota di Comandi RCE tramite API MCP đ Panoramica Questo repository contiene un Proof-of-Concept PoC per una vulnerabilitĂ di Esecuzione Remota di Comandi RCE che colpisce applicazioni che espongono un endpoint API MCP vulnerabile comunemente /api/mcp/connect. La...
SirepRAT
SirepRAT - RCE als SYSTEM auf Windows IoT Core SirepRAT bietet vollständige RAT-Fähigkeiten, ohne dass eine echte RAT-Malware auf dem Ziel installiert werden muss. Kontext Die Methode nutzt den Sirep Test Service aus, der in den offiziellen Images integriert ist und auf ihnen läuft, die auf der...
CVE-2024-31317-Deployer
CVE-2024-31317 Deployer đ Dichiarazione sulla Ricerca di Sicurezza Questo progetto è destinato esclusivamente a scopi di ricerca sulla sicurezza e finalitĂ didattiche. L'uso di questo strumento per test non autorizzati è illegale. Gli autori non sono responsabili per eventuali abusi o danni. đ...
Enumprotections_BOF
Enumprotections BOF Questo BOF può essere utilizzato per enumerare i processi di sistema e identificare il livello di protezione di ciascuno di essi. Vengono restituite anche informazioni aggiuntive, come la relazione con i servizi, l'utente, la sessione e il percorso. Queste informazioni,...
CVE-2026-76350
CVE-2026-76350 is an improper privilege management vulnerability in Splunk Enterprise affecting versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 . A user holding the schedule_search role capability can configure PDF attachments in the email alert action workflow. When the alert fires, the search...
CVE-2026-18759
The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication IPC mechanism protected by AES encryption. Because the encryption key file is readable by standard users and protected using DPAPI. Any authenticated local user can recover the...
EUVD-2026-52064
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748...
PT-2026-70737
Name of the Vulnerable Software and Affected Versions Microsoft Windows Ancillary Function Driver for WinSock affected versions not specified Description A use-after-free condition exists in the Windows Ancillary Function Driver for WinSock. This issue allows an authorized attacker with existing...
CVE-2026-15379
CVE-2026-15379 : The Altiris WMI provider exposes the AltirisAgent_Stream class, allowing any local standard user to read files accessible to the SYSTEM context, bypassing filesystem ACLs. The provider uses LocalSystem context for WMI queries without re-impersonating the caller, enabling read acc...
CVE-2026-7162
Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software...
CVE-2026-7162
Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software...
CVE-2026-7162
Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software...
CVE-2026-7162
Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software...
EUVD-2026-43268
Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software...
CVE-2026-7162
CVE-2026-7162 involves an integer overflow that could allow an attacker to achieve system-level access to the affected software. The linked sources indicate a local attack vector with high impact (confidentiality, integrity, and availability all rated high) and require no user interaction, with p...
PT-2026-57622
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An integer overflow occurs, which could allow an attacker to achieve system-level access to the affected software. An integer overflow is a condition where an...
Security Bulletin: Security vulnerability in IBM Storage Protect Client leads to unauthorized access to IBM Storage Protect Snapshot for Windows Standalone Configuration
Summary Security vulnerability in IBM Storage Protect Client leads to unauthorized access to IBM Storage Protect Snapshot for Windows Standalone Configuration. CVE-2026-12628 Vulnerability Details CVEID:CVE-2026-12628 DESCRIPTION: IBM Storage Protect Client 8.1.0.0 through 8.2.1.0 and IBM Storage...
CVE-2026-7569
Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Quest NetVault Backup. User interaction is required to exploit this vulnerability in that the target must vis...
CVE-2026-9787
Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although authentication is required to exploit this vulnerability, the existing...