Fake Microsoft security scans trick victims into uninstalling their antivirus

A wave of websites is offering to check whether your antivirus is working. They call themselves SysScan , carry Microsoft branding, and all reach the same conclusion: Your computer has serious problems, and the cause is the antivirus software you installed. Windows, they claim, no longer supports...

CVE-2026-63639

A flaw was found in Valkey, a distributed key-value database. A remote attacker could exploit a use-after-free vulnerability in the RESTORE command. This occurs when a malformed data stream is processed during stream deserialization, causing a shared resource to be improperly managed. If...

CVE-2026-56684

A flaw was found in Valkey. An authenticated client can trigger a CLIENT KILL command while the tlsProcessPendingData function iterates a pending list. This action causes connTLSClose to delete the iterator's cached next node, leading to a use-after-free vulnerability. This flaw, when Transport...

CVE-2020-35846

Cockpit CMS NoSQL Injection to Esecuzione Remota di Codice : CVE-2020-35846 Descrizione Cockpit CMS presenta alcune vulnerabilità NoSQL che possono essere utilizzate per scaricare le informazioni degli utenti. Queste fughe di informazioni possono essere concatenate per modificare le password degl...

Exploit for CVE-2026-59230

CVE-2026-59230 — camel-mail MimeMultipart header injection...

⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More

A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet. That’s roughly the mood this week. Trusted tools turn hostile, old weak spots get fresh attention, AI makes exploit work cheaper, and researchers keep finding attacks that sound harder...

exploit-CVE-2023-23752

Joomla! divulgazione di informazioni - Exploit CVE-2023-23752 Joomla! 4.2.8 - Divulgazione di informazioni non autenticata Exploit per CVE-2023-23752 4.0.0 = Joomla = 4.2.7. EDB-51334 PacketStorm WLB-TODO Utilizzo Esempio Requisiti httpx docopt.rb paint Esempio utilizzando gem: root@kitploit: gem...

exploit-CVE-2022-24780

iTop RCE via SSTI - CVE-2022-24780 Exploit iTop --debug exploit.rb light --debug exploit.rb -h | --help full: exploit with an emulated browser, execute JavaScript, preserve original user profile information light: just parse HTML and send requests, no JavaScript, DESTRUCTIVE reset user informatio...

exploit-CVE-2022-0482

Divulgazione di PII in Easy!Appointments Easy!Appointments --debug exploit.rb -h | --help Options: Root URL base path including HTTP scheme, port and root folder All events since default: 2015-01-11 All events until default: today --debug Display arguments -h, --help Show this screen Examples:...

CVE-2023-38836

CVE-2023-38836 Exploit Vulnerabilità di File Upload in BoidCMS v.2.0.0 consente a un attaccante autenticato di caricare un file con tipo pericoloso CWE-434. Per sfruttarla, un attaccante potrebbe aggiungere un'intestazione GIF per bypassare i controlli del tipo MIME. root@kitploit: GIF89a; Utiliz...

CVE-2022-36804-PoC

CVE-2022-36804-PoC Script exploit multi-thread per CVE-2022-36804 che colpisce la maggior parte delle versioni di BitBucket 8.3.1 Consulta l'avviso completo qui https://jira.atlassian.com/browse/BSERV-13438 Tutto il merito a TheGrandPew per la scoperta Lo script rileverà automaticamente i...

CVE-2022-36553-PoC

CVE-2022-36553 - Hytec Inter HWL-2511-SS Nicht authentifizierte Remote-Befehlseinschleusung. Übersicht Dieses Repository enthält ein Proof-of-Concept PoC Reverse-Shell-Skript zur Ausnutzung von CVE-2022-36553, einer kritischen Schwachstelle in Hytec Inter HWL-2511-SS-Geräten. Das Skript ist eine...

CVE-2024-28397-command-execution-poc

CVE-2024-28397-command-execution-poc Questa vulnerabilità deriva da una sandbox incompleta in js2py, dove JavaScript appositamente predisposto può attraversare il modello di oggetti interno di Python e accedere a classi pericolose come subprocess.Popen, portando all'esecuzione arbitraria di...

AliExpress caught using silent audio to fingerprint visitors’ browsers

AliExpress, the online marketplace owned by Alibaba Group, has come under scrutiny after researchers and browser maker Brave reported finding silent Web Audio processing on the site that could help fingerprint visitors’ devices. The audio processing did not record people through their microphones...

CVE-2026-65612

A flaw was found in nnn. An attacker can exploit this vulnerability by placing a file with a specially crafted name, containing shell syntax, on a shared filesystem, removable media, or within an extracted archive. If a victim then navigates to and opens this file using the preview-tabbed feature...

CVE-2026-65611

A flaw was found in nnn, a file manager. This vulnerability, known as Shell Command Injection, allows an attacker to execute arbitrary commands. By creating a specially crafted directory name containing shell syntax on a shared filesystem, removable media, or within an extracted archive, an...

tplink-archer-root-exploit

TP-Link Archer AX73 / AX10 — Root Shell Exploit Auto-Mail L...

CVE-2026-76055

CVE-2026-76055 is an OS command injection in the package manager component of Black Duck blackduck-c-cpp prior to version 3.0.7. Filesystem paths encountered while traversing a scanned build directory are interpolated into shell command strings without quoting or escaping , allowing shell metacha...

EUVD-2026-64896

Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the account running the scan. Filesystem...

CVE-2026-76055

Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the account running the scan. Filesystem...