CVE-2026-50751-Mitigation-Scripts

CVE-2026-50751-Mitigation-Scripts Es gibt mehrere Sicherungsmaßnahmen, die Sie aus der SK verwenden können; https://support.checkpoint.com/results/sk/sk185033 1. Deaktivieren Sie die Unterstützung für Legacy-Clients. 2. Konfigurieren Sie den Remotezugriff so, dass nur IKE v2 verwendet wird. Es gi...

CheckPoint-CVE-Webscanner

CVE Web Check Eine lokale Web-App mit Freigabeprozess zum Scannen und Beheben potenzieller Expositionen im Zusammenhang mit Check Point CVE-2026-50751 und CVE-2026-50752 mithilfe vertrauenswürdiger Check-Point-Management-API-Befehle. Dieses Tool wurde nicht von Check Point erstellt oder unterstüt...

CacheData_decrypt

CacheDatadecrypt Un semplice toolkit per il brute force e la decrittazione della CacheData di Windows EntraId. root@kitploit: usage: decryptcachedata.py -h pin,password ... CacheData bruteforcer. On a live windows host, to copy the folders with all subfolders and files: xcopy /H /E /G /C as SYSTE...

adups-get-super-serial

adups-get-super-serial CVE-2015-2231 Prova di Concetto La POC che stavo usando per dimostrare CVE-2015-2231 'Get Super Serial'. Alcune persone mi hanno chiesto di pubblicarla in modo che potessero usare cose simili su altri dispositivi basati su firmware ADUPS che presentano questa vulnerabilità...

web-brutator

Web Brutator Schneller modularer Web-Oberflächen-Bruteforcer 📥 Installation root@kitploit: python3 -m pip install -r requirements.txt ⏩ Verwendung root@kitploit: $ python3 web-brutator.py -h . / \ / \ \ | \ \ / | / | \ // // | \ | | /\ \ | \ \ \ \ / \ \ \ /\ /| \ \ // | | \ | | / | /| | / | |...

CVE-2026-53579 Trilium: Note Import to RCE via Book Note

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...

CVE-2026-53579

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0 , the default-on Safe import filter sanitizes HTML only for text notes but excludes the book note type. Book note content is stored unsanitized and later injected into the page via jQuery's htm...

EUVD-2026-67224

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...

CVE-2026-53579 Trilium: Note Import to RCE via Book Note

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...

CVE-2026-53579 Trilium: Note Import to RCE via Book Note

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...

RP_Import_RCE

Real Player 'external::Import' Beliebiges Herunterladen von Dateien, Directory-Traversal-Schwachstellen führen zu Remote Code Execution Video-Demo: https://youtu.be/CONlijEgDLc Real Player nutzt Funktionen von Microsoft Internet Explorer und legt Eigenschaften und Methoden über ein spezielles,...

refreshing-soap-exploit

Esta é uma prova de conceito para o CVE-2022-41622, que é um CSRF no F5 Big-IP que leva à execução remota de código. Usar isso é um pouco complicado, mas vou mostrar meus casos de uso favoritos. A vulnerabilidade A vulnerabilidade central é uma falsificação de solicitação entre sites na interface...

Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization

Summary IBM Financial Transaction Manager for RedHat OpenShift has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2025-68121 DESCRIPTION: During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial...

Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.

Summary Maximo AI Service uses tomcat-embed-core-10.1.57, netty-codec-http2-4.2.15.Final.jar, mlflow-3.11.1-py3-none-any.whl, gitpython-3.1.49-py3-none-any.whl, docling-2.91.0-py3-none-any.whl, transformers-5.6.2-py3-none-any.whl, ip-address-10.2.0.tgz, bcutil-jdk18on-1.84.jar,...

Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.

Summary Maximo AI Service uses keras-3.14.1, bcprov-jdk18on-1.84.jar, sentencetransformers-5.2.0-py3-none-any.whl, pillow-12.2.0-cp311-cp311-manylinux227x8664.manylinux228x8664.whl, tomcat-embed-core-10.1.55.jar, langgraphsdk-0.3.13-py3-none-any.whl, and transformers-4.57.5-py3-none-any.whl which...

dirtycow

✅ Requisiti / Versione del kernel interessata Dirty COW è una Local Privilege Escalation LPE nel kernel Linux nota come CVE-2016-5195. :contentReferenceoaicite:0index=0 🎯 Kernel vulnerabile In generale, Dirty COW colpisce i kernel Linux dalla 2.x alla 4.x precedenti alla 4.8.3...

SharpShooter

/ // / / // / / / / / / / \ / / / / / / / / / / / / / / / / / // // / / / / // / // / / / / / // / //, // / . // / /// /// / // Beschreibung SharpShooter ist ein Framework zur Generierung von Payloads für den Abruf und die Ausführung beliebigen CSharp-Quellcodes. SharpShooter kann Payloads in...

RAT-via-Telegram

RAT über Telegram Windows-Fernverwaltungstool über Telegram jetzt in Python 3.7! | Ursprünglich erstellt von Ritiek Warum noch eines? Die derzeitigen Remote-Verwaltungstools auf dem Markt haben zwei Hauptprobleme: Mangel an Verschlüsselung. Erfordern Portweiterleitung, um aus Hunderten von...

HQLmap

HQLMap Questo progetto è stato creato per sfruttare le iniezioni HQL. Lo strumento è stato scritto in Python e rilasciato sotto licenza MIT. Sviluppi futuri: ho in mente di sviluppare un modulo specifico per SQLmap. Dove puoi provare lo strumento? Se vuoi un ambiente vulnerabile veloce dove prova...

CVE-2025-47962-POC

CVE-2025-47962-POC Reproduktionsprozess: i686-w64-mingw32-gcc -shared -o CRYPTBASE.dll poc.c -lkernel32 copy CRYPTBASE.dll "C:\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\CRYPTBASE.dll" net stop IpOverUsbSvc net start IpOverUsbSvc Erklärung: IpOverUsbSvc root@kitploit: SERVICENAME: IpOverUsbSvc...