CVE-2026-54876

A flaw was found in OpenSSL. A malicious TLS Transport Layer Security server can exploit this vulnerability by sending a specially crafted OCSP Online Certificate Status Protocol response during the X.509 certificate chain verification process. This can lead to a memory leak in client application...

Vehicle-Service-Management-System-Mechanic-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46069 Título do Exploit: Vehicle Service Management System - 'Mechanic List' Cross Site Scripting Armazenado XSS Autor do Exploit: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MÉDIO Referências:...

CVE-2024-34568

Exploit Title: LetterPress = 1.2.1 - Vulnerabilità di Furto di Cookie Exploit Author: SANU P.L CVE: CVE-2024-34568 CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L References: https://nvd.nist.gov/vuln/detail/CVE-2024-34568...

CVE-2021-46080

CVE-2021-46080 Titolo Exploit: Vehicle Service Management System - 'Multiple' Cross-Site Request Forgery CSRF Porta a Stored Cross Site Scripting XSS Autore Exploit: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 MEDIO Riferimenti:...

CVE-2021-46076

CVE-2021-46076 Exploit Title: Vehicle Service Management System - Caricamento multiplo di file porta all'esecuzione di codice Exploit Author: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 HIGH Riferimenti:...

CVE-2021-46075

CVE-2021-46075 Exploit-Titel: Vehicle Service Management System - 'Mehrere' Privilegieneskalation führt zu CRUD-Operationen Exploit-Autor: SANU P.L CVE: CVE-2021-46075 CVSS: 7.2 HOCH Referenzen:...

CVE-2021-46073

CVE-2021-46073 Titolo Exploit: Vehicle Service Management System - 'User List' Cross Site Scripting XSS persistente Autore Exploit: SANU P.L CVE: CVE-2021-46073 CVSS: 4.8 MEDIUM Riferimenti: https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xss...

CVE-2021-46072

CVE-2021-46072 Título do Exploit: Vehicle Service Management System - 'Service List' Cross Site Scripting XSS Armazenado Autor do Exploit: SANU P.L CVE: CVE-2021-46072 CVSS: 4.8 MEDIUM Referências: https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-x...

CVE-2021-46071

CVE-2021-46071 Titolo Exploit: Vehicle Service Management System - 'Elenco Categorie' Stored Cross Site Scripting XSS Autore Exploit: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 MEDIUM Riferimenti: https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss...

CVE-2021-46069

CVE-2021-46069 Titolo Exploit: Vehicle Service Management System - 'Elenco Meccanici' Stored Cross Site Scripting XSS Autore Exploit: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MEDIUM Riferimenti: https://www.plsanu.com/vehicle-service-management-system-mechanic-list-stored-cross-site-scripting-xss...

CVE-2021-46068

CVE-2021-46068 Título do Exploit: Vehicle Service Management System - 'MyAccount' Stored Cross Site Scripting XSS Autor do Exploit: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIUM Referências: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...

CVE-2023-28252

Da febbraio 2022 è stato segnalato un nuovo ransomware che sembra sfruttare una vulnerabilità 0-day di Windows, secondo la ricerca condotta da Trend Micro. Maggiori informazioni su questo ransomware si trovano a questo link. Secondo l'analisi di Kaspersky, il gruppo ransomware Nokoyawa ha...

r00kie-kr00kie

r00kie-kr00kie Haftungsausschluss Dies ist ein PoC-Exploit für die kr00k -Sicherheitslücke CVE-2019-15126. Dieses Projekt dient ausschließlich Bildungszwecken und darf nicht für Gesetzesverstöße oder persönliche Bereicherung verwendet werden. Der Autor dieses Projekts übernimmt keine Verantwortun...

CVE-2020-1472

CVE-2020-1472 POC Erfordert die neueste Version von impacket von GitHub mit hinzugefügten Netlogon-Strukturen. Beachten Sie, dass dies standardmäßig das Passwort des Domain-Controller-Kontos ändert. Ja, dies ermöglicht Ihnen DCSync, aber es unterbricht auch die Kommunikation mit anderen...

CVE-2021-46067

CVE-2021-46067 Titolo Exploit: Vehicle Service Management System - Il 'multiplo' furto di cookie porta alla completa presa di controllo dell'account Full Account Takeover Autore dell'Exploit: SANU P.L CVE: CVE-2021-46067 CVSS: 9.8 CRITICO Riferimenti:...

CVE-2024-43044-jenkins

Introduzione Questo è un exploit per CVE-2024-43044, una lettura arbitraria di file che permette a un agente di recuperare file dal controller. L'exploit sfrutterà la vulnerabilità per leggere file al fine di falsificare un cookie remember-me per un account amministratore e ottenere accesso al...

CVE-2021-45745

CVE-2021-45745 Titolo Exploit: Bludit 3.13.1 - About Plugin Stored Cross Site Scripting XSS Autore Exploit: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MEDIUM Riferimenti: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45745...

Bludit-3.13.1-TAGS-Field-Stored-Cross-Site-Scripting-XSS

CVE-2021-45744 Exploit-Titel: Bludit 3.13.1 - Gespeichertes Cross-Site-Scripting XSS im TAGS-Feld Exploit-Autor: SANU P.L CVE: CVE-2021-45744 CVSS: 5.4 MEDIUM Referenzen: https://www.plsanu.com/bludit-3-13-1-tags-field-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-4574...

Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS

CVE-2021-45745 Título do Exploit: Bludit 3.13.1 - Cross Site Scripting XSS Armazenado no Plugin About Autor do Exploit: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MÉDIO Referências: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss...

CVE-2019-11932

CVE-2019-11932 Double-Free-Fehler im WhatsApp-Exploit PoC. Hinweis: Stelle sicher, dass du die Listener-IP in exploit.c setzt, um eine Shell zu erhalten. nc -lvp 5555 oder einen beliebigen Port. und dann kompilieren. gcc -o exploit egiflib.c exploit.c dann führe ./exploit aus und speichere den...