monikerlinktest

monikerlinktest cve-2024-21413 1. configura tun0 o altre tun sul router tramite openvpn su un qualsiasi file ovpn 2. installa remmina se non l'hai ancora fatto 3. collegati via RDP al desktop di destinazione usando remmina sulla porta a cui si è connessa la tua ovpn ip link delete quella che è gi...

CVE-2024-5084

Wordpress Hash Form – Drag & Drop Form Builder = 1.1.0 - Caricamento file arbitrario non autenticato per esecuzione remota di codice CVE-2024-5084 Il plugin Hash Form – Drag & Drop Form Builder per WordPress è vulnerabile a caricamenti arbitrari di file a causa della mancata validazione del tipo ...

CVE-2026-40017

Dovecot (per Open-Xchange advisory) is vulnerable to a hash-table collision in the IMAP THREAD command: an attacker who can send mail to a user can craft message header values that collide in an internal hash table, causing the THREAD command to consume CPU disproportionate to message size , lead...

CVE-2026-40017

An attacker that can send mail to a user can craft a message header whose values are chosen to collide in an internal hash table, which makes the IMAP THREAD command consume CPU disproportionate to the size of the message. This is a separate issue from CVE-2026-40014 and is not addressed by that...

CVE-2026-40017

An attacker that can send mail to a user can craft a message header whose values are chosen to collide in an internal hash table, which makes the IMAP THREAD command consume CPU disproportionate to the size of the message. This is a separate issue from CVE-2026-40014 and is not addressed by that...

EUVD-2026-67666

An attacker that can send mail to a user can craft a message header whose values are chosen to collide in an internal hash table, which makes the IMAP THREAD command consume CPU disproportionate to the size of the message. This is a separate issue from CVE-2026-40014 and is not addressed by that...

CVE-2019-9053-exploit

CVE-2019-9053 — Unauthhentifizierte SQL-Injection in CMS Made Simple Beschreibung CVE-2019-9053 ist eine time-based blind SQL-Injection-Schwachstelle, die CMS Made Simple in Versionen ≤ 2.2.9 betrifft. Sie erfordert keine Authentifizierung. Der anfällige Parameter ist m1idlist im Modul News...

CVE-2019-9053-Exploit-in-Python-3

CVE-2019-9053-Exploit-in-Python-3 Questo è un exploit utilizzato in TryHackMe's EasyCTF Tuttavia, il codice installato in Kali Linux o presente su exploitDB è basato sul vecchio codice Python 2. Questa è una riscrittura di quel codice, con alcune revisioni apportate durante il cracking dell'hash...

cve-2019-17497

CVE-2019-17497 Dettagli CVE PDF-XChange Editor precedente alla versione 8.0.330.0 presenta una vulnerabilità di furto di hash NTLM SSO tramite file FDF o XFDF appositamente predisposti un problema correlato a CVE-2018-4993. Ad esempio, un hash NTLM viene inviato per un collegamento a...

CVE-2026-80714

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

AZL-98105 CVE-2026-80714 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

CVE-2026-80675

In the Linux kernel, the following vulnerability has been resolved: libbpf: Reject non-exclusive metadata maps in the signed loader The loader verifies map-sha against the metadata hash in its instructions. map-sha is calculated when BPFOBJGETINFOBYFD is called on the frozen map. While the map is...

CVE-2023-23397

CVE-2023-23397 Ausnutzungs- & Mitigations-Demo 📌 Übersicht Dieses Projekt demonstriert die Erkennung, Ausnutzung und Abwehr von CVE-2023-23397 , einer kritischen Zero-Click-NTLM-Relay-Schwachstelle in Microsoft Outlook für Windows. Diese Schwachstelle wird über Kalendereinladungen ausgenutzt und...

cve-2025-24071

CVE-2025-24054 और CVE-2025-24071 - .library-ms एक्सप्लॉइट के माध्यम से NTLM हैश लीक यह PoC बिना पैच वाले Windows सिस्टम मार्च 2025 पैच मंगलवार पर .library-ms फ़ाइलों के माध्यम से NTLM हैश लीक के शोषण को प्रदर्शित करता है। ⚠️ यह केवल शैक्षिक और शोध उद्देश्यों के लिए है। इसे प्रोडक्शन या अनधिकृत...

cve-2025-24054

CVE-2025-24071: NTLM-Hash-Leck über .library-ms-Datei Metasploit-Modul Dieses Repository enthält ein Metasploit-Modul , das CVE-2025-24071 ausnutzt, eine Schwachstelle im Windows Explorer, die NTLM-Hashes preisgibt, wenn eine bösartige .library-ms-Datei aus einem ZIP-Archiv extrahiert wird...

CVE-2022-26923

CVE-2022-26923 – استغلال Certifried إساءة استخدام AD CS أتمتة استغلال CVE-2022-26923 Certifried مما يسمح برفع الامتيازات عبر إساءة استخدام خدمات شهادات Active Directory AD CS وتفويض مقيد قائم على الموارد RBCD، مما يؤدي إلى تفريغ تجزئة NTLM لحساب مسؤول نطاق. ⚠️ للاستخدام التعليمي فقط / مختبر / HTB...

TeamsNTLMLeak

Descrizione Quando un utente naviga verso una scheda "Sito Web" che rimanda a una pagina web appositamente progettata, può verificarsi l'esposizione dell'hash NTLM tramite l'attivazione di uno schema URL di Office, riducendo il processo a un percorso di leak con un solo clic. Se si tenta di aprir...

xfg_analyzer

Recupero dei prototipi di funzione tramite brute force sugli hash XFG Questa repository contiene script per generare e cercare hash eXtended Flow Guard. Un articolo esteso su come funziona è disponibile nel numero 22 dell'International Journal Of Proof Of Concept || GTFO. Il mio lavoro su questa...

CVE-2026-80714 ipvs: do not propagate one-packet flag to synced conns

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced conns Synced connections can be created before their destination exists. When the destination is later added, ipvsbinddest copies connection flags from the destination into cp-flag...

CVE-2026-80714

CVE-2026-80714 is a use-after-free in the Linux kernel's IPVS (IP Virtual Server) subsystem. The root cause is that ip_vs_bind_dest() propagates the IP_VS_CONN_F_ONE_PACKET flag from a destination to a synced connection that is already hashed. During expiry, the kernel then treats the synced conn...