udpack

UDPack UDPack is an extensible generic UDP packet obfuscator. The purpose of this application is to sit in the path of a UDP data stream, and obfuscate, deobfuscate or otherwise modify the packets. Python 3.4 or above is required, since this script uses the asyncio library. Using the latest Pytho...

CVE-2023-31595

CVE-2023-31595 IC Realtime ICIP-P2012T is vulnerable to Incorrect Access Control via an open port IC Realtime IP PTZ Dome Camera ICIP-P2012 software version: 2.420 An exposed port 9989 responds with a live snapshot at the time of request, by using a script, it could be leveraged to have a live fe...

CVE-2024-21006

CVE-2024-21006 CVE-2024-21006 설명 Oracle Fusion Middleware의 Oracle WebLogic Server 제품 취약점 구성 요소: Core. 영향을 받는 지원 버전은 12.2.1.4.0 및 14.1.1.0.0입니다. 쉽게 악용 가능한 취약점으로, 네트워크 접근이 가능하고 인증되지 않은 공격자가 T3, IIOP를 통해 Oracle WebLogic Server를 손상시킬 수 있습니다. 이 취약점의 성공적인 공격은 중요 데이터에 대한 무단 접근 또는 Oracle WebLogic Server가...

libsrtp

libSRTP 소개 이 패키지는 Secure Real-time Transport ProtocolSRTP, Universal Security TransformUST 및 이를 지원하는 암호화 커널의 구현을 제공합니다. SRTP API는 include/srtp.h에 문서화되어 있으며, 라이브러리는 컴파일 후 libsrtp2.a에 있습니다. 이 문서는 Cisco Systems, Inc.의 오픈 소스 Secure RTP 라이브러리인 libSRTP를 설명합니다. RTP는 Real-time Transport Protocol로, 전화, 오디...

CVE-2023-31594

CVE-2023-31594 IC Realtime ICIP-P2012T is vulnerable to Incorrect Access Control Unauthenticated Streaming Channel in IC Realtime IP PTZ Dome Camera ICIP-P2012 software version: 2.420 The live feed MJPEG can be streamed via an exposed HTTP channel using VLC network stream. This vulnerability...

Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection

Visual Tools DVR VX16 4.2.28.0 could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. id: CVE-2021-42071 info: name: Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection author: gy741 severity: critical description: Visual...

Leantime < 2.4 - Authenticated SQL Injection

Leantime is an open source project management system. A 'userId' variable in app/domain/files/repositories/class.files.php is not parameterized. An authenticated attacker can send a carefully crafted POST request to /api/jsonrpc to exploit an SQL injection vulnerability. Confidentiality is impact...

Javafaces LFI

An Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware...

Joomla! Webservice - Password Disclosure

An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints. id: CVE-2023-23752 info: name: Joomla! Webservice - Password Disclosure author: badboycxcc,Sascha Brendel severity: medium description: | An issue was discovered in...

PoC_CVE-2025-54887

PoCCVE-2025-54887 This repository contains Proof-of-Concept PoC exploit for CVE-2025-54887. This is a vulnerability in ruby-jwe version = 1.1.0 where the authentication tag of encrypted JWEs can be brute forced, which may result in loss of confidentiality and provide ways to craft arbitrary JWEs...

CVE-2018-16987

CVE-2018-16987 Questa è una vulnerabilità di archiviazione in chiaro di informazioni sensibili e di esposizione di informazioni sensibili che ho trovato in Squash TM durante un test di penetrazione. SquashTM Squash TM è un'interfaccia web utilizzata per gestire i casi di test. Link al progetto...

CVE-2026-81341

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field for the cipher to populate, the value...

CVE-2026-81341 wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field for the cipher to populate, the value...

CVE-2026-81341

wolfEngine (before 1.4.1 ) reuses the AES-CCM nonce on TLS 1.2 and DTLS 1.2 records because it sources the explicit nonce from the record input buffer rather than the TLS sequence number. Since the record layer leaves that field for the cipher to populate, the value is constant, meaning every AES...

CVE-2026-81341 wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field for the cipher to populate, the value...

EUVD-2026-67738

wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field for the cipher to populate, the value...

CVE-2023-22515-Confluence

CVE-2023-22515 Confluence Questo repository è stato creato a scopo educativo e non costituisce un invito all'azione. Le informazioni devono essere gestite con cautela, poiché alcuni file eseguibili potrebbero compromettere l'integrità/disponibilità/riservatezza dei sistemi...

CVE-2018-9995_dvr_credentials

Strumento mostra credenziali DVR root@kitploit: Titolo Exploit: "Gets DVR Credentials" CVE: CVE-2018-9995 Punteggio Base CVSS v3: 7.3 / 10 Stringa del Vettore CVSS: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Data: 09/04/2018 Autore dell'Exploit: Fernandez Ezequiel twitter:@capitanalfa Exploit:...

CVE-2020-10129

CVE-2020-10129 - Il prodotto SearchBlox precedente alla V-9.2 è vulnerabile all'escalation dei privilegi: un utente di livello inferiore è in grado di accedere all'Admin Descrizione del prodotto: SearchBlox semplifica la ricerca aziendale per le organizzazioni complesse. Gli strumenti intuitivi e...

CVE-2020-1611

Vulnerabilità di inclusione di file locale in Juniper Junos Space precedente alla versione 19.4R1 CVE-2020-1611 PoC Juniper Junos Space precedente alla versione 19.4R1 è vulnerabile a una vulnerabilità di inclusione di file locale. Un attaccante con diritti di un utente normale potrebbe sfruttare...