hardentools

Hardentools Hardentools wurde entwickelt, um eine Reihe von „Funktionen“ zu deaktivieren, die von Microsoft Windows 10 und 11 und einigen weit verbreiteten Anwendungen Microsoft Office, LibreOffice und Adobe PDF Reader, vorerst bereitgestellt werden. Diese Funktionen, die üblicherweise für...

magento-swf-patched-CVE-2011-2461

magento-swf-patched-CVE-2011-2461 Versione patchata di uploader.swf e uploaderSingle.swf per correggere CVE-2011-2461 Maggiori informazioni sui file .swf vulnerabili nel core di Magento possono essere trovate qui -...

cve-2018-12798

Vulnerabilità di esecuzione di codice remoto tramite heap overflow in Adobe Acrobat Reader Vulnerabilità Vulnerabilità di limitazione impropria delle operazioni entro i limiti di un buffer di memoria Descrizione della vulnerabilità Questa vulnerabilità consente a un attaccante remoto di eseguire...

CVE-2025-54253-Exploit-Demo

🚨 CVE-2025-54253 – Iniezione OGNL su Adobe AEM Forms su JEE a RCE 🔎 Panoramica CVE-2025-54253 è una vulnerabilità critica di iniezione OGNL in Adobe AEM Forms su JEE. Consente a utenti non autenticati di eseguire comandi arbitrari del sistema operativo tramite l’endpoint /adminui/debug?debug=OGNL...

CVE-2010-1240

CVE-2010-1240 - Inserimento di backdoor in un PDF ⚠️ Solo a scopo didattico e per ricerche di sicurezza autorizzate Descrizione Adobe Reader e Acrobat 9.x precedenti a 9.3.3, e 8.x precedenti a 8.2.3 su Windows e Mac OS X, non limitano il contenuto di un campo di testo nella finestra di avviso di...

CVE-2020-3766_APSB20-12

CVE-2020-3766APSB20-12 https://vulners.com/cve/CVE-2020-3766 https://helpx.adobe.com/security/products/integrityservice/apsb20-12.html...

CVE-2022-24086-RCE-PoC

CVE-2022-24086 RCE POC Über CVE-2022-24086, von dem Adobe sah, dass er „in freier Wildbahn in sehr begrenzten Angriffen ausgenutzt“ wurde, erhielt einen Schweregrad von 9,8 von 10 Punkten. Angreifer, die ihn ausnutzen, können ohne Authentifizierung eine Remotecodeausführung auf betroffenen System...

CVE-2017-3066

CVE-2017-3066 Descrizione Adobe ColdFusion utilizza il formato dei messaggi Action AMF. Il protocollo AMF è un protocollo di serializzazione binaria personalizzato. Ha due formati: AMF0 e AMF3. Un messaggio Action è composto da header e body. Esistono diverse implementazioni di AMF in diversi...

cve-2026-71362-magento-lab

CVE-2026-71362 — Lab sul cambio di identità della sessione cliente di Magento / Adobe Commerce Un lab Docker autonomo, avviabile con un solo comando, che riproduce CVE-2026-71362 dall'inizio alla fine e consente di verificare la correzione di Adobe, così che difensori, ricercatori e studenti...

Adobe Commerce (Magento) - Remote Code Execution

Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution. id: CVE-2022-24086 info: name:...

Adobe ColdFusion - Deserialization of Untrusted Data

Adobe ColdFusion versions 2018u17 and earlier, 2021u7 and earlier and 2023u1 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. id: CVE-2023-38203 info: name:...

Adobe ColdFusion - Cross-Site Scripting

Adobe Coldfusion versions 2016 update 16 and earlier, 2018 update 10 and earlier and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code...

Adobe AEM Dispatcher <4.15 - Rules Bypass

Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly implement a URL filter, which allows remote attackers to bypass dispatcher rules via unspecified vectors. id: CVE-2016-0957 info: name: Adobe AEM Dispatcher 4.15 - Rules Bypass author: geeknik severity:...

Adobe Coldfusion <=8.0.1 - Cross-Site Scripting

Adobe ColdFusion Server 8.0.1 and earlier contain multiple cross-site scripting vulnerabilities which allow remote attackers to inject arbitrary web script or HTML via 1 the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to 2 wizards/common/logintowizard.cfm, 3...

Adobe Connect < 12.1.5 - Local File Disclosure

Adobe Connect versions 11.4.5 and earlier, 12.1.5 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not...

Adobe ColdFusion WDDX Deserialization Gadgets

Adobe ColdFusion versions 2023.5 and earlier and 2021.11 and earlier are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. id: CVE-2023-44353 info: name: Adobe ColdFusion WDDX...

Adobe Experience Manager - XML External Entity Injection

Adobe Experience Manager 6.5, 6.4, 6.3 and 6.2 are susceptible to XML external entity injection. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2019-8086 info: name: Adobe...

Adobe Experience Manager ≤ 6.5.23.0 - XML Injection

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an XML Injection vulnerability that could result in a Security feature bypass. id: CVE-2025-54251 info: name: Adobe Experience Manager ≤ 6.5.23.0 - XML Injection author: DhiyaneshDK,assetnote severity: medium description: |...

Adobe Coldfusion - Authentication Bypass

Adobe ColdFusion versions 2023.5 and earlier and 2021.11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to access the administration CFM and CFC endpoints...

Adobe Coldfusion - Cross-Site Scripting

Adobe ColdFusion versions 2023.5 and earlier and 2021.11 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within th...