CVE-2024-28397-js2py-Sandbox-Escape

CVE-2024-28397-js2py-Sandbox-Escape Analisi della vulnerabilità js2py Introduzione js2py è un popolare pacchetto Python in grado di valutare codice JavaScript all'interno dell'interprete Python. Viene utilizzato da vari web scraper per analizzare il codice JavaScript presente nei siti web. Esiste...

rtty_CVE-2025-56708-CVE-2025-56709

CVE-2025-56708 e CVE-2025-56709 【CVE-2025-56709】 Buffer Overflow in savepath Panoramica della vulnerabilità Nelle versioni di rtty =v9.0.0, il metodo fileinfo presenta una vulnerabilità di overflow che causa la scrittura continua di dati nella variabile globale savepath, innescando un buffer...

CVE-2026-82245

Budibase before 3.41.3 fails to enforce role-based authorization on its license management endpoints (/api/global/license/*), allowing any authenticated user with basic privileges to delete license keys or manipulate offline tokens. An attacker can thereby disable premium features and downgrade t...

mountain_goat

Ciao, sono una capra di montagna e sto per incornare le tue connessioni TCP, perché è una cosa molto da capra. Questa è una PoC che dimostra tecniche che sfruttano CVE-2016-5696 Attacchi TCP Off-Path: il limite di velocità globale considerato pericoloso di Yue Cao, Zhiyun Qian, Zhongjie Wang, Tua...

LiquidNet

LiquidNet 🌐🔍 LiquidNet è un grabber/scanner IPv4 progettato per aiutare i pentester a raccogliere indirizzi IP/bersagli globali in tutto il mondo. Questo strumento consente ai professionisti della sicurezza di identificare potenziali vulnerabilità nelle reti. Funzionalità 🛠️ Raccolta IPv4: Raccogl...

CVE-2018-14847

CVE-2018-14847 crea un proxy globale basato su RouterOS tramite CVE-2018-14847 Come Usare preparazione root@kitploit: pip3 install paramiko ipcalc optparse hashlib utilizzo per file di IP root@kitploit: python3 loop.py -f list.txt per IP singolo root@kitploit: python3 loop.py ip Copyright la part...

CVE-2023-28432-minio_update_rce

minio-CVE-2023-28432-rce https://github.com/AbelChe/evilminio/tree/main indirizzo originale del progetto Copia personale archiviata Versioni interessate: 2019-12-17T23-16-33Z a RELEASE.2023-03-20T20-16-18Z Riproduzione: https://www.yuque.com/jason-soozc/luhd40/pgabr9xvg0kgx85v?singleDoc «minlo da...

jenkinsci__workflow-cps-global-lib-plugin_CVE-2022-25174_544-vff04fa68714d

Librerie Condivise di Pipeline Quando hai più job di Pipeline, spesso vuoi condividere alcune parti degli script di Pipeline tra di essi per mantenere gli script di Pipeline DRY. Un caso d'uso molto comune è avere molti progetti che vengono costruiti in modo simile. Questo plugin aggiunge questa...

sql-global-injector

Ultimate-Dork web crawler e scansione della vulnerabilità SQL injection Utilizzo e Installazione root@kitploit: - Installation apt-get install python python3 git git clone https://github.com/nu11secur1ty/sql-global-injector.git python3 -m pip install requests mechanicalsoup cd sql-global-injector...

burp_global_match_replace

Global Match & Replace GMR Estensione Burp Suite Global Match & Replace GMR estende Burp Suite con regole di match/replace da applicare globalmente o su più strumenti a scelta Repeater, Intruder, Proxy, ecc.. Fornisce diff per richiesta e risposta così puoi vedere esattamente cosa è cambiato...

CVE-2025-43504

عندما تتحول الـ /bins الجيدة إلى سيئة: تجاوز سعة عن بُعد قبل المصادقة في debugserver الخاص بـ LLDB مقدمة في طفولتي، كنت أستمتع دائمًا بالبحث في صناديق أقراص DVD في متجر Walmart القريب مني. لاحظت أن الكثير من الأفلام نفسها تُترك في الأعلى، لكن إذا بحثت بعمق فعلًا، ستجد عناوين أكثر إثارة للاهتمام...

CVE-2026-61790

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a team can require its members to configure two-factor authentication before receiving the team's permissions, but this requirement is not enforced for site-wide global...

CVE-2026-61790

Weblate is a web-based continuous localization platform. In versions prior to 2026.7 , a team can enforce a two-factor authentication (2FA) requirement for its members, but this requirement is not applied to site-wide global permissions — only to project-, component-, and workspace-scoped permiss...

CVE-2026-61790 Weblate: Team-enforced 2FA is bypassed for global permissions

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a team can require its members to configure two-factor authentication before receiving the team's permissions, but this requirement is not enforced for site-wide global...

CVE-2026-55227 Observable object existence disclosure in private Weblate projects via globally scoped object lookups

Weblate is a web-based localization tool. In versions prior to 2026.7, several endpoints look up objects in a globally scoped manner rather than restricting the lookup to projects the user can access, so they return HTTP 403 Forbidden instead of 404 Not Found when a user requests an object they a...

CVE-2026-55227 Observable object existence disclosure in private Weblate projects via globally scoped object lookups

Weblate is a web-based localization tool. In versions prior to 2026.7, several endpoints look up objects in a globally scoped manner rather than restricting the lookup to projects the user can access, so they return HTTP 403 Forbidden instead of 404 Not Found when a user requests an object they a...

gdid-reversal

شرح كامل لـ GDID ويندوز Global Device Identifier معكوس هندسيًا بالكامل -8a2be2 -0078d6 كيف يتم إنشاء وتخزين وإرسال "Global Device Identifier" من مايكروسوفت، بصمة ويندوز الثابتة المذكورة في شكوى Scattered Spider في يوليو 2026. TL;DR !NOTE ما هو مذكور أدناه صحيح، لكنه يفتقد بعض المعلومات. بغض النظر...

quiver

Quiver : A Meta-Tool for Kali Linux Quiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and...

talisman

Talisman Ein Werkzeug, um Geheimnisse zu erkennen und zu verhindern, dass sie eingecheckt werden Inhaltsverzeichnis Was ist Talisman? Installation Installation in den Pfad empfohlener Ansatz Installation als globale Hook-Vorlage Konfiguration eines Projekts...

talisman

Talisman A tool to detect and prevent secrets from getting checked in Table of Contents What is Talisman? Installation Install onto path recommended approach Installation as a global hook template Configuring a project...