CVE-2026-76217

A flaw was found in GitPython where it fails to properly validate options provided to its git rm and git checkout commands. A remote attacker with low privileges could exploit this by supplying crafted parameters, such as --pathspec-from-file and --pathspec-file-nul. This vulnerability allows for...

EUVD-2026-67163

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter does not sanitize note titles, and the GeoMap note view interpolates a marker note's title into raw HTML that is rendered as innerHTML, allowing an...

CVE-2026-48996 Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop client

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter does not sanitize note titles, and the GeoMap note view interpolates a marker note's title into raw HTML that is rendered as innerHTML, allowing an...

CVE-2026-48996

Trilium (open-source hierarchical note-taking app) versions up to 0.103.0 are affected by a vulnerability where the default "Safe import" filter fails to sanitize note titles. The GeoMap view interpolates a marker note's title into raw HTML rendered via innerHTML, so an attacker-crafted import ar...

CVE-2021-44103

CVE-2021-44103 Una prova di concetto per KONGA 0.14.9 - Elevazione dei privilegi. Introduzione Il 16 novembre 2021, Fabrício Salomão e io abbiamo trovato una vulnerabilità in Konga API Gateways, che consente a qualsiasi utente autenticato di diventare amministratore. Segnala la vulnerabilità...

CVE-2019-9193

CVE-2019–9193 - PostgreSQL 9.6.1 Remote Code Execution Authentifiziert Proof of Concept PostgreSQL-Datenbanken ab Version 9.6.1 sind anfällig für authentifizierte Remote Code Execution. Auch wenn es vom Entwicklungsteam nicht als Schwachstelle an sich betrachtet wird, kann dies ausgenutzt werden,...

CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection

CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection- Bookea-tu-Mesa è suscettibile a una vulnerabilità di SQL Injection SQLi. Questa falla consente agli aggressori di iniettare comandi SQL dannosi in grado di manipolare il database, compromettendo potenzialmente l'integrità e la sicurezz...

CVE-2024-41301-Bookea-tu-Mesa-is-vulnerable-to-Stored-Cross-Site-Scripting

CVE-2024-41301 - Bookea-tu-Mesa ist anfällig für gespeichertes Cross-Site-Scripting Bookea-tu-Mesa ist anfällig für eine Stored-Cross-Site-Scripting XSS Schwachstelle. Dieser Fehler erlaubt es Angreifern, schädliche Skripte einzuschleusen, die im Kontext der Benutzersitzung ausgeführt werden...

winmagic_sd

Technical Write-up on CVE-2020-11519 and CVE-2020-11520 Data: Giugno 2020 Autore: Dennis Elser codice: github Indice dei contenuti Introduzione Approccio e Descrizione Tecnica CVE-2020-11519 CVE-2020-11520 Exploit Proof-of-Concept Cronologia della divulgazione Soluzione Checksum Riferimenti...

demiguise

Demiguise - HTA encryption tool Released as open source by NCC Group Plc - http://www.nccgroup.trust/ Developed by Richard Warren, richard dot warren at nccgroup dot trust http://www.github.com/nccgroup/demiguise Released under AGPL, see LICENSE for more information What does it do? The aim of th...

demiguise

Demiguise - HTA-Verschlüsselungstool Als Open Source veröffentlicht von NCC Group Plc - http://www.nccgroup.trust/ Entwickelt von Richard Warren, richard punkt warren at nccgroup punkt trust http://www.github.com/nccgroup/demiguise Veröffentlicht unter AGPL, siehe LICENSE für weitere Informatione...

HITCON-2023-Demo-CVE-2023-20562

HITCON 2023 Demo CVE-2023-20562 Descrizione Questa dimostrazione si è svolta a HITCON 2023 a Taiwan. La demo evidenzia lo sfruttamento di AMDCpuProfiler.sys all'interno di AMD μProf. Attivando una scrittura arbitraria sul token EPROCESS, si ottiene l'escalation dei privilegi a livello SYSTEM. La...

rapidscan

🟥 RapidScan v1.2 - Lo scanner multi-strumento per vulnerabilità web RapidScan è stato portato a Python3, ovvero v1.2. Il codebase Python2.7 è disponibile nella sezione release della v1.1. Scaricalo e usalo se non sei ancora passato a Python 3. Si prega di notare che la v1.1 Python2.7 non verrà...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

CVE-2026-49952

Instalação root@kitploit: pip3 install Pillow torch torchvision Execução root@kitploit: $ python3 exploit.py http://localhost/discuz5/ +----------------------------------------------------+ | Discuz! X5.0 Remote Code Execution Exploit by EgiX | +---------------------------------------------------...

CVE-2023-47218

CVE-2023-47218 CVE-2023-47218: Iniezione di comando non autenticata in QNAP QTS e QuTS Hero RISOLTO POC root@kitploit: POST /cgi-bin/quick/quick.cgi?func=switchos&todo=uploaffirmwareimage HTTP/1.1 Host: 192.168.86.42:8080 User-Agent: Mozilla Macintosh Accept: / Content-Length: 164 Content-Type:...

meg

meg meg is a tool for fetching lots of URLs but still being 'nice' to servers. It can be used to fetch many paths for many hosts; fetching one path for all hosts before moving on to the next path and repeating. You get lots of results quickly, but non of the individual hosts get flooded with...

meg

meg meg è uno strumento per recuperare molti URL ma restando 'gentile' verso i server. Può essere utilizzato per recuperare molti percorsi per molti host; recuperando un percorso per tutti gli host prima di passare al percorso successivo e ripetere. Ottieni molti risultati rapidamente, ma nessuno...

mec

mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...

mec

mec Console de Exploração em Massa Destinado à exploração em massa Siga owiki para começar Funcionalidades Interface CLI fácil de usar Execute exploits adaptados com concorrência em nível de processo Exploits embutidos automatizados Oculte seu IP usando proxychains4 e proxypool Varredura de hosts...