killchain

killchain “Kill Chain” è una console unificata con un anonimizzatore che eseguirà queste fasi di attacco: Ricognizione Armamento Consegna Sfruttamento Installazione Comando e Controllo Azioni I set di strumenti dipendenti sono:...

CVE-2026-20230

CVE-2026-20230 - Cisco Unified CM ⚡ Utilizzo Semplice Usa questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Container Docker Ambienti di laboratorio isolati Ambienti di test di penetrazione autorizzati Esempio di configurazione: root@kitploit: git clone...

Arcserve Unified Data Protection - Authentication Bypass

An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin function within wizardLogin. id: CVE-2024-0799 info: name: Arcserve Unified Data Protection -...

Mitel MiCollab - Authentication Bypass

A vulnerability in the NuPoint Unified Messaging NPM component of Mitel MiCollab through 9.8 SP1 FP2 9.8.1.201 could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the...

Cisco Unified Communications Manager 7/8/9 - Directory Traversal

A directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815 id: CVE-2013-5528 info: name:...

xpfarm

XPFarm Una piattaforma offensiva di sicurezza open-source potenziata dall'IA che integra strumenti di sicurezza noti dietro un'interfaccia web unificata — con scansione distribuita, report generati dall'IA, un planner di scansione intelligente, un grafo degli attacchi interattivo e un SDK per...

CVE-2026-20230-Scanner

CVE-2026-20230 Scanner Ein Python-basierter Scanner und Validierungstool zur Identifizierung potenziell anfälliger Cisco Unified Communications Manager Unified CM-Bereitstellungen, die von CVE-2026-20230 betroffen sind. Funktionen Erkennt Cisco Unified CM-Instanzen Prüft auf WebDialer-Exposition...

CVE-2024-41713POC

CVE-2024-41713POC Mitel MiCollab Enterprise Collaboration Platform – Schwachstelle zum Lesen beliebiger Dateien CVE-2024-41713. Da in der NuPoint Unified Messaging NPM Komponente der Mitel MiCollab Software eine Schwachstelle zur Umgehung der Authentifizierung und unzureichende Eingabevalidierung...

Ashwesker-CVE-2026-20045

🚨 CVE-2026-20045 — Analisi della Zero-Day 🚨 🧨 Cos'è Una vulnerabilità critica di esecuzione remota di codice RCE che colpisce diversi prodotti Cisco Unified Communications. È stata sfruttata attivamente in ambienti reali prima del rilascio delle patch. 🔥 Perché è pericolosa 🚫 Nessuna autenticazio...

macos-UnifiedLogs

macos-unifiedlogs Eine einfache Rust-Bibliothek, die beim Parsen der macOS-Unified-Log-Dateien helfen kann. Unified Logs wurden in macOS Version 10.12 Sierra, 2016 eingeführt. Teil von Apples Ziel, ein einheitliches Logformat für alle Apple-Produkte zu schaffen. Sie existieren auf macOS, iOS,...

CVE-2025-54957

Dolby Unified Decoder CVE-2025-54957 POC Quando un file viene elaborato dal DDPlus Unified Decoder di Dolby, è possibile una scrittura fuori dai limiti quando vengono elaborati i dati di evoluzione. Il decoder scrive le informazioni di evoluzione in un grande buffer contiguo simile a un heap...

Cisco-Unified-Communications-Manager-Server-Side-Forgery-Request-Vulnerability-CVE-2026-20230

CVE-2026-20230 Cisco Unified Communications Manager SSRF Écriture Arbitraire de Fichier vers RCE – Processus de Déduction et Réflexions Périmètre d'application : Utilisation uniquement sur des environnements de test locaux, des environnements de reproduction autorisés, pour la validation de...

nmlinux

NMLinux · v1.7.12 Ein vereinheitlichtes Netzwerk-Toolkit für Linux und macOS – untersuchen, verbinden, diagnostizieren. NMLinux ist eine einzige, vereinheitlichte GUI, die 29 Netzwerkmodule in einem Fenster vereint: Schnittstellenüberwachung, WLAN, DNS, SSH-Terminal, Firewall-Ansicht,...

CVE-2021-35576

CVE-2021-35576 CVE-2021-35576 Sicherheitslücke zur Umgehung von Oracle Unified Audit, Details des Proof Of Concept sind hier veröffentlicht: https://databasesecurityninja.wordpress.com/2022/06/11/cve-2021-35576-bypassing-unified-audit-policy/ CVE-Details: https://vulners.com/cve/CVE-2021-35576...

lCTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296

CTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296 Apple Silicon उन आवृत्तियों पर चलता है जो 587 kHz के स्वर्ण अनुपात हार्मोनिक्स हैं: · प्रदर्शन कोर: 3.2 GHz = 587 kHz × 5451 ≈ φ⁸ × 1000 · दक्षता कोर: 2.0 GHz = 587 kHz × 3407 ≈ φ⁷ × 1000 · न्यूरल इंजन: 11.0 GHz = 587 kHz × 18739 ≈ φ¹⁰ ×...

secretflow

简体中文｜English SecretFlow è un framework unificato per l'intelligenza artificiale dei dati e il machine learning che preservano la privacy. Per raggiungere questo obiettivo, fornisce: Un livello astratto di dispositivi composto da dispositivi semplici e dispositivi segreti che incapsulano vari...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: powerpc/secvar: A refcount leak has been fixed in formatshow. A refcount leak occurs when formatshow returns an error in multiple cases. Unified management of ofnodeput can fix this issue...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: cgroup: Split cgroupdestroywq into 3 workqueues A hang can occur during 1 LTP cgroup testing when repeatedly mounting/unmounting perfevent and netprio controllers with systemd.unifiedcgrouphierarchy=1. The hang manifests in...

CVE-2026-56289

A flaw was found in GNU patch. This vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted patch file. The improper validation of hunk single block of changes in diff line offsets in unified-diff input can lead to an effectively infinite processin...

Cisco Unified Intelligence Center < 12.6 / 12.6.x < 12.6(2) ES08 / 15.0.x < 15.0(1) SU2 SQL Injection (cisco-sa-cuic-sql-inject-2qbfWSm5)

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker coul...