certsync

certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...

CVE-2024-7854

CVE-2024-7854 Woo Inquiry = 0.1 - SQL Injection non autenticata Descrizione: Il plugin Woo Inquiry per WordPress è vulnerabile a SQL Injection in tutte le versioni fino alla 0.1 inclusa a causa di un insufficiente escape sul parametro fornito dall'utente 'dbid' e della mancanza di una preparazion...

Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.28 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

CVE-2024-50475

CVE-2024-50475 Signup Page = 1.0 - Aggiornamento non autenticato di opzioni arbitrarie Descrizione: Il plugin Signup Page per WordPress è vulnerabile a modifiche non autorizzate dei dati che possono portare a escalation dei privilegi a causa di un controllo delle capacità mancante in tutte le...

CVE-2024-22145

CVE-2024-22145 InstaWP Connect = 0.1.0.8 - Autorizzazione mancante per aggiornamento arbitrario delle opzioni Subscriber+ Descrizione: Il plugin InstaWP Connect – 1-click WP Staging & Migration per WordPress è vulnerabile a modifiche non autorizzate dei dati a causa di un controllo di capacità...

CVE-2023-47179

CVE-2023-47179 WooODT Lite = 2.4.6 - Fehlende Autorisierung zur willkürlichen Optionsaktualisierung Abonnent+ Beschreibung: Das WooODT Lite Plugin für WordPress ist anfällig für unbefugte Datenänderungen aufgrund einer fehlenden Berechtigungsprüfung in der Funktion...

Popcorn-TJNULL-OSCP-

HackTheBox: Write-up di Popcorn Data: 05 giugno 2026 Difficoltà: Facile Piattaforma: HackTheBox Tecniche principali: Enumerazione di porte e servizi, Fuzzing delle directory Gobuster, Evasione del caricamento file, Manipolazione delle richieste HTTP Burp Suite, Esecuzione remota di codice RCE,...

Important: Red Hat Security Advisory: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2025-6218-WinRAR-RCE-POC

CVE-2025-6218: WinRAR Path Traversal RCE ⚠️ CRITICAL VULNERABILITY - Active Exploitation Confirmed CVE-2025-6218 è una vulnerabilità critica di path traversal in WinRAR che permette l'esecuzione di codice arbitrario. Attualmente sfruttata da APT groups come GOFFEE, Bitter APT-C-08 e Gamaredon. 📋...

Security update for the Linux Kernel (Live Patch 49 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.197 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk...

CVE-2021-33026

CVE-2021-33026 Pickle सीरियलाइज़ेशन रिमोट कोड एक्ज़ीक्यूशन - मेमकैश्ड पॉइज़निंग PoC एक्सप्लॉइट CVE-2021-3306 क्या है? "Flask के लिए Flask-Caching एक्सटेंशन 1.10.1 तक सीरियलाइज़ेशन के लिए Pickle का उपयोग करता है, जिससे रिमोट कोड एक्ज़ीक्यूशन या लोकल प्रिविलेज एस्केलेशन हो सकता है। यदि कोई हमलावर क...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1 . An authenticated adjacent attacker with administrative access can store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-78541 Command Injection in Parent Control of TP-Link Archer BE3600 v1

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

EUVD-2026-65062

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-78541 Command Injection in Parent Control of TP-Link Archer BE3600 v1

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

TPASLog4ShellPoC

TPAS Log4Shell PoC Questa repository contiene una Prova di Concetto PoC per la vulnerabilità Log4Shell CVE-2021-44228, sviluppata come parte del lavoro per l'unità curriculare TPAS del Master in Sicurezza Informatica presso FCUP. Include: Un frontend React SPA che simula un sito e-commerce generi...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-687_10_1 security update

An update for kpatch-patch-5140-687101 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Security update for python-sqlparse

This update for python-sqlparse fixes the following issues: CVE-2026-54284: TokenList.init materializes Osubtree value per group, causing CPU DoS before depth/token caps trigger bsc1275459. CVE-2026-59893: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS bsc1275461...

CVE-2023-4568

बैज लाइसेंस MIT स्थापना 1. Python3 और pip स्थापित करें निर्देश यहाँ यदि आप यह नहीं समझ पाते हैं, तो आपको वास्तव में इसका उपयोग नहीं करना चाहिए pip के माध्यम से स्थापित करें root@kitploit: pip install CVE-2023-4568 जाँच करने के लिए नीचे दिए गए कमांड को चलाएँ CVE-2023-4568 -h कॉन्फ़िगरेशन 2. हमने...

ghostdebug

GhostDebug GhostDebug ist ein Windows-x64-Debugger-Prototyp, der aus einer nativen Debugging-DLL und einem .NET-Framework-Befehlszeilenclient besteht. Er ist für das Debugging von Zielen gedacht, die Debugger-Erkennungsprüfungen verwenden. Hintergrundinformationen zum Design finden Sie unter...