cabir_analysis

description: Bluetooth-Wurm:SymbOS/Cabir-Analyse Bluetooth-Wurm:SymbOS/Cabir-Analyse Bevor du mit dem Lesen beginnst, muss ich diese Ankündigung machen: BITTE NIMM ALLES, WAS DU LIEST, MIT VORSICHT, DA ICH KEINESWEGS EIN SymbianOS-ENTWICKLER ODER IRGENDWIE MIT DER SymbianOS-UMGEBUNG VERTRAUT BIN...

CVE-2025-29927

CVE-2025-29927 – Bypass de Autorização do Middleware do Next.js Este repositório contém um exploit funcional para o CVE-2025-29927, uma vulnerabilidade crítica de bypass de autorização no Next.js. A falha permite que atacantes ignorem as verificações de autenticação e autorização baseadas em...

CVE-2026-54713

CakePHP Queue is a queue-interop compatible queueing library. From 0.1.11 until 2.3.1, QueueManager::getUniqueId generates identifiers for jobs with shouldBeUnique enabled from the job class, method, and parameters, but sorting parameter values drops associative-array keys. An unauthenticated...

CVE-2026-53579

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...

asminject

asminject.py asminject.py ist ein stark modifizierter Fork des dlinject-Projekts von David Buchanan. Es injiziert beliebige Assembly- oder vorkompilierte Binär- Payloads direkt in x86-64-, x86- und ARM32-Linux-Prozesse, indem es auf /proc//mem zugreift, anstatt über ptrace anzuhängen. Nützlich zu...

FencePost

FencePost Dashboard multi-host per il firewall UFW. Si connette a host Linux tramite SSH, analizza le regole del firewall e le porte in ascolto, spiega tutto in italiano semplice e segnala le lacune di sicurezza. Caratteristiche Panoramica multi-host — visualizza a colpo d'occhio lo stato UFW, le...

linux-kernel-algif-aead-checker

CVE-2026-31431 / Copy Fail Checker 🔒 Strumento di controllo delle vulnerabilità del kernel Linux per il percorso di attacco Copy Fail basato su algifaead. Rileva se il tuo sistema è vulnerabile e fornisce passaggi di mitigazione. Funzionalità Rilevamento dell'intervallo di versioni del kernel...

CVE-2026-8023

CVE-2026-8023 — اجتياز المسار في HTTP static-fs في Zephyr PoC اجتياز المسار قبل المصادقة في معالج static-fs لخادم HTTP في Zephyr subsys/net/lib/http عند استخدام مطابقة الموارد باستخدام حرف البدل CONFIGHTTPSERVERRESOURCEWILDCARD=y مع HTTPRESOURCETYPESTATICFS. يؤثر على كلٍّ من HTTP/1.1 و HTTP/2...

prism

लोडेड डाइस: स्केलेबल प्रोबेबिलिस्टिक रोहैमर डिफेंस के लिए नॉन-सेलेक्शन समस्या का समाधान 53वें अंतर्राष्ट्रीय कंप्यूटर आर्किटेक्चर संगोष्ठी ISCA, 2026 में प्रकाशित होने वाला। Jeonghyun Woo1, Junsu Kim1, Aamer Jaleel2, Prashant J. Nair1 1 ब्रिटिश कोलंबिया विश्वविद्यालय 2 NVIDIA समान योगदान पेपर PDF...

CVE-2026-50751-Mitigation-Scripts

CVE-2026-50751-Mitigation-Scripts Es gibt mehrere Sicherungsmaßnahmen, die Sie aus der SK verwenden können; https://support.checkpoint.com/results/sk/sk185033 1. Deaktivieren Sie die Unterstützung für Legacy-Clients. 2. Konfigurieren Sie den Remotezugriff so, dass nur IKE v2 verwendet wird. Es gi...

CheckPoint-CVE-Webscanner

CVE Web Check Eine lokale Web-App mit Freigabeprozess zum Scannen und Beheben potenzieller Expositionen im Zusammenhang mit Check Point CVE-2026-50751 und CVE-2026-50752 mithilfe vertrauenswürdiger Check-Point-Management-API-Befehle. Dieses Tool wurde nicht von Check Point erstellt oder unterstüt...

CacheData_decrypt

CacheDatadecrypt Un semplice toolkit per il brute force e la decrittazione della CacheData di Windows EntraId. root@kitploit: usage: decryptcachedata.py -h pin,password ... CacheData bruteforcer. On a live windows host, to copy the folders with all subfolders and files: xcopy /H /E /G /C as SYSTE...

adups-get-super-serial

adups-get-super-serial CVE-2015-2231 Prova di Concetto La POC che stavo usando per dimostrare CVE-2015-2231 'Get Super Serial'. Alcune persone mi hanno chiesto di pubblicarla in modo che potessero usare cose simili su altri dispositivi basati su firmware ADUPS che presentano questa vulnerabilità...

CVE-2026-53579 Trilium: Note Import to RCE via Book Note

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...

EUVD-2026-67224

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...

CVE-2026-53579

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0 , the default-on Safe import filter sanitizes HTML only for text notes but excludes the book note type. Book note content is stored unsanitized and later injected into the page via jQuery's htm...

CVE-2026-53579 Trilium: Note Import to RCE via Book Note

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...

CVE-2026-53579 Trilium: Note Import to RCE via Book Note

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...

RP_Import_RCE

Real Player 'external::Import' Beliebiges Herunterladen von Dateien, Directory-Traversal-Schwachstellen führen zu Remote Code Execution Video-Demo: https://youtu.be/CONlijEgDLc Real Player nutzt Funktionen von Microsoft Internet Explorer und legt Eigenschaften und Methoden über ein spezielles,...

refreshing-soap-exploit

Esta é uma prova de conceito para o CVE-2022-41622, que é um CSRF no F5 Big-IP que leva à execução remota de código. Usar isso é um pouco complicado, mas vou mostrar meus casos de uso favoritos. A vulnerabilidade A vulnerabilidade central é uma falsificação de solicitação entre sites na interface...