CVE-2019-19781

Remote-Code-Ausführung-Exploit CVE-2019-19781 – Citrix Application Delivery Controller & Gateway Exploit für Remote-Code-Ausführung für Citrix Application Delivery Controller und Citrix Gateway CVE-2019-19781 Verwendung: bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE z.B : bash...

CVE-2019-0708

CVE-2019-0708 Einführung Microsoft hat sein monatliches Sicherheitsupdate für Mai veröffentlicht. In diesem Patch Tuesday ist CVE-2019-0708 enthalten, eine kritische Schwachstelle zur Remotecodeausführung, die es einem nicht authentifizierten Remote-Angreifer ermöglichen könnte, auf einem...

CVE-2022-29856-PoC

CVE-2022-29856-PoC Minimaler PoC für CVE-2022-29856 Quelle: https://dolosgroup.io/blog/2022/4/28/anatomy-of-a-zero-day-how-to-decrypt-a-robot...

106362522

106362522 Em relação ao recente anúncio da Microsoft sobre a correção de vulnerabilidades do Exchange Server atacadas por hackers, a DEVCORE de Taiwan informou que já havia descoberto as falhas de segurança em 5 de janeiro e notificado a Microsoft sobre essas vulnerabilidades de dia zero,...

APT_REPORT

@blackorbird द्वारा एकत्रित APTREPORT https://x.com/blackorbird रोचक APT रिपोर्ट, सैंपल, मैलवेयर, तकनीक और खुफिया जानकारी का संग्रह देश के अनुसार APT समूह Palo Alto Networks Unit 42 द्वारा ट्रैक किए गए थ्रेट एक्टर समूह...

shakeitoff

shakeitoff Eine kleinere, minimierte und aufgeräumtere Version von InstallerFileTakeOver, auch bekannt als der Zero-Day-Exploit, der eine "Variation" von CVE-2021-41379 ist dem später CVE-2021-43883 zugewiesen wurde. Diese Version öffnet keine Shell wie InstallerFileTakeOver. Der Zweck dieses Cod...

CVE-2021-44228-Demo

CVE-2021-44228-Demo यह परियोजना zero-day log4j exploit को साबित करने और परीक्षण करने के लिए है। निर्भरता सत्यापित करें ./mvnw dependency:list patch A सेट करें ENV LOG4JFORMATMSGNOLOOKUPS=true B जोड़ें vm option -Dlog4j2.formatMsgNoLookups=true C.1 जोड़ें properties log4j2.formatMsgNoLookups=true...

google-chrome-emergency-update

Atualização de Segurança de Emergência do Chrome Este repositório contém informações e ferramentas relacionadas à atualização de emergência do Chrome do Google que aborda vulnerabilidades críticas de segurança. 🚨 Aviso de Atualização de Emergência O Google emitiu uma atualização de emergência do...

Apache-Struts-0Day-Exploit

Apache-Struts-0Day-Exploit ثغرة تنفيذ تعليمات برمجية عن بُعد حرجة CVE-2018-11776 اكتُشفت في Apache Struts. التثبيت git clone https://github.com/LightC0der/Apache-Struts-0Day-Exploit/ الاستخدام: python ApacheStruts.py URL : www.example.com/ Shell : "الأوامر" أي ls, dir, whoami...

CVE-2023-36874

CVE-2023-36874 Nur zu Demonstrationszwecken. Der Exploit funktioniert auf anfälligen Windows-Clients/Servern. Kompilieren Sie den Code und erstellen Sie das Verzeichnis c:\test\system32. Platzieren Sie Ihre wermgr.exe in diesem Verzeichnis und führen Sie den kompilierten PoC aus...

cve-2015-0313

CVE-2015-0313 Quellcode der Adobe-Flash-Sicherheitslücke cve-2015-0313 aus dem Angler Exploit Kit Referenzen: http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-new-adobe-flash-zero-day-exploit-used-in-malvertisements/...

CVE-2022-24086

CVE-2022-24682 PoC Wie funktioniert diese Erkennungsmethode? Wie in den Sicherheitshinweisen angegeben, sind Versionen 8.8.x vor 8.8.15 Patch 30 Update 1 angreifbar. Die Vorlage prüft die folgenden Versionen: root@kitploit: - "8.8" - "8.8.6" - "8.8.7" - "8.8.8" - "8.8.9" - "8.8.10" - "8.8.11" -...

PT-2026-76804

MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled AUTH ENABLED=true but the undocumented, defaultless INTERNAL SERVICE SECRET environment variable is unset, the is internal request check in src/memos/api/middleware/auth.py fails open:...

Patch Tuesday - August 2026

Microsoft is publishing 421 vulnerabilities on August 2026 Patch Tuesday, including 236 vulnerabilities in Windows. This is lower volume than last month’s record-breaking behemoth, but still one of the largest Patch Tuesday totals ever. There is no reason to suppose that Patch Tuesday will ever...

CVE-2026-62839

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:18+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:24+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:15+00:00| seen|...

Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication

Metabase has warned that a maximum-severity security flaw impacting its business intelligence and data visualization software package has been exploited in the wild as a zero-day. The vulnerability CVSS score: 10.0, which does not carry a CVE identifier, allows an unauthenticated remote attacker ...

Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)

Overview On July 14, 2026, SonicWall published a security advisory addressing two vulnerabilities affecting SMA1000 Series remote access appliances, including the critical server-side request forgery SSRF vulnerability CVE-2026-15409 CVSS 10.0 and the high-severity code injection vulnerability...

Vulnerabilities found in Check Point Remote and Mobile Access VPN-products

Check Point has identified vulnerabilities in Remote and Mobile Access VPN products, specifically those implemented using the IKEv1 key exchange protocol. Two vulnerabilities have been identified in Check Point Security Gateways and Remote Access VPN environments that utilize the outdated IKEv1...

1click-gh-token-stealing-via-vscode-POC

1-Click GitHub Token Stealing via VSCode Proof-of-Concept exp...

Zero-Day Exploit Against Windows BitLocker

It's nasty, but it requires physical access to the computer: The exploit, named YellowKey, was published earlier this week by a researcher who goes by the alias Nightmare-Eclipse. It reliably bypasses default Windows 11 deployments of BitLocker, the full-volume encryption protection Microsoft...