Sakai Conversations has a Stored XSS Issue

Summary The Sakai Conversations tool stores topic and post messages without HTML sanitization, and the frontend renders them using LitElement's unsafeHTML directive, resulting in stored cross-site scripting XSS. Any authenticated user with access to a site that has the Conversations tool enabled...

log4j-scan

log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers not only 3-4 headers as previously seen tools. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters...

GHSA-XM98-3VCF-FPH7 mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server

Commit: f855e54d5b7bc1c91b977574a03b91eff6b86bb6 Component: mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py Vulnerability RestrictedPython's sandbox in ContextForge's pythonsandboxserver sub-project allows arbitrary Python execution via three compounding weaknesses...

evilqr

Evil QR Toolkit demonstrating another approach of a QRLJacking attack, allowing to perform remote account takeover, through sign-in QR code phishing. It consists of a browser extension used by the attacker to extract the sign-in QR code and a server application, which retrieves the sign-in QR cod...

certsync

certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...

CVE-2025-22785

CVE-2025-22785 Course Booking System = 6.0.5 - SQL Injection non autenticata Descrizione Il plugin Course Booking System per WordPress è vulnerabile a SQL Injection nelle versioni fino alla 6.0.5 inclusa a causa di un insufficiente escaping sul parametro fornito dall'utente e della mancanza di un...

poc_monitor

pocmonitor Un piccolo scraper che cerca un POC di CVE-2024-49112 Impostando un cron job per eseguire lo script ogni 4 ore, gli aggiornamenti restano attivi. La notifica può essere personalizzata, ma è stato utilizzato un webhook di Discord per avvisare un canale Discord. 0 /4 cd /root/monitorscri...

smuggler

root@kitploit: / | | | | \ | | | | |/ |/ | || |/ | | | || | | | || | | /||||/ \ |\ || | @defparam Smuggler An HTTP Request Smuggling / Desync testing tool written in Python 3 Acknowledgements A special thanks to James Kettle for his research and methods into HTTP desyncs And a special thanks to...

CVE-2024-2387

CVE-2024-2387 Advanced Form Integration – Connetti WooCommerce e Contact Form 7 a Google Sheets e altre piattaforme = 1.82.0 - SQL Injection a Cross-Site Scripting Riflessa tramite integrationid Descrizione Il plugin Advanced Form Integration – Connetti WooCommerce e Contact Form 7 a Google Sheet...

CVE-2023-5204

CVE-2023-5204 AI ChatBot = 5.0.12 AND time-based blind query SLEEP Payload: action=wpbosearchresponse&name=test&keyword=test&strid=1 AND SELECT 1436 FROM SELECTSLEEP5kZil Type: UNION query Tit...

CVE-2023-32590

CVE-2023-32590 Subscribe to Category = 2.7.4 - बिना प्रमाणीकरण के SQL इंजेक्शन विवरण Subscribe to Category प्लगइन वर्डप्रेस के लिए संस्करण 2.7.4 और उससे पहले के संस्करणों में SQL इंजेक्शन के प्रति संवेदनशील है, क्योंकि उपयोगकर्ता द्वारा प्रदान किए गए पैरामीटर पर अपर्याप्त एस्केपिंग और मौजूदा SQL...

web-traffic-generator

web-traffic-generator A quick and dirty HTTP/S "organic" traffic generator. About Just a simple poorly written Python script that aimlessly "browses" the internet by starting at pre-defined ROOTURLS and randomly "clicking" links on pages until the pre-defined MAXDEPTH is met. I created this as a...

Popcorn-TJNULL-OSCP-

HackTheBox: Write-up di Popcorn Data: 05 giugno 2026 Difficoltà: Facile Piattaforma: HackTheBox Tecniche principali: Enumerazione di porte e servizi, Fuzzing delle directory Gobuster, Evasione del caricamento file, Manipolazione delle richieste HTTP Burp Suite, Esecuzione remota di codice RCE,...

CVE-2025-9074-Docker-Desktop-Container-Escape

CVE-2025-9074: Proof of Concept di Fuga dal Contenitore di Docker Desktop Exploit Proof of Concept per CVE-2025-9074 - una vulnerabilità critica di fuga dal contenitore in Docker Desktop che consente l'accesso non autenticato all'API del motore Docker. Panoramica della Vulnerabilità Proprietà|...

evil-ssdp

Overview This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable phishing page. This page can load a...

winmagic_sd

Technical Write-up on CVE-2020-11519 and CVE-2020-11520 Data: Junho de 2020 Autor: Dennis Elser código: github Índice Introdução Abordagem e Descrição Técnica CVE-2020-11519 CVE-2020-11520 Exploit de Prova-de-Conceito Cronograma de Divulgação Solução Checksums Referências Introdução De acordo com...

asm-copyfail

CVE-2026-31431 Copy Fail — Analisi e sviluppo in Assembler x86-64 Prendendo come base il codice sorgente pubblicato su Theori, faremo vari esercizi fino a portarlo completamente in linguaggio Assembly puro senza librerie esterne.python !/usr/bin/env python3 Archivo: copyfail.py import os as...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Security Bypass

Summary golang.org/x/crypto is used by IBM Storage Fusion Data Foundation, which could cause Security Bypass. CVE-2022-30636, CVE-2024-45337, CVE-2025-22869, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181. Vulnerability Details CVEID:CVE-2022-30636 DESCRIPTION: httpTokenCacheKey uses path.Base to...

CVE-2025-6218-WinRAR-RCE-POC

CVE-2025-6218: WinRAR Path Traversal RCE ⚠️ CRITICAL VULNERABILITY - Active Exploitation Confirmed CVE-2025-6218 è una vulnerabilità critica di path traversal in WinRAR che permette l'esecuzione di codice arbitrario. Attualmente sfruttata da APT groups come GOFFEE, Bitter APT-C-08 e Gamaredon. 📋...

CVE-2025-50360

Overflow del Buffer nell'Heap in Pepper Language Pepper Language è un linguaggio di programmazione interpretato veloce, progettato per semplicità e verbosezza. È tipizzato dinamicamente e supporta la garbage collection. Versione affetta: Versione 0.1.1 e precedenti, Commit...