CVE-2025-27591-below-

CVE-2025-27591 – Escalata dei privilegi in Below 1 Introduzione Below è uno strumento Linux per registrare e visualizzare dati di sistema come l'utilizzo hardware e le metriche dei cgroup. Nelle versioni precedenti alla v0.9.0 , il servizio systemd di Below viene eseguito con privilegi root e cre...

CVE-2026-36438

CVE-2026-36438: Sensible Informationen durch Passwort-Reset Die Intelbras-VIP-1230-B/D-G4-Versionen vor 6 ermöglichen es einem entfernten Angreifer, sensible Informationen des Administratorkontos über die Passwort-Reset-Funktion in der Datei OutsideCmd zu erlangen. Entdeckt von Henrique Koji,...

Log4j_Attacker_IPList

Log4jAttackerIPList CVE-2021-44228 Log4j Attacker Ip List.xlsx...

CVE-2024-1304---Badgermeter-moni-tool-Reflected-Cross-Site-Scripting-XSS

CVE-2024-1304 --- Badgermeter-Moni-Tool - Reflektierte Cross-Site-Scripting XSS https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool CVE-2024-1304: 6.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L | CWE-79. Software link :...

CVE-2020-18325

Mehrere Cross-Site-Scripting XSS-Sicherheitslücken im Konfigurationsbereich von Intelliants Subrion CMS v4.2.1 Beschreibung Subrion CMS ist einfach zu installieren und unkompliziert zu verwalten. Verwenden Sie es als eigenständige Anwendung oder in Verbindung mit anderen Anwendungen, um...

TLS-Attacker

TLS-Attacker TLS-Attacker è un framework basato su Java per analizzare librerie TLS. È in grado di inviare messaggi di protocollo arbitrari in un ordine arbitrario al peer TLS e di definire le loro modifiche tramite un'interfaccia fornita. Questo offre allo sviluppatore l'opportunità di definire...

CVE-2024-50968

CVE-2024-50968 Beschreibung Es besteht eine Schwachstelle in der Geschäftslogik der Funktion "In den Warenkorb" des itsourcecode Agri-Trading Online Shopping System 1.0, die es entfernten Angreifern ermöglicht, den quant-Parameter beim Hinzufügen eines Produkts zum Warenkorb zu manipulieren. Durc...

bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation

A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending maliciously-constructed packets to BIND servers configured for TKEY-based authentication via GSS-API Generic Security Service Application Program Interface tokens. This can lead to excessive memory consumption,...

CyberBattleSim

CyberBattleSim 8 aprile 2021: Vedi l'annuncio sul blog Microsoft Security. CyberBattleSim è una piattaforma di ricerca sperimentale per studiare l'interazione di agenti automatizzati che operano in un ambiente di rete aziendale simulato e astratto. La simulazione fornisce un'astrazione di alto...

CVE-2026-51106

An issue in TokTok qTox v1.18.4 allows a local attacker to cause a denial of service via the src/persistence/serialize.cpp component...

CVE-2026-73501

A flaw was found in kin-openapi. This vulnerability allows a remote attacker to bypass authentication checks. Specifically, the system incorrectly handles missing authentication configurations, substituting them with a function that does not verify user credentials. This enables unauthorized acce...

git-dumper

git-dumper Uno strumento per scaricare un repository git da un sito web. Installazione Può essere installato facilmente con pip: root@kitploit: pip install git-dumper Utilizzo root@kitploit: usage: git-dumper options URL DIR Dump a git repository from a website. positional arguments: URL url DIR...

CVE-2026-76784

Multiple TP-Link Kasa smart home devices are affected by insufficient cryptographic protections in the local device communication protocol. An attacker on an adjacent network can intercept, replay, or forge locally exchanged control messages, leading to unauthorized device control , state manipul...

CVE-2026-79284

A flaw was found in chromium-browser. A remote attacker, after compromising the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This would allow the attacker to spoof user interface UI elements, potentially deceiving users...

CVE-2026-79246

A flaw was found in chromium-browser. An information leak vulnerability exists in the DataTransfer component of Google Chrome. A remote attacker could exploit this by enticing a user to visit a specially crafted HTML page, leading to the disclosure of sensitive information...

CVE-2026-79055

A flaw was found in Google Chrome on Android. An information leak vulnerability exists in the Sharing feature. A local attacker, by leveraging social engineering tactics, could exploit this flaw through a co-installed application, potentially leading to the disclosure of sensitive information...

CVE-2026-79126

A flaw was found in Proxy in Google Chrome. An adjacent attacker could exploit this vulnerability by sending crafted network traffic, potentially leading to the disclosure of sensitive information. This issue stems from an incorrect provision of specified functionality within the Proxy component...

CVE-2026-78896

A flaw was found in Google Chrome. This vulnerability, located in the StorageAccessAPI, allows a remote attacker to exploit it by crafting a malicious HTML page. Successful exploitation could lead to an information leak, enabling the attacker to obtain sensitive cross-origin data...

CVE-2026-79293

A flaw was found in chromium-browser. A remote attacker could exploit an information leak in the Animation component by crafting a malicious HTML page. This could allow the attacker to obtain sensitive information from the user's browser...

CVE-2026-79242

A flaw was found in Google Chrome. This vulnerability, stemming from an observable discrepancy in HTML processing, could be exploited by a remote attacker. By crafting a malicious HTML page, an attacker could gain access to sensitive information...