Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site...

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass

A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting XSS attacks in applications. Such attacks can result in information...

CVE-2022-22063

CVE-2022-22063 CVE-2022-22063 è un problema di sicurezza nel firmware dell'hypervisor di alcuni chipset Qualcomm meno recenti. Un componente hardware non protetto il "boot remapper" può essere abusato per ottenere accesso completo in lettura/scrittura all'hypervisor da un sistema operativo...

CVE-2024-30167

Atlona OME प्रमाणित कमांड इंजेक्शन के लिए PoC अस्वीकरण : यह प्रूफ ऑफ कॉन्सेप्ट केवल शैक्षिक और अनुसंधान उद्देश्यों के लिए प्रदान किया गया है। इस कोड का उपयोग उन सिस्टमों पर न करें जिनके आप मालिक नहीं हैं या जिनके परीक्षण के लिए आपके पास स्पष्ट अनुमति नहीं है। मैं किसी भी दुरुपयोग के लिए जिम्मेदार...

hoaxshell

hoaxshell ⚡ The latest version of this project is the HoaxShell standalone listener which comes with refreshed payload templates. Wou can also use it directly from https://revshells.com make sure to choose hoaxshell as the listener. ⚠️ As of 2022-10-18, hoaxshell is detected by AMSI...

hoaxshell

hoaxshell ⚡ Die neueste Version dieses Projekts ist der HoaxShell Standalone Listener, der mit aktualisierten Payload-Vorlagen kommt. Du kannst es auch direkt von https://revshells.com verwenden stelle sicher, dass du hoaxshell als Listener auswählst. ⚠️ Seit dem 18.10.2022 wird hoaxshell von AMSI...

m365_groups_enum

Enumera i gruppi di Microsoft 365 in un tenant con i loro metadati Descrizione Lo script allgroups.py permette di enumerare tutti i gruppi di Microsoft 365 in un tenant di Azure AD con i loro metadati: nome visibilità: pubblico o privato descrizione indirizzo email proprietari membri Teams...

Massive-Subdomain-Enumerator

Massive-Subdomain-Enumerator Esta ferramenta utiliza uma combinação de wordlists baseadas em dicionários força bruta e verificações de resolução DNS para confirmar a existência de subdomínios. Funcionalidades Processamento de Wordlists: Capaz de lidar com wordlists grandes de forma eficiente...

CVE-2017-1000486

CVE-2017-1000486 Primefaces = 5.2.21, 5.3.8 o 6.0 - Exploit di Esecuzione Remota di Codice Per installare i requisiti esegui: root@kitploit: git clone https://github.com/pimps/CVE-2017-1000486.git cd CVE-2017-1000486 pip3 install -r requirements.txt Ecco come usare l'exploit: root@kitploit: $...

DragonCastle

DragonCastle Una PoC che combina la tecnica di movimento laterale AutodialDLL e SSP per estrarre hash NTLM dal processo LSASS. Descrizione Carica una DLL sulla macchina target. Quindi abilita il registro remoto per modificare la voce AutodialDLL e avvia/riavvia il servizio BITS. Svchosts caricher...

CVE-2026-80104 DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename

DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the upload directory. skillupload in packages/dbgpt-app/src/dbgptapp/openapi/apiv1/agenticdataapi.py takes file.filename as given and writes the request body to uploaddir / filename. A...

EUVD-2026-66108

DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the upload directory. skillupload in packages/dbgpt-app/src/dbgptapp/openapi/apiv1/agenticdataapi.py takes file.filename as given and writes the request body to uploaddir / filename. A...

CVE-2026-80104

DB-GPT 0.8.0 is affected by a path traversal vulnerability in the skill_upload endpoint (in agentic_data_api.py). The function constructs the destination path using the multipart filename directly via the / operator without canonicalization or a containment check under the upload directory. An ab...

RansomCoinPublic

RansomCoin Extraktion von Metadaten und fest codierten Indikatoren für Kompromittierung aus Ransomware auf skalierbare, effiziente Weise mit Cuckoo-Integrationen. Idealerweise wird es während der Cuckoo-Dynamikanalyse ausgeführt, kann aber auch für statische Analysen großer Ransomware-Sammlungen...

CVE-2025-55182-react2shell

react2shell CVE-2025-55182 Toolkit. Scanner + Exploit für unauthorisierte RCE in Next.js via RSC-Payload-Injection. Node.js Exploit: keine Abhängigkeiten. Bash-Scanner: prüft einzelne URLs oder Bulk-Listen. Exploit root@kitploit: Single command with output ./react2shell.mjs -t http://target:3000 ...

full-poc-CVE-2025_21298

Análise da vulnerabilidade CVE-2025-21298 CVE-2025-21298 é uma vulnerabilidade crítica na tecnologia OLE Object Linking and Embedding usada no Microsoft Windows. Ela afeta especificamente a função UtOlePresStmToContentsStm na biblioteca ole32.dll. Esta função é responsável por converter um "fluxo...

Log4Shell-CVE-2021-44228-PoC

Log4Shell CVE-2021-44228: Kurzbeschreibung Apache Log4j2 2.0-beta9 bis 2.15.0 keine Releases 2.12.2, 2.12.3 und 2.3.1 JNDI-Funktionen, die in Konfiguration, Logmeldungen und Parametern verwendet werden, schützen nicht vor vom Angreifer kontrollierten LDAP- und anderen JNDI-bezogenen Endpunkten. E...

Embedded-PDF

Eingebettete Hintertür-Verbindung über PDF-Dateien 😈 bereitgestellt von Einleitung Dieses Demonstrationsvideo zeigt, wie wir das Gerät des Opfers steuern können, indem wir die harmlos aussehende PDF-Datei an das Ziel senden, die tatsächlich eine eingebettete Nutzlast enthält. Der Exploit wurde al...

CVE-2026-74932

The WP Fastest Cache WordPress plugin before 1.5.1 does not validate the Host header before using it to build the URLs of the asset files it embeds in the pages it caches, and does not include that header in the cache key, allowing unauthenticated attackers to poison cached pages with references ...