F5-BIG-IP-CVE-2020-5902-shodan-scanner

F5-BIG-IP-CVE-2020-5902-checker Einfaches Bash-Skript des F5 BIG-IP CVE-2020-5902-Checkers unter Verwendung der Shodan CLI Voraussetzung: Shodan-CLI : pip install -U --user shodan" https://help.shodan.io/command-line-interface/0-installation" Haftungsausschluss: Das Skript dient ausschließlich...

Security update for texlive

This update for texlive fixes the following issue: CVE-2026-63729: use-after-free in synctexparser.c in TeX Live bsc1272432. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comman...

Security update for python36-pip

This update for python36-pip fixes the following issue: CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows files to be installed to arbitrary locations on disk bsc1273090. Patch Instructions: To install this SUSE update use the SUSE recommended...

CVE-2017-1000486

CVE-2017-1000486 Exploit Proof of Concept per l'iniezione EL in PrimeFaces 5.x CVE-2017-1000486, una vulnerabilità RCE che può essere utilizzata per ottenere Remote Code Execution su un target. Descrizione della vulnerabilità Puoi trovare un'ottima descrizione della vulnerabilità sul blog di Mind...

Security update for suseconnect-ng

This update for suseconnect-ng fixes the following issue: Update version to 1.23.0: Use product identifier for product migrations. bsc1268596 Switch to using go1.26-openssl as the default Go version to install to support building the package jscSCC-843, bsc1268900. Fix flag parsing so that unknow...

CVE-2026-54757

A flaw was found in Trestle, a Python SDK and command-line tool for managing OSCAL compliance documents. This vulnerability involves server-side template injection SSTI due to the MDCleanInclude and MDSectionInclude Jinja2 tags improperly re-parsing untrusted Markdown content as template source...

MSHTML-CVE-2021-40444

https://github.com/lockedbyte/CVE-2021-40444 Controlla il README reale da NotREADME.md Ho apportato piccole modifiche e automatizzato il processo se hai una DLL sudo bash run.sh -i interface -d dll se vuoi che compili io la dll per te sudo bash run.sh -i interface -c "command"...

CVE-2020-1472-LAB

Script de teste ZeroLogon Uma configuração de laboratório para testar uma vulnerabilidade do exploit ZeroLogon CVE-2020-1472. Contém um script Python que utiliza a biblioteca Impacket para testar a vulnerabilidade e uma Máquina Virtual VM com Windows Server 2019 configurada como Controlador de...

SharpSCOM

SharpSCOM Uno strumento C per interagire con Microsoft System Center Operations Manager SCOM. Questo strumento è stato testato con il server SCOM versione 10.22.10118.0. L'integrazione SSPI è fornita tramite la libreria nsspi di Kevin Thompson antiduh, rilasciata sotto licenza BSD-2. Utilizzo da...

CVE-2025-64328_FreePBX-framework-Command-Injection

CVE-2025-64328 FreePBX में प्रमाणित कमांड इंजेक्शन framework मॉड्यूल में CVE-2025-64328 FreePBX में framework मॉड्यूल में प्रमाणित कमांड इंजेक्शन के लिए सरल प्रूफ ऑफ कॉन्सेप्ट रिपॉजिटरी। पूरा लेख यहाँ: https://theyhack.me/CVE-2025-64328-FreePBX-Authenticated-Command-Injection/ curl प्रूफ ऑफ...

MAL-004

MAL-004: Command-Injection-Bypass für CVE-2020-12641 in Roundcube Webmail Es wurde ein Bypass für „CVE-2020-12641: Command Injection via „imconvertpath“ in Roundcube Webmail“ gefunden, der Versionen vor 1.4.5 und 1.3.12 betrifft. Die PHP-Funktion „escapeshellcmd“, die zur Verhinderung von...

BloodSOCer

BloodSOCer BloodSOCer è uno strumento di automazione Python che aggrega dati di threat intelligence da più fonti Mitre ATT&CK, regole Sigma, Atomic Red Team e produce file JSON da inserire in BloodHound in formato OpenGraph. BloodSOCer può anche caricare i file su BloodHound e impostare le icone...

CVE-2026-57499 Liman: OS Command Injection in LogRotationController allows authenticated admin to execute arbitrary commands (RCE)

Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the log rotation configuration endpoint allows an authenticated administrator to execute arbitrary operating system commands on the Liman server. The ipaddress parameter is embedded...

CVE-2026-57499 Liman: OS Command Injection in LogRotationController allows authenticated admin to execute arbitrary commands (RCE)

Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the log rotation configuration endpoint allows an authenticated administrator to execute arbitrary operating system commands on the Liman server. The ipaddress parameter is embedded...

EUVD-2026-67136

Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the log rotation configuration endpoint allows an authenticated administrator to execute arbitrary operating system commands on the Liman server. The ipaddress parameter is embedded...

CVE-2026-57499

Liman , an open-source server management tool, contains an OS command injection vulnerability in its log rotation configuration endpoint (LogRotationController ). The ip_address parameter is embedded directly into a shell command without sanitization, allowing an authenticated administrator to es...

CVE-2022-20818

CVE-2022-20818: Lokale Privilegieneskalation durch partielle Dateiauslesung in Cisco SD-WAN Die „config - load“-Funktion der Viptela-SSH-Shell verwendet „wget“, um entfernte „command“-Dateien über FTP abzurufen. Indem ein Angreifer einen bösartigen FTP-Server hostet und die von wget erstellten...

Findomain v11.0.0-beta.1

Findomain The complete solution for domain recognition. Supports screenshotting, port scanning, importing data from other tools, subdomain monitoring, and more. Be alerted on your findings through services such as Discord, Slack, and Telegram. Multiple API Keys for sources and much more. Chat wit...

Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers

Cybersecurity researchers have disclosed details of a vulnerability in Amazon Kiro, an artificial intelligence AI-powered, agentic integrated development environment IDE, that could facilitate data exfiltration via prompt injection and Kiro Powers. The security flaw, which does not have a CVE...

CVE-2026-80570

A flaw was found in the synaptics-rmi4 component of the Linux kernel. This vulnerability occurs when an error in processing a report request or command leads to an incorrect size being used for subsequent data operations. A local user could exploit this by manipulating the video format, causing t...