polymorph

Polymorph Polymorph ist ein Tool, das die Änderung des Netzwerkverkehrs im laufenden Betrieb erleichtert, indem es die Ausführung von Python-Code auf Netzwerkpaketen ermöglicht, die in Echtzeit abgefangen werden. Dieses Framework kann verwendet werden, um in Echtzeit Netzwerkpakete zu modifiziere...

CVE-2024-54152

⚙️🔨 IN BEARBEITUNG CVE-2024-54152 POC Angular Expressions stellt Ausdrücke für das Angular.JS-Webframework als eigenständiges Modul bereit. Vor Version 1.4.3 kann ein Angreifer einen bösartigen Ausdruck schreiben, der die Sandbox umgeht, um beliebigen Code auf dem System auszuführen. Mit einer...

BigBountyRecon

BigBountyRecon Das BigBountyRecon-Tool nutzt 58 verschiedene Techniken, darunter verschiedene Google Dorks und Open-Source-Tools, um den Prozess der ersten Aufklärung über die Zielorganisation zu beschleunigen. Die Aufklärung ist der wichtigste Schritt in jedem Penetrationstest oder...

AutoSploit

AutoSploit Comme vous pouvez l'imaginer au vu du nom de ce projet, AutoSploit automatise l'exploitation d'hôtes distantes connectées à internet. Les adresses des hôtes à attaquer sont collectées automatiquement grâce à l'aide de Shodan, Censys et Zoomeye. Vous pouvez également utiliser vos propre...

AllAboutBugBounty

Tutto sul bug bounty Queste sono le mie note sul bug bounty che ho raccolto da varie fonti, puoi contribuire anche tu a questo repository! Elenco Vulnerabilità Caricamento di File Arbitrario Iniezione CRLF Cross Site Request Forgery CSRF Cross Site Scripting XSS Negazione del Servizio DoS Codice...

Security Bulletin: IBM Edge Data Collector uses cmov-0.5.3.crate which is vulnerable to CVE-2026-50185.

Summary IBM Edge Data Collector uses cmov-0.5.3.crate which is vulnerable to CVE-2026-50185. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-50185 DESCRIPTION: RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on...

cve-2021-29627

CVE-2021-29627 Etwas Code, um den Bug auszulösen, inkl. macsetfd spray. Braucht aber ein spray target...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses brace-expansion-1.1.16.tgz which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor component uses brace-expansion-1.1.16.tgz which is vulnerable to CVE-2026-14257 and CVE-2026-69152. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-14257 DESCRIPTION: brace-expansion through 5.0.7...

CVE-2024-1512

CVE-2024-1512 Konzeptnachweis Schwachstellenübersicht CVE-2024-1512 legt eine kritische Schwachstelle im MasterStudy LMS WordPress Plugin offen, speziell innerhalb der Implementierung der REST-Route /lms/stm-lms/order/items. Das Problem entsteht dadurch, dass das Plugin den Parameter 'user' nicht...

injectAmsiBypass

Cobalt Strike BOF - Inietta bypass AMSI Cobalt Strike Beacon Object File BOF che bypassa AMSI in un processo remoto con code injection. Esecuzione di inject-amsiBypass BOF da CobaltStrike Cosa fa? 1. Usa l'argomento PID fornito per ottenere un handle sul processo remoto root@kitploit: hProc =...

Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization

Summary IBM Financial Transaction Manager for RedHat OpenShift has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2025-68121 DESCRIPTION: During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial...

AegisJava

AegisJava Uma ferramenta especializada para detectar e mitigar a CVE-2025-30749 , uma vulnerabilidade crítica de Execução Remota de Código RCE no Oracle Java SE. Detalhes da Vulnerabilidade CVE : CVE-2025-30749 Severidade : Alta CVSS 8.1 Componentes Afetados : Java 2D Impacto : Execução Remota de...

Microsoft-Remote-Desktop-Services-Remote-Code-Execution-Vulnerability-CVE-2019-0708

В этом репозитории нет README...

CVE-2023-27350-Ongoing-Exploitation-of-PaperCut-Remote-Code-Execution-Vulnerability

Dieses Repository hat keine README-Datei...

EUVD-2026-67223

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored without sanitization, allowing an attacker-supplied impo...

CVE-2026-53578 Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored without sanitization, allowing an attacker-supplied impo...

CVE-2026-53578

Trilium (versions ≤ 0.103.0), an open-source hierarchical note-taking application, contains a vulnerability in its default-on Safe import filter. The filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored unsanitized. A mind map node can carry a...

CVE-2026-53578 Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the mindMap note type, whose JSON content is stored without sanitization, allowing an attacker-supplied impo...

shodan

Shodan Dorks di twitter.com/lothos612 Sentiti libero di fare suggerimenti Shodan Dorks Filtri Shodan di Base city: Trova dispositivi in una città specifica. city:"Bangalore" country: Trova dispositivi in un paese specifico. country:"IN" geo: Trova dispositivi fornendo coordinate geografiche...

sweyntooth_bluetooth_low_energy_attacks

SweynTooth - Desencadeando o Caos sobre Bluetooth Low Energy Este repositório é parte do resultado de uma pesquisa doASSET Research Group. O SweynTooth cobre uma família de 18 vulnerabilidades em diferentes kits de desenvolvimento de software SDKs de Bluetooth Low Energy BLE de seis grandes...