apache__jspwiki_CVE-2019-10077_2_11_0_M4_fixed

Apache JSPWiki 2.11 - Documentazione root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...

CVE-2026-77358

cpp-httplib , a C++ header-only HTTP/HTTPS library, is affected by a use-after-free vulnerability in its TLS-enabled WebSocket client (versions 0.33.0 through 0.50.0 ). In WebSocketClient::shutdown_and_close(), the SSL object is freed and its pointer cleared before the WebSocket close frame is se...

CVE-2026-77358

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

CVE-2026-77358 cpp-httplib: Use-after-free of TLS session in WebSocketClient::shutdown_and_close()

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

CVE-2026-77358 cpp-httplib: Use-after-free of TLS session in WebSocketClient::shutdown_and_close()

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

EUVD-2026-67302

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

CVE-2025-50110

CVE-2025-50110 Trasmissione in chiaro di informazioni sensibili nell'applicazione Android EagleEyes Lite 1. Panoramica Nome : EagleEyesLite Versione : 2.0.0 Fornitore : AVTECH CWE : CWE-319: Cleartext Transmission of Sensitive Information, CWE-598: Use of GET Request Method With Sensitive Query...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock — PFEM10 CVE-2026-43499 IonStack exploit for OP...

CVE-2025-48827

CVE-2025-48827 - Exploit di Bypass dell'Autenticazione di vBulletin Panoramica Questo repository contiene un exploit proof-of-concept per CVE-2025-48827, una vulnerabilità critica di bypass dell'autenticazione che colpisce vBulletin 5.0.0–5.7.5 e 6.0.0–6.0.3 quando eseguito su PHP 8.1 o successiv...

Security Bulletin: Security Vulnerability in Spring MVC affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2024-38828)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Spring MVC Vulnerability Details CVEID:CVE-2024-38828 DESCRIPTION: Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack. CWE:CWE-400: Uncontroll...

fastjson-tp1fn1

json.org CVE-2022-45688 True- und False-Positive WTF ?? Das Projekt enthält eine fastjson-Abhängigkeit mit CVE-2022-25845. Die Schwachstelle tritt auf, da Markup in JSON als Java-Beans interpretiert wird, d. h. Klassen werden instanziiert und Eigenschaften werden durch das Ausführen von...

CVE-2026-76179 Ebyte NE2-D11 Use of GET Request Method With Sensitive Query Strings

An improper protection of authentication tokens vulnerability exists in certain Ebyte gateway products. Authentication tokens used by the web management interface are insufficiently protected during client-side session handling, which may allow an attacker with access to exposed session informati...

CVE-2026-76179 Ebyte NE2-D11 Use of GET Request Method With Sensitive Query Strings

An improper protection of authentication tokens vulnerability exists in certain Ebyte gateway products. Authentication tokens used by the web management interface are insufficiently protected during client-side session handling, which may allow an attacker with access to exposed session informati...

dotnetpaddingoracle

dotnetpaddingoracle Piccolo script per verificare se l'applicazione web .NET è vulnerabile al padding Oracle Questo script verifica effettivamente se l'oracolo è presente e sfruttabile, non solo se la patch è stata installata. Uso root@kitploit: dotnetpaddingoracle.py -h -t -b -d -s -p PARAMETER...

DetectWindowsCopyOnWriteForAPI

Strumenti di Enumerazione delle Proprietà dei Processi Windows per la Caccia alle Minacce ====================== Sfondo Lo scopo di questi strumenti è enumerare le caratteristiche dei processi Windows che supportano il rilevamento delle tecniche di process injection utilizzate dagli attori delle...

CVE-2023-34839

CVE-2023-34839 — Issabel PBX 4.0.0-6: CSRF zu Privilegieneskalation Inhaltsverzeichnis Übersicht Details zur Schwachstelle Betroffene Software CVSS-Score Angriffsszenario Proof of Concept PoC Schritte zum Reproduzieren Auswirkungen Behebung Referenzen Haftungsausschluss Übersicht CVE-2023-34839 i...

WindowsMemPageDelta

Windows-Delta-Reporter für ausführbare Speicherseiten Ein Windows-Dienst, der alle 30 Sekunden performant Telemetrie über neue oder geänderte Windows-Speicherseiten erzeugt, die jetzt ausführbar sind. Von NCC Group Plc als Open Source veröffentlicht - http://www.nccgroup.com/ Entwickelt von Ollie...

WindowsFirewallHookDriverEnumeration

Enumeração do Driver de Hook do Firewall do Windows Ferramentas para enumerar drivers de hook do firewall do Windows no Windows 2000, XP e 2003. Vimos uma amostra de código malicioso que usa essa técnica. A Técnica de Hooking A funcionalidade de Hook do Firewall do Windows na técnica XP/2003 1234...

zipdefrag

Dieser Dump ist ein Puzzle oder fortgeschrittenes Shotgun-Parsing für Narren und Rebellen Es war einmal Es war einmal, liebe Leserin, lieber Leser, in einer dunklen und stürmischen Nacht: Dein treuer Autor stieß auf eine verwirrende und geheimnisvolle Situation – ein System, in dem das Einzige, w...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in IBM Semeru Runtime Quarterly CPU - Jul 2026 - Includes OpenJDK July 2026 CPU

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-41254, CVE-2026-47057, CVE-2026-47063, CVE-2026-47058, CVE-2026-60147, CVE-2026-46968, CVE-2026-47027, CVE-2026-47021, CVE-2026-46917, CVE-2026-47059, CVE-2026-47010, CVE-2026-16439, CVE-2026-16441, CVE-2026-1624...