CVE-2024-6387_PoC

Riepilogo Si tratta essenzialmente di una vulnerabilità statistica: è necessario un numero elevato di tentativi per vincere la race condition ed eseguire con successo codice arbitrario. Gli attaccanti devono superare molti ostacoli, ha dichiarato Schwartz a SecurityWeek. "Anche nello scenario...

UPGer

UPGer | CVE-2022-4060 - User Post Gallery Strumento di massa automatico per controllare la vulnerabilità in CVE-2022-4060 - Plugin WordPress: User Post Gallery install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh...

changedetection.io

Detect Website Changes Automatically — Monitor Web Page Changes in Real Time Monitor websites for updates — get notified via Discord, Email, Slack, Telegram, Webhook and many more. Detect web page content changes and get instant alerts. Ideal for monitoring price changes, content edits, condition...

SPIP < 4.4.22 - Unauthenticated RCE

SPIP 4.4.21 contains a remote code execution caused by mishandling of the X-Spip-Filtre HTTP request header in analyseresultatskel, letting unauthenticated remote attackers execute arbitrary code. id: CVE-2026-77806 info: name: SPIP 4.4.22 - Unauthenticated RCE author: 0xAkoko severity: critical...

N-able N-central < 2026.3.1.10 - Authentication Bypass

N-able N-central versions through 2026.3.1 contain an authentication bypass that lets a remote unauthenticated attacker take over an administrator account and gain full control of the N-central server. CVE-2026-18577 is a bypass of the incomplete fix for CVE-2026-18556, so the 2026.3.1 Hotfix 1...

CVE-2026-6183-SQLI

SQL Injection tramite il parametro id in index.php - Simple Content Management System in PHP Descrizione Esiste una vulnerabilità di SQL Injection in Simple Content Management System PHP. Il parametro id in index.php non viene sanitizzato prima di essere passato alla query SQL, consentendo a un...

insmod_block

insmodblock Linux: - - - - - - - Di nu11secur1ty: https://github.com/nu11secur1ty/linux-nu11secur1ty Linux: - - - - - - - Di nu11secur1ty: https://gitlab.com/nu11secur1ty/linux-nu11secur1ty txt Linux Kernel security modules by nu11secur1ty GNU GENERAL PUBLIC LICENSE Version 3, 29 June 2007...

GhostLock-H80GT

Englisch | 中文 Honor 80 GT Privilege-Escalation-PoC: GhostLock CVE-2026-43499 Ein lokaler Privilege-Escalation-Exploit für das Honor 80 GT AGT-AN00 , CVE-2026-43499 — eine Use-after-Free-Schwachstelle im rtmutex-removewaiter-Pfad des Kernels — plus eine begleitende Lösung zum Laden des...

CVE-2026-7028-SQLI

CodeAstro-Online-Job-Portal-SQLi-Delete-All التفاصيل البائع: CodeAstro المنتج: مشروع بوابة الوظائف عبر الإنترنت بلغة PHP وMySQL الإصدار: 1.0 نوع الثغرة: حقن SQL CWE: CWE-89 الموقع المتأثر: /admin/jobs-admins/delete-jobs.php المعامل: id GET التأثير: يسمح بحذف جميع سجلات الوظائف في قاعدة البيانات...

CVE-2026-6201-IDOR

Controle de Acesso Quebrado no CodeAstro Online Job Portal Permite Exclusão Arbitrária de Vagas Detalhes Fornecedor: CodeAstro Produto: Online Job Portal Project in PHP MySQL Versão: 1.0 Tipo de Vulnerabilidade: Controle de Acesso Quebrado IDOR CWE: CWE-639 Arquivo Afetado: /jobs/job-delete.php...

cve-2025-21479_iqooneo8

CVE-2025-21479 — Qualcomm Adreno GPU 提权漏洞利用（SM8475 / iQOO Neo8） 针对 CVE-2025-21479 的本地提权实验代码，目标是 vivo V2301A（iQOO Neo8 / PD2301，Snapdragon 8+ Gen 1 / SM8475，Adreno A730，Android 14，GKI 内核 5.10）上的 Qualcomm Adreno GPU（KGSL）。 原理上，漏洞利用通过 KGSL 的 CPSMMUTABLEUPDATE 命令驱动 GPU 的 SMMU， 获得任意物理内存读写 能力，进而关闭...

ida-cli

ida-cli ida-cli 是一个面向 macOS / Linux 的无界面 IDA CLI 与 skill-first 工具集。它会在运行时自动选择后端，在需要时自动拉起本地服务，并同时以 flat CLI、stdio MCP、Streamable HTTP MCP 三种方式暴露相同的能力。 English README 两个用户入口 本地 ida-cli 二进制（一个可执行文件同时承担客户端和服务端角色） 给 agent 环境安装的 ida-cli skill（skill/SKILL.md） 底层的 worker / router 服务层由 CLI...

codeql

CodeQL This open source repository contains the standard CodeQL libraries and queries that power GitHub Advanced Security and the other application security products that GitHub makes available to its customers worldwide. How do I learn CodeQL and run queries? There is extensive documentation abo...

WiFi-Pineapple-MK7_Evil-Portal

WIFI PINEAPPLE MARK VII - PORTALE MALEVOLO Il principale punto di accesso rogue e toolkit per pentest WiFi per operazioni di accesso ravvicinato. Attacchi passivi e attivi analizzano dispositivi vulnerabili e mal configurati. https://hak5.org/collections/sale/products/wifi-pineapple Autore :: TW-...

apex v2.4.0-canary.d5c18874

Pensar Apex AI-powered penetration testing using autonomous agents — directly in your terminal. Run blackbox and whitebox pentests that explore, reason, and surface real vulnerabilities. Want to run from the cloud or integrate it with your CI/CD? See Pensar Console. Use Cases Developers Run...

CVE-2021-40154

CVE-2021-40154 Vulnerabilità di Buffer Over Read nella Programmazione In-System ISP USB su LPC55S69 e K82 POC per testare la vulnerabilità BootROM trovata su LPC55S69 e K82 Series Revision A2. La vulnerabilità è corretta nei dispositivi più recenti con la nuova Revision A3 per LPC55S69. Dispositi...

witcher

witcher Implement and monitor Appsec control at scale. Requirements NodeJS 20.13 Tested on Mac Ubuntu How to install root@kitploit: $ git clone [email protected]:mf-labs/witcher.git $ cd witcher $ npm i Build a Docker image root@kitploit: $ git clone [email protected]:mf-labs/witcher.gi...

linux-root-kit

About This Project Questo progetto è stato sviluppato nell'ambito del corso Digitale Forensik presso la Technische Hochschule Deggendorf. Dimostra un'indagine forense completa e una simulazione di attacco che coinvolgono: Un attacco di dependency confusion in Python che utilizza un pacchetto PyPI...

airo-heat

airoheat Repository des Teams T1GR3$ beim Hackathon Cybercamp 2018 Abschlusspräsentation auf der Cybercamp 2018: https://www.youtube.com/watch?v=l-iBtYxHAbQ Video verwendet auf der Cybercamp 2018: https://www.youtube.com/watch?v=0DEitQNn7GQ Aircrack-ng Installationsänderung sudo apt-get install...

CVE-2025-64512---pdfminer.six-Remote-Code-Execution-RCE-

CVE-2025-64512 - pdfminer.six 远程代码执行 RCE -orange 警告 – 仅限教育用途 此概念验证仅用于授权的安全测试和教育目的。 仅可在您拥有或已获得明确书面许可的系统上使用。作者不对因使用此代码而造成的任何滥用或损害负责。 描述 CVE-2025-64512 是 pdfminer.six 中的一个严重漏洞，pdfminer.six 是一个用于从 PDF 文件中提取文本和元数据的流行 Python 库。该缺陷允许在处理恶意 PDF 时，通过不安全地反序列化 pickle 数据实现远程代码执行 RCE 。 漏洞类型 ：不安全的反序列化 CWE-502...