CVE-2026-93872 Cotonti 1.0.0 PHP Object Injection via Comments Plugin Edit Action cb Parameter

Cotonti 1.0.0 passes the base64-decoded cb parameter to unserialize without allowedclasses restriction in the comments plugin EditAction. Registered users with comment write permissions can instantiate arbitrary PHP objects and potentially achieve file write or code execution through gadget chain...

sslsplit

SSLsplit - transparent SSL/TLS interception https://www.roe.ch/SSLsplit Overview SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. It is intended to be useful for network forensics, application security analysis and penetration testing. SSLsplit is...

uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

krbrelayx

Krbrelayx - набор инструментов для ретрансляции Kerberos и злоупотребления безусловной делегацией Набор инструментов для злоупотребления Kerberos. Для работы требует impacket, ldap3 и dnspython. Рекомендуется устанавливать impacket напрямую из git, чтобы иметь последнюю версию. Дополнительная...

krbrelayx

Krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit Toolkit for abusing Kerberos. Requires impacket, ldap3 and dnspython to function. It is recommended to install impacket from git directly to have the latest version available. More info about this toolkit available in my blo...

wpbullet

wpBullet A static code analysis for WordPress Plugins/Themes and PHP Installation Simply clone the repository, install requirements and run the script $ git clone https://github.com/webarx-security/wpbullet wpbullet $ cd wpbullet $ pip install -r requirements.txt $ python wpbullet.py Usage...

MANSPIDER

MANSPIDER Parcourez les partages SMB à la recherche d'informations intéressantes. Recherche dans le contenu des fichiers + regex pris en charge ! Nouveautés de la v2.0 Manspider 2.0 est disponible ! Cette version apporte des améliorations significatives : Extraction de texte améliorée propulsée p...

malwoverview

Malwoverview !Alt...

jiopc-architecture-whitepaper

Architecture, Performance, and Security Analysis of JioPC Cloud Virtual Desktops A Comprehensive Technical Whitepaper & Engineering Evaluation Document Version : 2.0 Target Platform : JioPC Cloud Virtual Desktop Accops HyWorks / Microsoft Azure Classification : Technical Evaluation &...

Grouper

Grouper N'UTILISEZ PLUS GROUPER. UTILISEZ GROUPER2 ! https://github.com/l0ss/Grouper2 Un script PowerShell pour aider à trouver les paramètres vulnérables dans la stratégie de groupe Active Directory. Photo par Jon Hanson - https://www.flickr.com/people/61952179@N00?rb=1 -...

gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

reproxy

Reproxy is a simple edge HTTPs server / reverse proxy supporting various providers docker, static, file, consul catalog. One or more providers supply information about the requested server, requested URL, destination URL, and health check URL. It is distributed as a single binary or as a docker...

EUVD-2026-83309

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelogconfig file CLI command. A highly privileged authenticated user can inject shell commands through the filename parameter, potentially resulting in arbitrary command execution with root...

CVE-2026-81937 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelogconfig file CLI command. A highly privileged authenticated user can inject shell commands through the filename parameter, potentially resulting in arbitrary command execution with root...

CVE-2026-81937

IBM Guardium Data Protection 12.2 contains a command injection vulnerability (CWE-78) in the import remotelog_config CLI command. A highly privileged authenticated user can inject shell commands through the filename parameter , potentially achieving arbitrary command execution with root privilege...

CVE-2026-81937 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the import remotelogconfig file CLI command. A highly privileged authenticated user can inject shell commands through the filename parameter, potentially resulting in arbitrary command execution with root...

strot

Rétro-concevez l'API interne de n'importe quel site web avec le langage naturel Le Problème Les sites web modernes chargent les données via des appels AJAX cachés : Les données ne sont pas dans le HTML - elles sont récupérées via des API internes Vous devez inspecter manuellement les requêtes...

DragonCastle

DragonCastle Un PoC qui combine la technique de mouvement latéral AutodialDLL et SSP pour extraire les hachages NTLM du processus LSASS. Description Télécharge une DLL sur la machine cible. Ensuite, elle active le registre distant pour modifier l'entrée AutodialDLL et démarrer/redémarrer le servi...

DEBIAN-CVE-2026-93854

In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations PUT /v2/leases/leaseid and DELETE /v2/leases/leaseid. The policy authorize wrapper attempts to load the target lease to build the authorization target from its owner...

CVE-2026-93854

In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations PUT /v2/leases/leaseid and DELETE /v2/leases/leaseid. The policy authorize wrapper attempts to load the target lease to build the authorization target from its owner...