CVE-2021-37152

CVE-2021-37152 Sfrutta l'accesso ai client di rete inviando pacchetti su TP-LINK wireless e preparandosi per un attacco mitm exploit Questo exploit è progettato per accedere e scansionare i client di rete e potrai facilmente accedere e prepararti per un attacco mitm, l'exploit attaccherà ai livel...

CVE-2025-5287

CVE-2025-5287 PoC Exploit di SQL Injection non autenticata per WordPress Likes and Dislikes Plugin ≤ 1.0.0 📖 Descrizione Questo script Python è un proof-of-concept PoC per CVE-2025-5287 , che sfrutta una vulnerabilità nel WordPress Likes and Dislikes Plugin ≤ 1.0.0. La vulnerabilità consente ad...

CVE-2025-4840

CVE-2025-4840 Likes and Dislikes Plugin = 1.0.0 – Nicht authentifizierte SQL-Injection Beschreibung Das Plugin „Likes and Dislikes“ für WordPress ist bis einschließlich Version 1.0.0 anfällig für SQL-Injection über den Parameter „post“. Grund dafür ist die unzureichende Maskierung des...

kodex

Kodex Community Edition - CE is an open-source toolkit for privacy and security engineering. It helps you to automate data security and data protection measures in your data engineering workflows. It offers the following functionality: Read data items from a variety of sources such as files,...

MiniPlasma-Runner

MiniPlasma-Runner Versione modificata di Nightmare-Eclipse/MiniPlasma CVE-2020-17103 adattata per uso C2. Il PoC originale funziona solo da disco. Questa versione viene eseguita interamente in memoria tramite execute-assembly, con un approccio binario suddiviso per evitare il rilevamento...

What happens to your data when you die? (Lock and Code S07E17)

This week on the Lock and Code podcast … You will die. Your data will not. The afterlife of our information is a recent phenomenon, and some of the companies with the most to sort through are still just figuring it out. As far back as 2007, Facebook was forced to reckon with mass grief when users...

EUVD-2026-64833

Unauthenticated Broken Access Control in Booking and Rental Manager = 2.7.5 versions...

spraycharles

Spraycharles अरे, यो मैं spraycharles जैसा महसूस कर रहा हूँ - Chiddy Bang धीमा और कम पासवर्ड स्प्रेइंग उपकरण, जो लंबे समय तक अंतराल पर स्प्रे करने के लिए डिज़ाइन किया गया है। इसमें Office365, OWA, EWS, Okta, ADFS, Cisco SSL VPN, Citrix Netscaler, Sonciwall, NTLM over HTTP, और SMB के लिए स्प्रेइंग...

firefox: thunderbird: Information disclosure in the Graphics: Text component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Graphics: Text component...

firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: Push Subscriptions component...

firefox: thunderbird: Use-after-free in the DOM: Core & HTML component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

firefox: thunderbird: Privilege escalation in the DOM: Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Networking component...

firefox: thunderbird: Mitigation bypass in the Storage: Cache API component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Storage: Cache API component...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: PM: domains: fixed a memory leak caused by using debugfslookup. When calling debugfslookup, the result must have had dput called upon it; otherwise, memory will leak over time. To simplify things, simply call...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: lvds: fixed the imbalance in the PM usage counter during power-on. The pmruntimegetsync function will increment the PM usage counter even if it fails. Forgetting to perform the necessary operations could lead to a...

Astra Linux – Vulnerability in Firefox

An attacker who could have convinced a user to drag and drop an image into a file system could have manipulated the resulting filename to include an executable extension. By doing so, the attacker could potentially trick the user into executing malicious code. Although very similar, this is a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: nbd: defer config put in recvwork There is one UAF issue in recvwork when running NBDCLEARSOCK and NBDCMDRECONFIGURE: - nbdgenlconnect // confref=2 connect and recvwork A - nbdopen // confref=3 - recvwork A completed //...

Astra Linux – Vulnerability in Firefox

Insufficient validation in the Drag and Drop API, combined with social engineering, may have allowed an attacker to trick end-users into creating shortcuts to local system files. This could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions earlier than 115...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: kernel/printk/index.c: fixed the memory leak that occurred when using debugfslookup. When calling debugfslookup, the result must be passed to dput, otherwise a memory leak will occur over time. To simplify things, simply call...

firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Text and Fonts component...