CVE-2023-4220

Prova de conceito do exploit para CVE-2023-4220 Produto afetado : Chamilo = 1.11.24 Este CVE explora uma vulnerabilidade de upload de arquivo não autenticado no Chamilo 1.11.24 e versões inferiores. Um atacante tem a capacidade de enviar arquivos PHP sem restrições, levando a RCE. Como usar...

squid SQUID_7_7

SQUID Web Proxy Cache http://www.squid-cache.org/ Copyright C 1996-2026 The Squid Software Foundation and contributors Squid software is distributed under GPLv2+ license and includes contributions from numerous individuals and organizations. Please see the COPYING and CONTRIBUTORS files for...

CloudPrivs

CloudPrivs Ich habe Creds, was nun? Überblick CloudPrivs ist ein Tool, das die vorhandene Leistungsfähigkeit von SDKs wie Boto3 nutzt, um Berechtigungen aller Cloud-Dienste durchzuprobieren und herauszufinden, welche Berechtigungen für einen bestimmten Satz von Anmeldeinformationen bestehen. Dies...

tugtainer-1.30.2-CVE-2026-55494-and-CVE-2026-62308-to-RCE

Tugtainer v1.30.2 RCE L'RCE viene ottenuta sfruttando 2 vulnerabilità CVE-2026-55494 CVE-2026-62308 In breve, una vulnerabilità SSRF viene sfruttata per chiamare un servizio non autenticato nella rete interna per creare un docker che condivide lo stesso pid con tugtainer, rendendo così accessibil...

recon-cockpit

ReconCockpit A desktop cockpit that turns a penetration-testi...

CVE-2021-22911

CVE-2021-22911 Pre-Auth Blinde NoSQL-Injection führt zu Remote Code Execution in Rocket Chat 3.12.1 Die getPasswordPolicy-Methode ist anfällig für NoSQL-Injection-Angriffe und erfordert keine Authentifizierung/Autorisierung. Sie kann verwendet werden, um Konten zu übernehmen, indem...

forbidden

Forbidden Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client. Tested on Kali Linux v2024.2 64-bit. Made for educational purposes. I hope it will help! Future plans: Add the silent option to suppress console output. Add the no color option...

Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.40 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

CVE-2025-63080

Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or command execution. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...

Security update for the Linux Kernel (Live Patch 38 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.149 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk...

Security update for the Linux Kernel (Live Patch 75 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.283 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length...

hijagger

hijagger - controlla i registry dei pacchetti per individuare pacchetti dirottabili Questo strumento controlla ogni maintainer di ogni pacchetto nei registry NPM e Python Pypi per domini non registrati o record MX non registrati su quei domini. Se un dominio non è registrato, puoi impossessarti d...

python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

A flaw was found in the tarfile.extractall function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside th...

ApiHunter

Supporta lo sviluppo Se questo progetto ti è utile nel tuo lavoro, sostieni la manutenzione continua e le nuove funzionalità. Portafoglio di donazione ETH 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scansiona il codice QR o copia l'indirizzo del portafoglio qui sopra. 🎯 ApiHunter 📺 Demo Video Clic...

hermes-osint

Hermes OSINT v3.0 🏛️🧠 O Analista OSINT Agêntico Investigações orientadas por IA conversacional. Linguagem natural. Resultados especializados. 🤖✨ Novidades na v3.0 🎉 Hermes 3.0 representa uma mudança completa de paradigma, passando da orquestração de ferramentas baseada em pipelines para uma...

wp2shell

wp2shell — RCE pre-auth nel core di WordPress PoC di RCE non autenticata nel core di WordPress che combina CVE-2026-63030 + CVE-2026-60137. Solo test autorizzati. wp2shell.py è una proof of concept a file singolo, basata solo sulla libreria standard, che incatena due vulnerabilità del core di...

Stardox

Available in: Sponsors Huge thanks to the companies supporting Stardox: | | | ---|---|---|--- About Stardox is an advanced GitHub stargazers' information gathering tool. It scrapes GitHub and displays the results in a tree view, letting you collect data on any repository's stargazers — yours or...

Security Bulletin: IBM Tivoli Netcool Configuration Manager is affected by multiple security vulnerabilities in Apache components that could allow denial of service, excessive resource consumption, application crashes, or unauthorized outbound requests.

Summary IBM Tivoli Netcool Configuration Manager version 6.4.2 addresses multiple vulnerabilities in Apache components. These vulnerabilities could allow attackers to cause denial of service, excessive resource consumption, application crashes, or trigger unauthorized outbound requests through...

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 CVE-2026-73570 PoC Morehttps://...

Galdralag-firmware

Galdr — Galdralag Firmware Open Invention Network Dieses Projekt ist beimOpen Invention Network OIN registriert. OIN ist ein defensives Patent-Pool: Mitglieder lizenzieren Linux-bezogene Patente gegenseitig, sodass Teilnehmer Open-Source-Software mit reduziertem Patentrisiko ausliefern und nutzen...