CVE-2026-75574

The Grav Email plugin getgrav/grav-plugin-email before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authenticated remote user with only api.access and api.pages.write permissions can place a Twig expression in header.form.process.email.body, publi...

Nettacker v0.4.1

OWASP Nettacker DISCLAIMER THIS SOFTWARE WAS CREATED FOR AUTOMATED PENETRATION TESTING AND INFORMATION GATHERING. YOU MUST USE THIS SOFTWARE IN A RESPONSIBLE AND ETHICAL MANNER. DO NOT TARGET SYSTEMS OR APPLICATIONS WITHOUT OBTAINING PERMISSIONS OR CONSENT FROM THE SYSTEM OWNERS OR ADMINISTRATORS...

CVE-2022-37017

CVE-2022-37017 Authentifizierungsumgehung für das Benutzeroberflächen-Passwort von Symantec Endpoint Protection 14.3.5351 Client Symantec Endpoint Protection ermöglicht das Einrichten eines Passwortschutzes für die Benutzeroberfläche, um Konfigurationsänderungen zu verhindern. Diese Passwortprüfu...

CVE-2019-16278

CVE-2019-16278 Uno script Python semplice e veloce per sfruttare la CVE-2019-16278 Nostromo 1.9.6 a partire da una vulnerabilità di Directory Traversal nella funzione httpverify di Nostromo nhttpd che porta a un RCE non autenticato tramite una richiesta HTTP realizzata appositamente. Accetta solo...

cyber-apocalypse-2026-salt-crown

Cyber Apocalypse CTF 2026: The Salt Crown — Writeups Writeups...

CVE-2018-8097-PoC

CVE-2018-8097 POC per CVE-2018-8097. Questo script sfrutta CVE-2018-8097 e può recuperare file e contenuti utilizzando un metodo RCE blind basato sul tempo. Utilizzo root@kitploit: python cve-2018-8097.py -h -u URL -c COMMAND -t TIME -id OBJECTID -d FILEPATH options: -h, --help show this help...

DolibabyPhp

DolibabyPhp Ein authentifizierter RCE-Exploit für Dolibarr ERP/CRM CVE-2023-30253. Installation Du kannst das Paket entweder aus dem PyPi-Repository mit pip installieren oder den Quellcode direkt von GitHub mit git clone klonen. root@kitploit: pip install dolibabyphp Verwendung root@kitploit:...

Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.115 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

CVE-2021-29447-POC

CVE-2021-29447 Prova di Concetto Prova di concetto per CVE-2021-29447 scritta in Python. I dettagli sulla CVE sono disponibili su https://vulners.com/cve/CVE-2021-29447 Disclaimer Questo script è una PoC destinata esclusivamente a test di sicurezza etici autorizzati. Utilizzo root@kitploit: usage...

EUVD-2026-65217

The Grav Email plugin getgrav/grav-plugin-email before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authenticated remote user with only api.access and api.pages.write permissions can place a Twig expression in header.form.process.email.body, publi...

CVE-2026-75574 Grav before 4.2.2 Remote Code Execution via Email Twig

The Grav Email plugin getgrav/grav-plugin-email before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authenticated remote user with only api.access and api.pages.write permissions can place a Twig expression in header.form.process.email.body, publi...

CVE-2026-75574

CVE-2026-75574 is a remote code execution vulnerability in the Grav Email plugin (getgrav/grav-plugin-email) versions before 4.2.2 . The root cause is that page-editor-controlled Email action parameters are rendered as unsandboxed Twig templates . An authenticated remote user possessing only api....

CVE-2026-75574 Grav before 4.2.2 Remote Code Execution via Email Twig

The Grav Email plugin getgrav/grav-plugin-email before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authenticated remote user with only api.access and api.pages.write permissions can place a Twig expression in header.form.process.email.body, publi...

Exploit for CVE-2026-32475

CVE-2026-32475 — Elementor Pro Unauthenticated Arbitrary File...

evtx-baseline

evtx-baseline Un repository che ospita esempi di log evtx goodware con installazioni di software campione e interazioni utente di base Donazioni win10-client.tgz di @phantinuss win11-client.tgz di @frack113 win7-x86.tgz di @pH-T win2022-evtx.tgz di @Neo23x0 win2022-ad.tgz di @frack113...

Vmware-ESXI

CVE-2024-37085 upload di shell non autenticato fino a diventare amministratore completo su hypervisor esxi appartenenti a un dominio. Scarica ESXIVORTEX Dettagli: un bypass dell'autenticazione che porta all'upload di una shell nel contesto di vpxuser, consentendo di ottenere pieni permessi...

CVE-2024-53345

CVE-2024-53345 Critical 0 Day in Car Rental Management System Versioni 1.0 - 1.3 Descrizione: Esiste una vulnerabilità critica nella funzionalità di caricamento file del modulo System Settings all'interno del Car Rental Management System versioni da 1.0 a 1.3, che consente a utenti con privilegi...

Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.112 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.52 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

o365enum

Office 365 User Enumeration Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover, or office.com login page. Usage o365enum will read usernames from the file provided as first parameter. The file should have one username per line. The output is CSV-based for easier parsing. Val...