0day-security-software-vulnerability-analysis-technology

0day-security-software-vulnerability-analysis-technology Note sull'uso del pacchetto di materiali allegato al libro 《0day安全：软件漏洞分析技术（第二版）》 I materiali contenuti nel pacchetto sono forniti esclusivamente a scopo di apprendimento. Nessuna organizzazione, persona o ente può utilizzare i materiali de...

roundcube-cve-2021-44026

Roundcube CVE-2021-44026, uma injeção SQL Este repositório contém um exploit de demonstração para uma injeção SQL no Roundcube. Aviso Legal : Este código destina-se exclusivamente a fins educacionais e para ajudar equipes de segurança a identificar vulnerabilidades em suas instâncias do Roundcube...

Exploit for Improper Input Validation in Microsoft

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulne...

EUVD-2010-5057

Malware in sbrugna...

EUVD-2019-18928

Malware in sbrugna...

EUVD-2020-0126

Malware in sbrugna...

EUVD-2018-1026

Malware in sbrugna...

EUVD-2016-9944

Malware in sbrugna...

EUVD-2025-23002

Malicious code in bioql PyPI...

EUVD-2025-16045

Malicious code in bioql PyPI...

EUVD-2025-7227

Malicious code in bioql PyPI...

EUVD-2022-3567

Malicious code in bioql PyPI...

Exploit for Improper Input Validation in Microsoft

Email exploit Moniker Link-CVE-2024-21413-Module — Documentati...

Exploit for Weak Password Recovery Mechanism for Forgotten Password in Gitlab

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This c...

CVE-2023-2437

The UserPro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.1.1. This is due to insufficient verification on the user being supplied during a Facebook login through the plugin. This makes it possible for unauthenticated attackers to log in as any...

CVE-2023-3277

The MStore API plugin for WordPress is vulnerable to Unauthorized Account Access and Privilege Escalation in versions up to, and including, 4.10.7 due to improper implementation of the Apple login feature. This allows unauthenticated attackers to log in as any user as long as they know the user's...

CVE-2022-29853

OX App Suite through 8.2 allows XSS via a certain complex hierarchy that forces use of Show Entire Message for a huge HTML e-mail message...

CVE-2021-38375

OX App Suite through 7.10.5 allows XSS via the alt attribute of an IMG element in a truncated e-mail message...

CVE-2021-26929

An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 where the HordeTextFilter library before 2.3.7 is used. The attacker can send a plain text e-mail message, with JavaScript encoded as a link or email that is mishandled by preProcess in Text2html.php, because bespoke us...

CVE-2024-10245

The Relais 2FA plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0. This is due to incorrect authentication and capability checking in the 'rldoajax' function. This makes it possible for unauthenticated attackers to log in as any existing user on the...