latma

Ferramenta de análise de movimento lateral A ferramenta de análise de movimento lateral LATMA coleta logs de autenticação do domínio e ambientes Azure AD e procura por potenciais ataques de movimento lateral e atividades suspeitas. O movimento lateral pode ocorrer no ambiente AD ou entre a nuvem ...

latma

Lateral movement analyzer tool Lateral movement analyzer LATMA collects authentication logs from the domain and Azure AD environments and searches for potential lateral movement attacks and suspicious activity, the lateral movement can be in the AD environment or between cloud and on-prem. The to...

CVE-2026-48908

CVE-2026-48908 — SP Page Builder RCE non authentifié SP Page Builder comsppagebuilder pour Joomla ≤ 6.6.1 permet à des attaquants non authentifiés de téléverser des fichiers arbitraires et d'obtenir une exécution de code à distance. Champ| Valeur ---|--- CVE| CVE-2026-48908 CWE| CWE-284 Contrôle...

CVE-2025-29927

CVE-2025-29927 Critique - 9.1 Vulnérabilité de contournement du middleware Next.js Mise en pratique de la vulnérabilité CVE-2025-29927 dans une application Next.js où l'en-tête interne x-middleware-subrequest peut être utilisé pour contourner l'authentification du middleware et l'accès restreint...

CVE-2025-32433

CVE-2025-32433 CVE-2025-32433 सारांश और हमला अवलोकन CVE-2025-32433 एक महत्वपूर्ण बिना प्रमाणीकरण के रिमोट कोड निष्पादन RCE भेद्यता है, जो Erlang/OTP SSH सर्वर में पाई गई है, जिसे 16 अप्रैल 2025 को प्रकट किया गया। Erlang/OTP SSH एक लाइब्रेरी है जिसका उपयोग विभिन्न वितरित और दूरसंचार अनुप्रयोगों मे...

CVE-2026-21962

🚨 CVE-2026-21962 - Vulnerabilidade Crítica de Bypass de Autenticação 🧾 Resumo 🔥 Uma vulnerabilidade de severidade máxima 10.0 que permite acesso remoto não autenticado a sistemas Oracle middleware. root@kitploit: CVE ID : CVE-2026-21962 Severity : CRITICAL Published : 2026-01-20 Category :...

connectwise-screenconnect_auth-bypass-add-user-poc

CVE-2024-1708 و CVE-2024-1709 إثبات مفهوم طُوّر بواسطة @watchTowr لاستغلال تجاوز المصادقة لإضافة مستخدم إداري جديد في ConnectWise ScreenConnect. هذه هي الخطوة الأولى في سلسلة تنفيذ أوامر عن بُعد بسيطة. تابع فريق مختبرات watchTowr لأبحاثنا الأمنية https://labs.watchtowr.com/...

mobileiron-exploit

استغلال Tabshell مع مصادقة Kerberos مقتبس من سلسلة استغلال OWASSRF + TabShell أولاً، قم بتصحيح وحدة pyprsp لتمكين تخفيض إصدار WSManStackVersion، وتثبيت التبعيات root@kitploit: $ git clone https://github.com/jborean93/pypsrp $ patch -p0 pyprsp.patch patching file pypsrp/src/pypsrp/complexobjects.p...

smb-usermap

Samba "username map script" تنفيذ الأوامر تستغل هذه الوحدة ثغرة تنفيذ أوامر في إصدارات Samba من 3.0.20 إلى 3.0.25rc3 عند استخدام خيار الإعدادات غير الافتراضي "username map script". من خلال تحديد اسم مستخدم يحتوي على محارف شل shell meta characters، يمكن للمهاجمين تنفيذ أوامر عشوائية. لا يلزم أي...

CVE-2026-8181

CVE-2026-8181 — Umgehung der Authentifizierung von Burst Statistics zur Übernahme des Administratorkontos 📋 Schwachstelleninformationen...

m365_groups_enum

Enumerate Microsoft 365 Groups in a tenant with their metadata Description The allgroups.py script allows to enumerate all Microsoft 365 Groups in a Azure AD tenant with their metadata: name visibility: public or private description email address owners members Teams enabled? SharePoint URL e.g...

CVE-2026-41940

⚠️ CVE-2026-41940 - cPanel & WHM Authentifizierungsumgehung Kritische Pre-Authentifizierungsumgehung in cPanel & WHM 📌 Übersicht CVE-2026-41940 ist eine kritische Authentifizierungsumgehung -Schwachstelle, die cPanel & WHM und WP Squared betrifft. Ein nicht authentifizierter entfernter Angreifer...

EUVD-2026-66769

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed fr...

EUVD-2026-66760

A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account...

EUVD-2026-66761

Improper symlink resolution before file access in Plesk allows remote authenticated users to execute arbitrary code as root...

SecuraBV-CVE-2020-1472

Script de test ZeroLogon Un script Python qui utilise la bibliothèque Impacket pour tester la vulnérabilité à l'exploit Zerologon CVE-2020-1472. Il tente d'effectuer le contournement de l'authentification Netlogon. Le script se termine immédiatement en cas de succès du contournement, sans effectu...

CVE-2026-48611-phpBB

CVE-2026-48611-phpBB Bypass dell'autenticazione semplice poc per bypassare l'autenticazione. se vuoi accedere tramite browser non dimenticare di cambiare la variabile USERAGENT nello script in base a quella visualizzata nel tuo browser affinché funzioni. usa un cookie editor per sostituire i valo...

CVE-2026-20253

Splunk Enterprise — Laboratorio di formazione su CVE-2026-20253 Splunk Enterprise 10.2.3 · sidecar di recovery PostgreSQL · CWE-306 Autenticazione mancante per funzione critica Una riproduzione autorizzata e autonoma che modella il reale advisory per scopi di formazione difensiva. Non include il...

CVE-2025-54918-POC

CVE-2025-54918 – Proof of Concept PoC ⚠️ Wichtiger Hinweis WICHTIG: Um CVE-2025-54918 zu testen, müssen Sie einen DNS-Eintrag in der Ziel-Active-Directory-Umgebung erstellen. Konsultieren Sie stets den Kunden und holen Sie ausdrückliche Genehmigung ein, bevor Sie testen, da dies das DNS- und...

CVE-2024-4040-SSTI-LFI-PoC

CVE-2024-4040 SSTI & LFI PoC - Sfruttamento | CrushFTP Questa è una prova di concetto per una vulnerabilità di Server Side Template Injection SSTI e Local File Inclusion LFI in CrushFTP. Funzionalità Sfruttando vulnerabilità di gravità critica nei server CrushFTP tramite Server Side Template...