CVE-2025-24071

CVE-2025-24071 - Perdita di hash NTLM di Windows File Explorer 📋 Panoramica CVE-2025-24071 è una vulnerabilità in Windows File Explorer che consente la divulgazione non autorizzata di hash NTLM. Quando un utente estrae un archivio .zip appositamente predisposto contenente un file .library-ms...

CVE-2025-24071-Exploit

CVE-2025-24071-Exploit Questo contenuto è solo a scopo educativo. Utilizzare solo come riferimento e non contattare le autorità. This content is for educational purposes only. Use for reference only and do not contact the police. Dettagli della vulnerabilità CVE ID : CVE-2025-24071 Sistema...

PT-2026-82119

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-out-of-bounds read occurs in the tc cls bind class function. This happens because u32 bind class unconditionally casts a passed fh to tc u knode and accesses &n-res. When fh is...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104778)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104778 advisory. Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database...

weakpass

Weakpass Qui puoi trovare l'elenco degli strumenti e un esempio di server API da weakpass.com per il cracking di password e hash in un unico posto. 📂 Struttura delle cartelle tools Una collezione di strumenti per il cracking di password e hash. Dai un'occhiata: Kraker-js Lookup Passcheck Passgen...

CVE-2025-66956

CVE-2025-66956 Eine unsichere Zugriffskontrolle in den Komponenten Contact Plan, E-Mail, SMS und Fax in Asseco SEE Live 2.0 ermöglicht Remote-Angreifern, über eine berechenbare URL auf Anhänge zuzugreifen und diese auszuführen. CVSS-Vektoren CVSS 3.1: 9.8,...

Exploit_CVE-2021-24762

exploitcve-2021-24762 Dieses Repository zeigt einen Exploit für CVE-2021-24762. Es handelt sich um einen Blind-SQLi-Exploit, der in der Standardkonfiguration das Admin-Passwort ausliest. Während ich ein Labor auf Basis von WordPress mit dem PerfectSurvey-Plugin durchführte, blieb ich bei einer...

cve-2026-43512-poc

CVE-2026-43512 — Bypass de Autenticação DIGEST do Apache Tomcat Resultado da análise de explorabilidade: a causa raiz está confirmada. A exploração de ponta a ponta não é reproduzível contra uma implantação padrão do UserDatabaseRealm. Veja Análise para detalhes. Índice Visão Geral Versões Afetad...

FavFreak

FavFreak - Armare favicon.ico per BugBounties, OSINT e quant'altro Una descrizione dettagliata è disponibile qui: Leggi il blog qui: https://medium.com/@Asm0d3us/weaponizing-favicon-ico-for-bugbounties-osint-and-what-not-ace3c214e139 Introduzione Ho creato questo strumento per rendere il mio lavo...

Hash-Eye

🔍 HashEye - أداة متقدمة للكشف عن أنواع التجزئة Hashes HashEye هي أداة CLI قوية بلغة Python للكشف الفوري عن أنواع التجزئة وتحليلها. توفر معلومات مفصلة حول تنسيقات التجزئة، مستويات الأمان، تحليل الإنتروبيا، واكتشاف الأنماط. مقدمة منIsaac Security Labs 🔗 روابط: GitHub: @ishaklaz تلغرام:...

hassh

"HASSH" - un metodo di profilazione per client e server SSH. NOTA: questo repository Corelight è stato creato affinché possa essere mantenuto attivamente, su richiesta di Salesforce, il cui repository originale non viene più mantenuto. "HASSH" è uno standard di fingerprinting di rete che può esse...

BRC4-BOF-Artillery

Generic Questo repository include una raccolta di BOF generici che ho scritto nel corso del tempo. Questo repository si concentra esclusivamente sul porting e sull'esecuzione, senza modificare il codice sorgente originale per la stabilità. Sebbene in futuro possa condurre ulteriori test, non è...

CVE-2026-64563

A flaw was found in the Linux kernel. This vulnerability, known as a use-after-free, occurs in the rhashtable component when the system improperly handles hash table restarts. An attacker could potentially exploit this by causing the system to access memory that has already been released, which m...

BIT-KEYCLOAK-2026-15571 Flaw in the legacy client-initiated account-linking endpoint of Keycloak

A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity and access management solution. The mechanism used to protect the account-linking process from unauthorized requests relies on a hash that can be predicted by a malicious OIDC...

CVE-2023-1430

Update 2023-06-12: Sie benötigen den Snippet nicht mehr. WPManageNinja hat die Sicherheitslücke zwei Stunden nach der öffentlichen Offenlegung gepatcht 93 Tage nach der Meldung. Update 2024-01-27: Das verwandte Problem mit ewigen Hash-Werten ist nun vollständig behoben. Verantwortungsvolle...

CVE-2026-77134

The extension fails to require the dedicated admin confirmation token when processing an admin-approval request, so a regular user confirmation hash, obtainable by any visitor through the public resend-confirmation action, is sufficient to self-approve a pending account awaiting admin approval...

CVE-2026-77127

The extension fails to restrict a backend AJAX endpoint for inline editing to fields the current user is permitted to see or edit. An authenticated, low-privileged backend user can supply arbitrary table, field and record parameters, and trigger an error response that discloses the current databa...

EUVD-2026-65348

The extension fails to restrict a backend AJAX endpoint for inline editing to fields the current user is permitted to see or edit. An authenticated, low-privileged backend user can supply arbitrary table, field and record parameters, and trigger an error response that discloses the current databa...

CVE-2026-77134

CVE-2026-77134 is a Broken Access Control vulnerability in the TYPO3 extension femanager . The extension fails to require the dedicated admin confirmation token when processing an admin-approval request. Instead, a regular user confirmation hash—obtainable by any visitor through the public resend...

ZeroLogon-Exploit

ZeroLogon - शोषण और उदाहरण परीक्षण PoC को Secura से संशोधित किया गया, CVE-2020-1472, मशीन के पासवर्ड को शून्य करने के लिए। मशीन पर पासवर्ड बदलने के लिए Microsoft के NetrServerPasswordSet2 फ़ंक्शन का उपयोग किया जाता है। यह शोषण Impacket के nrpc.py मॉड्यूल का लाभ उठाता है NetrServerPasswordSet2 को...