CVE-2018-7600

POC di CVE-2018-7600 RCE di Drupal CVE-2018-7600 Non dimenticare di inserire il tuo indirizzo nello Script ! Descrizione: Una vulnerabilità di esecuzione remota di codice è presente in più sottosistemi di Drupal 7.x e 8.x. Ciò consente potenzialmente agli aggressori di sfruttare molteplici vettor...

CVE-2021-29156

CVE-2021-29156 richtig gemacht Dieser Proof of Concept wurde umgesetzt, weil der andere öffentlich verfügbare PoC defekt ist ✨ Installation root@kitploit: go install github.com/5amu/CVE-2021-29156@latest Referenzen https://nvd.nist.gov/vuln/detail/CVE-2021-29156...

waf-checker

Una potente applicazione web per testare quanto bene il tuo Web Application Firewall WAF protegge contro i vettori di attacco comuni. → waf-checker.com ← Caratteristiche Test di sicurezza 19+ categorie di attacco pronte all'uso: SQL Injection, XSS, Path Traversal, Command Injection, SSRF, NoSQL...

CVE-2018-7600.

IGLOO Corp, Won Chi Hyun Drupal RCE विश्लेषण रिपोर्ट Drupal RCE CVE-2018-7600 अपने पते को स्क्रिप्ट में डालना न भूलें! विवरण: एक रिमोट कोड निष्पादन भेद्यता Drupal 7.x और 8.x के कई उप-प्रणालियों में मौजूद है। यह संभावित रूप से हमलावरों को Drupal साइट पर कई आक्रमण वैक्टरों का शोषण करने की अनुमति दे...

web-check

Web-Check Intelligence open source completa e on-demand per qualsiasi sito web 🌐web-check.xyz Gentilmente supportato da: Terminal Trove La $HOME di ogni cosa nel terminale | Warp Progettato per programmare con più agenti AI ---|--- Indice Informazioni Screenshot Live Demo Mirror Funzionalità...

graphql-threat-matrix

Matrice delle Minacce GraphQL Perché graphql-threat-matrix? graphql-threat-matrix è stato creato per cacciatori di bug, ricercatori di sicurezza e hacker per aiutare a scoprire vulnerabilità in diverse implementazioni di GraphQL. Le differenze nel modo in cui le implementazioni di GraphQL...

kube-alien

Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...

macphish

macphish Office for Mac Macro Payload Generator Attack vectors There are 4 attack vectors available: beacon creds meterpreter meterpreter-grant For the 'creds' method, macphish can generate the Applescript script directly, in case you need to run it from a shell. beacon On execution, this payload...

CVE-2026-67316

axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype has already been polluted by a separate vulnerability or dependency. In the bodyless method aliases axios.get, axios.delete, axios.head, axios.options, inherited data is read via...

CVE-2026-7232

The FormCraft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'parameter name' parameter in all versions up to, and including, 3.9.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

EUVD-2026-46610

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

Hackers Use Fake Claude Code Guide and AI PDFs to Spread AsyncRAT Malware

Hackers are using fake Claude Code guide and AI PDFs to spread AsyncRAT malware via Windows attack using PowerShell and Defender exclusions...

Important: postgresql

Issue Overview: Use of inherently dangerous function PQfn..., resultisint=0, ... in PostgreSQL libpq loexport, loread, lolseek64, and lotell64 functions allows the server superuser to overwrite a client stack buffer with an arbitrarily-large response. Like gets, PQfn..., resultisint=0, ... stores...

Exploit for CVE-2019-5513

VMware Horizon /broker/xml Vulnerability Scanner !Security...

PT-2026-42695

Name of the Vulnerable Software and Affected Versions Plonky3 versions prior to 0.4.3 Plonky3 versions prior to 0.5.3 Description An attacker controlling prover-side observations can craft distinct transcripts that produce identical challenges, breaking the binding property of Fiat-Shamir. This...

Malicious code in ethers-wallet-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beda1480a40189cc8177ace4e3d6fd9773ad81f4cbe5a6c07e3004427846dc8d The package impersonates the legitimate @ethersproject/wallet source files are otherwise verbatim copies, including the internal version string...

Toward Securing AI Agents like Operating Systems

Autonomous agents based on large language models LLMs are rapidly emerging as a general-purpose technology, with recent systems such as OpenClaw extending their capabilities through broad tool use, third-party skills, and deeper integration into user environments. At the same time, these agentic...

SUSE CVE-2014-0598

Directory traversal vulnerability in iPrint in Novell Open Enterprise Server OES 11 SP1 before Maintenance Update 9151 on Linux has unspecified impact and remote attack vectors...

AI Native Asset Intelligence

Modern security environments generate fragmented signals across cloud resources, identities, configurations, and third-party security tools. Although AI-native security assistants improve access to this data, they remain largely reactive: users must ask the right questions and interpret...

On the Security of Research Artifacts

Research artifacts are widely shared to support reproducibility, and artifact evaluation AE has become common at many leading conferences. However, AE mainly checks whether artifacts work as claimed and can be reproduced. It largely overlooks potential security risks. Since these artifacts are...