ctf-skills

ctf-skills Agent Skills per risolvere sfide CTF — exploit web, pwn binario, crittografia, reverse engineering, analisi forense, OSINT e altro ancora. Funziona con qualsiasi strumento che supporti la specifica Agent Skills, incluso Claude Code. Installazionebash npx skills add ljagiello/ctf-skills...

CVE-2022-46649

CVE-2022-46649 PoC-Exploit für CVE-2022-46649, eine Befehlsinjektions-Schwachstelle im Endpunkt /cgi-bin/iplogging.cgi. Die Schwachstelle ermöglicht authentifizierten Angreifern die Ausführung beliebiger Betriebssystembefehle über manipulierte tcpdumpParams. Übersicht Schwachstelle: OS Command...

CVE-2026-76797

The MongoSQL Transition Readiness Tool (MongoDB) is vulnerable to CSV injection through its generated reports. Database and collection names are written into CSV output without neutralizing leading characters that spreadsheet applications interpret as formulas. An attacker with write privileges o...

pentest-ai-agents

pentest-ai-agents 50 Claude Code-Subagenten für Penetrationstests. Schnellstart | Spickzettel | Abdeckung | Agenten | Beispiele Inhaltsverzeichnis Neuerungen in v3.3 Neuerungen in v3.2 Agentenübersicht Neuerungen in v3.1 Schnellstart Spickzettel Abdeckung...

cve-2022-28944

CVE-2022-28944 Vulnerabilidade de Execução Remota de Código sem Autenticação em Atualização de Múltiplos Produtos do EMCO Software. Uso: python3 cve-2022-28944poc.py Detalhes no relatório em gerr.re. Passos para reproduzir 1. Instale um produto afetado do EMCO Software; 2. Defina o spoof...

GHSA-9X44-4GXF-8C25 Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name

Overview A DataObject class-definition field name is concatenated, without an identifier allowlist, into the PHP class source that Pimcore generates for every DataObject class protected $;. A user holding only the ordinary objects DataObjects permission can import a class definition whose field...

Pimcore Vulnerable to Remote Code Execution via DataObject Class-Definition Field Name

Overview A DataObject class-definition field name is concatenated, without an identifier allowlist, into the PHP class source that Pimcore generates for every DataObject class protected $;. A user holding only the ordinary objects DataObjects permission can import a class definition whose field...

EUVD-2026-67871

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the class-definition import endpoint /pimcore-studio/api/class/definition/configuration-view/detail/id/import accepts a DataObject field name that is emitted without an identifier allowlist b...

CVE-2026-55634 Pimcore: Remote Code Execution via DataObject Class-Definition Field Name

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the class-definition import endpoint /pimcore-studio/api/class/definition/configuration-view/detail/id/import accepts a DataObject field name that is emitted without an identifier allowlist b...

CVE-2026-55634

Pimcore, an open-source Data & Experience Management Platform, is vulnerable to Remote Code Execution via its class-definition import endpoint. Prior to versions 11.5.19, 12.3.10, and 2026.1.6, a DataObject field name is emitted without an identifier allowlist into generated PHP properties (Field...

CVE-2026-55634 Pimcore: Remote Code Execution via DataObject Class-Definition Field Name

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the class-definition import endpoint /pimcore-studio/api/class/definition/configuration-view/detail/id/import accepts a DataObject field name that is emitted without an identifier allowlist b...

CVE-2026-28134

Relatório de Exploração CVE-2026-28134 JetEngine = 3.7.2 — Execução Remota de Código Autenticada Contribuidor+ via SSTI em Twig Data: 11 de março de 2026 Pontuação CVSS: 8.8 Alta Vetor CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Plugin Afetado: JetEngine = 3.7.2 Slug do Plugin: jet-engine...

CVE-2026-15748

CVE-2026-15748 — Forminator Forms: Nicht authentifizierter beliebiger Datei-Upload → RCE CVSS 9.8 Kritisch · Betroffen: Forminator = 1.56.1 · Behoben: 1.56.2 Forscher: daroo Wordfence Bug Bounty, $2.048 · 600.000 aktive Installationen Write-up:...

GHSA-W23P-WRP7-CH38 Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column (PHP Object Injection, CWE-502)

Summary Pimcore\Model\DataObject\ClassDefinition\Data\Hotspotimage::getDataFromResource deserializes the hotspots object-store column through the Pimcore\Tool\Serialize::unserialize wrapper without a class allowlist the wrapper's $allowedClasses parameter defaults to true, i.e. fully unrestricted...

CVE-2026-55220 Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, Pimcore\Model\DataObject\ClassDefinition\Data\Hotspotimage::getDataFromResource in models/DataObject/ClassDefinition/Data/Hotspotimage.php passes the field hotspots object-store column to...

CVE-2026-55220

Pimcore (Open Source Data & Experience Management Platform) contains an unrestricted deserialization flaw in Hotspotimage::getDataFromResource() . After JSON decoding of the __hotspots object-store column fails, the raw value is passed to Serialize::unserialize() without an allowed-classes whitel...

CVE-2026-55220 Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, Pimcore\Model\DataObject\ClassDefinition\Data\Hotspotimage::getDataFromResource in models/DataObject/ClassDefinition/Data/Hotspotimage.php passes the field hotspots object-store column to...

CVE-2026-41089

CVE-2026-41089 root@kitploit: ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ██║ ██║███║██╔═████╗██╔═████╗ ██║ ██║ ██║█████╗ ███████║╚██║██║██╔██║██║██╔██║ ██║ ╚██╗ ██╔╝██╔══╝ ██╔══██║ ██║████╔╝██║████╔╝██║ ╚██████╗ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝╚██████╔╝ ╚═════...

CVE-2025-24893_Analysis

CVE-2025-24893 - XWiki SolrSearch SSTI zu nicht authentifizierter RCE Ein in sich geschlossenes Docker-Labor, das CVE-2025-24893 reproduziert, eine Server-Side-Template- Injection im SolrSearch-RSS-Feed von XWiki, die zu nicht authentifizierter Remote-Codeausführung führt. Es führt die verwundbar...

CVE-2026-23479

CVE-2026-23479 — Redis Use-After-Free RCE PoC-Sammlung HackSpeak-Distributions-Mirror. Dieses Repository bündelt drei öffentliche PoC-/Erkennungstools ; der Code ist identisch mit den jeweiligen Upstreams. ⚠️ Enthält tatsächlichen Exploit-Code und Erkennungstools ; nur für Sicherheitsforschung,...