CVE-2015-8710

Riproduttore Un ringraziamento a Mike Dalessio, Francois Chagnon, Florian Weingarten e Jun Kokatsu. Vedi BZ 746048 Compilazione su Linux root@kitploit: $ cmake ../CVE-2015-8710/ -G "Unix Makefiles" -DLIBXML2LIBRARIES=/path/to/your/library/libxml2.so.2...

flare-qdb

FireEye Labs Query-Oriented Debugger flare-qdb is a command-line and scriptable Python-based tool for evaluating and manipulating native program state. It uses Vivisect to set a breakpoint on each queried instruction and executes Python code when hit. flare-qdb frees the analyst to take a nonline...

CVE-2018-11776-FIS

CVE-2018-11776 è una vulnerabilità di sicurezza in Apache Struts, un framework popolare per lo sviluppo di applicazioni web. Questa vulnerabilità consente agli aggressori di effettuare attacchi remoti tramite l'iniezione di codice malevolo nei campi dati delle richieste HTTP. Questa vulnerabilità...

-CVE-2022-22954-scanner

CVE-2022-22954-scanner Introduzione alla vulnerabilità VMware Workspace ONE Access precedentemente noto come VMware Identity Manager è progettato per consentire ai dipendenti di accedere più rapidamente ad applicazioni SaaS, Web e mobili native, tramite autenticazione multifattore, accesso...

send

@fastify/send Send è una libreria per lo streaming di file dal filesystem come risposta HTTP, con supporto per risposte parziali Range, negoziazione condizionale GET If-Match, If-Unmodified-Since, If-None-Match, If-Modified-Since, elevata copertura dei test ed eventi granulari che possono essere...

CVE-2026-66066

CVE-2026-66066 — KindaRails2Shell Ruby on Rails Active Storage + libvips lettura file arbitrari → PoC per esecuzione di codice remoto RCE condizionale. File singolo, Python 3.11+, solo libreria standard, zero dipendenze , con payload misto MAT/HDF5 integrato, decoder PNG in puro Python, lettura a...

claude-code-guardrails

Wir haben inzwischen ein spezielles Produkt entwickelt, um Entwicklern zu helfen, KI-Berechtigungen besser zu verwalten, das wir als Open Source veröffentlichen wollen. Schauen Sie es sich unterstoplight.ai an. Claude Code Guardrails settings.json funktioniert, wenn: Sie mit der Bearbeitung von...

TokenFlare

TokenFlare Serverloses AITM-Phishing-Simulations-Framework für Entra ID / M365 Funktionen Schlank: Kernlogik in src/worker.js nur 530 Zeilen JavaScript. Modular: Unterstützt mehrere OAuth-Abläufe, mit integrierter Intune Conditional Access Bypass-Unterstützung Einfach anpassbar: Richten Sie...

EntraFalcon

EntraFalcon EntraFalcon is a PowerShell-based assessment tool for pentesters, security analysts, and system administrators to evaluate the security posture of a Microsoft Entra ID environment. Designed for ease of use, EntraFalcon runs on PowerShell 5.1 and 7, supports both Windows and Linux, and...

CVE-2026-54245

Fleet is an open-source device management platform built on osquery. In versions prior to 4.86.2, the Okta conditional access integration in Fleet Premium is vulnerable to SQL injection through a host-supplied value that is used in a database query without proper parameterization, allowing an...

CVE-2026-54245 Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database

Fleet is an open-source device management platform built on osquery. In versions prior to 4.86.2, the Okta conditional access integration in Fleet Premium is vulnerable to SQL injection through a host-supplied value that is used in a database query without proper parameterization, allowing an...

CVE-2026-54245

Fleet (open-source device management platform built on osquery) has a SQL injection in the Okta conditional access integration available in Fleet Premium. A value reported by a host's own agent is stored verbatim and then used in a database query without proper parameterization on an unauthentica...

CVE-2026-54245 Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database

Fleet is an open-source device management platform built on osquery. In versions prior to 4.86.2, the Okta conditional access integration in Fleet Premium is vulnerable to SQL injection through a host-supplied value that is used in a database query without proper parameterization, allowing an...

GO-2026-6264 Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database in github.com/fleetdm/fleet

Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database in github.com/fleetdm/fleet...

ConditionalAccessDocumentation

Documentare l'Accesso Condizionale con PowerShell Questo script PowerShell documenta le tue policy di Accesso Condizionale di Microsoft Entra. Lo script esporta tutti i dati in un file CSV che può essere formattato come un foglio di lavoro Excel. Per garantire che tutte le policy possano essere...

caOptics

Hinweis Projekt archiviert aufgrund sich ändernder Entwicklungsprioritäten und der Neuausrichtung meiner Community-Aktivitäten auf andere Bereiche PoCs, andere Tools und Demos/Präsentationen. Das Projekt ist auf schreibgeschützt gesetzt. CA Optics - Azure AD Conditional Access Gap Analyzer Was is...

GHSA-7Q96-F8XW-JV5J Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database

Summary A SQL injection vulnerability in Fleet's Okta conditional access integration could allow an attacker who controls a single enrolled host to read or modify arbitrary data in the Fleet database, including stored session tokens. Disclosed session tokens may be replayed to act as a global...

Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database

Summary A SQL injection vulnerability in Fleet's Okta conditional access integration could allow an attacker who controls a single enrolled host to read or modify arbitrary data in the Fleet database, including stored session tokens. Disclosed session tokens may be replayed to act as a global...

PT-2026-80753

Name of the Vulnerable Software and Affected Versions Fleet affected versions not specified Description A SQL injection exists in the Okta conditional access integration. An attacker controlling a single enrolled host can provide a value via the host agent that is used in a database query without...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Quota: Fixed a livelock issue between quotactl and freezesuper. When a filesystem is frozen, quotactlblock enters a retry loop, waiting for the filesystem to thaw. It acquires sumount, checks the freeze state, releases sumount, a...