CVE-2021-33044

CVE-2021-33044 Dahua IPC/VTH/VTO Geräte Authentifizierungs-Bypass-Exploit Über: Die Schwachstelle zur Umgehung der Identitätsauthentifizierung wurde in einigen Dahua-Produkten während des Anmeldeprozesses gefunden. Angreifer können die Geräteidentitätsauthentifizierung umgehen, indem sie bösartig...

janusec

Janusec Application Gateway / Gateway Applicativo JANUSEC Readme in Inglese Fornire una consegna rapida e sicura delle applicazioni Slide di presentazione: https://www.janusec.com/download/Janusec-Application-Gateway-CN.pdf Funzioni principali Le funzioni principali del JANUSEC Application Gatewa...

cloudlist

Caratteristiche • Installazione • Utilizzo • Configurazione • Esecuzione di cloudlist • Provider supportati • Libreria • Unisciti a Discord Cloudlist è uno strumento multi-cloud per ottenere risorse dai provider cloud. È pensato per essere utilizzato dal blue team per potenziare gli sforzi di...

OpenAM

Open Access Management OpenAM è una soluzione di gestione degli accessi che include autenticazione, SSO, autorizzazione, federazione, entitlement e Web Services Security. Cross Domain Single Sign On CDSSO, SAML 2.0, OAuth 2.0 e OpenID Connect garantiscono che OpenAM si integri facilmente con...

CVE-2026-75325

DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/' parameters...

Coercer

Ein Python-Skript, um einen Windows-Server automatisch zu zwingen, sich auf einer beliebigen Maschine über viele Methoden zu authentifizieren. Windows-Unterstützung Um eine Binärdatei für Windows zu erstellen, laden Sie das Skript installer.ps1 aus diesem Repository herunter. Führen Sie es einfac...

fwknop

fwknop - Autorizzazione a Pacchetto Singolo Introduzione fwknop implementa uno schema di autorizzazione noto come Single Packet Authorization SPA per un forte occultamento dei servizi. SPA richiede un singolo pacchetto crittografato, non riproducibile e autenticato tramite un HMAC per comunicare...

reverse_ssh

Reverse SSH Credito artistico a https://www.instagram.com/smart.hedgehog.art/ Vuoi usare SSH per le reverse shell? Ora puoi. Gestisci e connettiti a reverse shell con la sintassi nativa di SSH Dynamic, local e remote forwarding Implementazioni native di SCP e SFTP per recuperare file dai tuoi...

CVE-2026-73501

A flaw was found in kin-openapi. This vulnerability allows a remote attacker to bypass authentication checks. Specifically, the system incorrectly handles missing authentication configurations, substituting them with a function that does not verify user credentials. This enables unauthorized acce...

BrowserBox

BrowserBox di DOSAYGO Isolamento del browser remoto RBI sicuro e moderno con esperienza clientless 🔐 NUOVO in v18.0.1 — Autenticazione con passkey su macOS: accedi ai siti web con passkey reali all'interno del tuo browser remoto. Le passkey vengono create e memorizzate nell'Enclave Sicura del tuo...

jsql-injection

Description jSQL Injection is a lightweight application used to find database information from a server. It's free , open source and cross-platform for Windows, Linux and Mac, and it works with Java from version 21 to 25. jSQL Injection is also part of the official penetration testing distributio...

EUVD-2026-66222

Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success handler that accepts unvalidated RelayState POST parameters as redirect destinations. Attackers with IdP access can supply malicious RelayState values to redirect authenticated users to...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

the-bastion

🔒 The Bastion Panoramica I Bastion sono un cluster di macchine utilizzato come punto di ingresso unico dai team operativi come sysadmin, sviluppatori, amministratori di database, ... per connettersi in modo sicuro a dispositivi server, macchine virtuali, istanze cloud, apparecchiature di rete, .....

the-bastion

🔒 The Bastion Overview Bastions are a cluster of machines used as the unique entry point by operational teams such as sysadmins, developers, database admins, ... to securely connect to devices servers, virtual machines, cloud instances, network equipment, ..., usually using ssh. The Bastion...

CVE-2026-47837

Missing Authentication for Critical Function vulnerability in Spring Spring Cloud Config allows Webhook requests to Spring Cloud Config Server's /monitor endpoint are not validated. This issue affects Spring Cloud Config: from 5.0.0 through 5.0.4, from 4.3.0 through 4.3.4, from 4.0.0 through 4.2....

aws-iam-authenticator

AWS IAM Authenticator for Kubernetes Uno strumento per utilizzare le credenziali AWS IAM per autenticarsi su un cluster Kubernetes. Il lavoro iniziale su questo strumento è stato guidato da Heptio. Il progetto riceve contributi da diversi ingegneri della community ed è attualmente mantenuto da...

EUVD-2026-66638

Missing Authentication for Critical Function vulnerability in Spring Spring Cloud Config allows Webhook requests to Spring Cloud Config Server's /monitor endpoint are not validated. This issue affects Spring Cloud Config: from 5.0.0 through 5.0.4, from 4.3.0 through 4.3.4, from 4.0.0 through 4.2....

CVE-2026-47837

Spring Cloud Config is affected by a Missing Authentication for Critical Function vulnerability in the Server's /monitor endpoint. Webhook requests sent to this endpoint are not properly validated, meaning an authenticated user (Privileges Required: HIGH ) can send crafted webhook requests that c...

CVE-2026-47837 Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests

Missing Authentication for Critical Function vulnerability in Spring Spring Cloud Config allows Webhook requests to Spring Cloud Config Server's /monitor endpoint are not validated. This issue affects Spring Cloud Config: from 5.0.0 through 5.0.4, from 4.3.0 through 4.3.4, from 4.0.0 through 4.2....