204 matches found
cve-2015-0313
CVE-2015-0313 Adobe Flash vulnerability source code cve-2015-0313 from Angler Exploit Kit Reference: http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-new-adobe-flash-zero-day-exploit-used-in-malvertisements/...
shakeitoff
shakeitoff A smaller, minimized, and cleaner version of InstallerFileTakeOver aka the zero-day exploit that is a "variation" of CVE-2021-41379 later assigned CVE-2021-43883. This version does not pop a shell like InstallerFileTakeOver. The point of this code was to create a simpler proof of conce...
CVE-2019-0708
CVE-2019-0708 Introduzione Microsoft ha rilasciato il suo aggiornamento mensile di sicurezza per maggio. Nell'aggiornamento Patch Tuesday di questo mese è inclusa CVE-2019-0708, una vulnerabilità critica di esecuzione remota di codice che potrebbe consentire a un attaccante remoto non autenticato...
CVE-2022-24086
CVE-2022-24682 PoC Wie funktioniert diese Erkennungsmethode? Wie in den Sicherheitshinweisen angegeben, sind Versionen 8.8.x vor 8.8.15 Patch 30 Update 1 angreifbar. Die Vorlage prüft die folgenden Versionen: root@kitploit: - "8.8" - "8.8.6" - "8.8.7" - "8.8.8" - "8.8.9" - "8.8.10" - "8.8.11" -...
CVE-2021-44228-Demo
CVE-2021-44228-Demo Dieses Projekt dient dem Nachweis und Testen des Zero-Day-log4j-Exploits Abhängigkeit überprüfen ./mvnw dependency:list Patch A setze die Umgebungsvariable LOG4JFORMATMSGNOLOOKUPS=true B Füge VM-Option -Dlog4j2.formatMsgNoLookups=true hinzu C.1 Füge Eigenschaft...
CVE-2023-36874
CVE-2023-36874 Solo a scopo dimostrativo. L'exploit funziona su client/server Windows vulnerabili. Compilare il codice e creare le directory c:\test\system32. Posizionare il proprio wermgr.exe in quella directory ed eseguire il PoC compilato...
Ashwesker-CVE-2026-20045
🚨 CVE-2026-20045 — Analisi della Zero-Day 🚨 🧨 Cos'è Una vulnerabilità critica di esecuzione remota di codice RCE che colpisce diversi prodotti Cisco Unified Communications. È stata sfruttata attivamente in ambienti reali prima del rilascio delle patch. 🔥 Perché è pericolosa 🚫 Nessuna autenticazio...
APT_REPORT
@blackorbird द्वारा एकत्रित APTREPORT https://x.com/blackorbird रोचक APT रिपोर्ट, सैंपल, मैलवेयर, तकनीक और खुफिया जानकारी का संग्रह देश के अनुसार APT समूह Palo Alto Networks Unit 42 द्वारा ट्रैक किए गए थ्रेट एक्टर समूह...
Apache-Struts-0Day-Exploit
Apache-Struts-0Day-Exploit Kritische Remote-Code-Ausführungs-Sicherheitslücke CVE-2018-11776 in Apache Struts gefunden. Installation git clone https://github.com/LightC0der/Apache-Struts-0Day-Exploit/ Verwendung: python ApacheStruts.py URL : www.example.com/ Shell : "Befehle" z.B. ls, dir, whoami...
CVE-2019-19781
Remote Code Execution Exploit CVE-2019-19781- Citrix Application Delivery Controller & Gateway Exploit d'exécution de code à distance pour Citrix Application Delivery Controller et Citrix Gateway CVE-2019-19781 Utilisation : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE ex. : bash...
CVE-2022-29856-PoC
CVE-2022-29856-PoC PoC minimal pour CVE-2022-29856 Crédits : https://dolosgroup.io/blog/2022/4/28/anatomy-of-a-zero-day-how-to-decrypt-a-robot...
106362522
106362522 최근 마이크로소프트가 해커 공격을 받은 Exchange Server 취약점을 패치했다고 발표한 것과 관련해, 대만 DEVCORE는 이미 1월 5일에 보안 취약점을 발견하고 마이크로소프트에 이 취약점을 「CVE-2021-26855」 및 「CVE-2021-27065」로 명명된 제로데이 취약점으로 신고했으며, 동시에 이 취약점을 「ProxyLogon」이라고 부른다고 밝혔습니다. 이번에 공개된 「ProxyLogon」 취약점은 인증 없이 사용할 수 있는 원격 코드 실행Pre-Auth Remote Code...
google-chrome-emergency-update
Aggiornamento di Sicurezza Urgente di Chrome Questo repository contiene informazioni e strumenti relativi all'aggiornamento urgente di Chrome di Google per correggere vulnerabilità di sicurezza critiche. 🚨 Avviso di Aggiornamento Urgente Google ha rilasciato un aggiornamento urgente di Chrome per...
PT-2026-76804
MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled AUTH ENABLED=true but the undocumented, defaultless INTERNAL SERVICE SECRET environment variable is unset, the is internal request check in src/memos/api/middleware/auth.py fails open:...
Patch Tuesday - August 2026
Microsoft is publishing 421 vulnerabilities on August 2026 Patch Tuesday, including 236 vulnerabilities in Windows. This is lower volume than last month’s record-breaking behemoth, but still one of the largest Patch Tuesday totals ever. There is no reason to suppose that Patch Tuesday will ever...
CVE-2026-62839
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:18+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:24+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:15+00:00| seen|...
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
Metabase has warned that a maximum-severity security flaw impacting its business intelligence and data visualization software package has been exploited in the wild as a zero-day. The vulnerability CVSS score: 10.0, which does not carry a CVE identifier, allows an unauthenticated remote attacker ...
Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)
Overview On July 14, 2026, SonicWall published a security advisory addressing two vulnerabilities affecting SMA1000 Series remote access appliances, including the critical server-side request forgery SSRF vulnerability CVE-2026-15409 CVSS 10.0 and the high-severity code injection vulnerability...
Vulnerabilities found in Check Point Remote and Mobile Access VPN-products
Check Point has identified vulnerabilities in Remote and Mobile Access VPN products, specifically those implemented using the IKEv1 key exchange protocol. Two vulnerabilities have been identified in Check Point Security Gateways and Remote Access VPN environments that utilize the outdated IKEv1...
