CVE-2026-78072

CVE-2026-78072 affects the Joomla extension Sexy Polling Reloaded by Jefferson49 , in versions earlier than 5.6.1 . The vulnerability is an unauthenticated blind SQL injection , meaning a remote attacker with no privileges or user interaction can exploit it over the network with low complexity. T...

CVE-2026-78070

CVE-2026-78070 affects the DP Calendar Joomla extension (by digital-peak.com), versions 5.5.0 through 10.11.2 . The vulnerability is an authenticated blind SQL injection in the extension's content plugin , triggered when saving an article . Exploitation requires the attacker to hold update permis...

EUVD-2026-67650

Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2 - Saving an article can trigger a blind SQL injection with content plugin, needs update permission for articles...

CVE-2026-78070 Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2

Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2 - Saving an article can trigger a blind SQL injection with content plugin, needs update permission for articles...

CVE-2026-78070 Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2

Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2 - Saving an article can trigger a blind SQL injection with content plugin, needs update permission for articles...

CVE-2024-9264-Fixed

🛠️ CVE-2024-9264 - Behobener Grafana RCE-Exploit Dies ist eine korrigierte Version des Proof-of-Concept-Exploits für CVE-2024-9264 , eine kritische Remote-Code-Ausführung-Sicherheitslücke in Grafana über SQL-Ausdrücke und DuckDB. 🔗 Ursprüngliche Meldung: Grafana Security Release ❌ Ursprünglicher...

BurpSuiteSharpenerEx

Burp Suite Sharpener यह एक्सटेंशन Burp Suite में कई UI और कार्यात्मक सुविधाएँ जोड़कर उसे बेहतर बनाता है, जिससे यह अधिक उपयोगकर्ता-अनुकूल हो जाता है। संगतता के बारे में विस्तृत जानकारी के लिए "Burp Suite संगतता और त्रुटि रिपोर्टिंग" अनुभाग देखें। root@kitploit: / | | . \ | . | || '| . / .| ' |/ .|...

ExtensionHijack

ExtensionHijacker Un possibile metodo di persistenza malware. Dirottamento delle estensioni registrate per l'utente corrente. Leggi di più qui proxyapp - un'applicazione proxy, utilizzata per gestire le estensioni dirottate hijackerapp - installa l'applicazione proxy e reindirizza la gestione...

CVE-2026-80636

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: revert ct extension genid infrastructure This infrastructure is not used anymore after moving ct timeout and helper to use datapath refcount to track object use. Revert commit c56716c69ce1 "netfilter:...

fastfuz-chrome-ext

FastFuzz Chrome Extension Fast fuzzing websites with chrome extension Screenshot Install Add Your Custom Files Open files.txt Paste your file or directory name in line by line Happy Hunting TODO Add response size foundings Add new specific file and directory names Add Extension to chrome extensio...

XnlReveal

Informazioni - v4.5 Questa è un'estensione per Chrome/Firefox che può fare quanto segue: Per gli host che sono in scope: Mostra un avviso per qualsiasi parametro di query che viene riflesso e identifica i parametri "sus". Opzionalmente controlla se i caratteri '," e vengono riflessi senza essere...

CVE-2015-10141

CVE-2015-10141 root@kitploit: Exploit Title: xdebug Unauthenticated Command Execution Exploit Author: D3Ext Vendor Homepage: https://xdebug.org/ Sofware Link: https://pecl.php.net/package/xdebug/2.5.5/windows Version: 2.5.5 Tested on: Kali Linux 2025 CVE: CVE-2015-10141 Spiegazione Una...

webuploader-0.1.15-Demo

Il componente webuploader-v-0.1.15 presenta una vulnerabilità di upload di file non autorizzato Introduzione: il componente Baidu WebUploader presenta una vulnerabilità di upload di file. La vulnerabilità è dovuta al fatto che la pagina di upload del componente WebUploader non filtra rigorosament...

SqlMap_BurpSuite

SqlMapBurpSuite sqlmap.jar già compilato https://github.com/jas502n/SqlMapBurpSuite/blob/master/burpsqlmap/out/artifacts/burpsqlmapjar/burpsqlmap.jar grep -r "send to Sqlmap" src/burp/SnifferContextMenuFactory.java: JMenuItem jMenuItem = new JMenuItem"send to Sqlmap"; JMenuItem jMenuItem = new...

Burp-Recordadora

🧙‍♂️ Recordadora Recordadora è un'estensione per BurpSuite ispirata a Harry Potter. Come la ricordella di Neville, ti aiuta a non dimenticare né perdere il contesto dei tuoi test. ✨ Funzionalità Salvare e ripristinare la cronologia del Proxy Esportare e importare le richieste del Repeater Rendere...

CVE-2022-44136-poc

CVE-2022-44136-poc Zenar CMS 9.3 presenta una vulnerabilità di upload di file senza restrizioni nel suo modulo di gestione dei file, che consente a utenti autenticati con privilegi minimi di caricare file arbitrari, inclusi script PHP malevoli, sul server web. A causa di una validazione...

Next.js-RCE-Scanner-BurpSuite-Extension-

CVE-2025-55182 Next.js RCE Burp-Erweiterung Funktionen Passives Scannen : Automatische Erkennung aller Next.js-Websites, die durch Burp gehen. In-Memory-Code-Injektion v2.2 Neu! Rechtsklicken Sie auf die Zielanfrage und wählen Sie AntSword-In-Memory-Code injizieren. Unterstützt GET- und POST-Type...

osquery_cve-2024-23443

Prova di concetto POC CVE-2024-23443 hpbiososquery Aggiungi l'estensione osquery HP BIOS WMI ad Elastic Agent Dipendenze pip install pywin32 pip install osquery pip install pyinstaller Compilazione root@kitploit: pyinstaller --onefile hpbiosenumeration.py Installazione 1. Copia l'estensione nella...

amlsec

Automated Security Risk Identification in Cyber-Physical Production Systems Using AutomationML-Based Engineering Data This prototype implements the methods presented in the following two publications: 1. Eckhart, M., Ekelhart, A., & Weippl, E. R. 2020. Automated Security Risk Identification Using...

CVE-2017-16995

CVE-2017-16995 Dokumentation meiner eigenen Bastelei mit der CVE-2017-16995-Schwachstelle und der zugehörigen Analyse Hoffentlich finde ich selbst eine, lol Überblick Diese Schwachstelle ist eine LPE, die durch eine fehlerhafte Verzweigungsprüfung des Verifiers während der virtuellen bpf-Ausführu...