CVE-2025-45407

CVE-2025-45407 CVE-2025-45407: Molteplici vulnerabilità XSS in DiscoveryNG v6.0.8 Hotfix 2 Scoperto da: YallaSec Security Research Team CVE ID: CVE-2025-45407 Data di pubblicazione: Luglio 2025...

CVE-2025-37164

CVE-2025-37164 Esiste un problema di esecuzione remota di codice in HPE OneView. Come funziona questo metodo di rilevamento? Questo template individua il tag title di OneView, estrae la versione dalla variabile JavaScript artifactVersion e segnala come potenzialmente vulnerabili le istanze che...

CVE-2010-3971-hotpatch

CVE-2010-3971-hotpatch Crea il tuo hotfix di sicurezza con Deviare. Articolo originale: usare Deviare per creare una patch temporanea zero day...

OWASSRF-CVE-2022-41082-POC

CVE-2022-41082-POC PoC per la vulnerabilità NotProxyShell OWASSRF CVE-2022-41082 che colpisce i server Microsoft Exchange. Questa è una RCE post-autenticazione per ProxyNotShell OWASSRF, sono necessarie credenziali valide per l'esecuzione dei comandi. Aggiunto lo script PoC Powershell per la...

CVE-2020-1472

CVE-2020-1472 CVE 2020-1472 Validierungsskript Annahme: WinRM ist zwischen Domänencontrollern aktiviert. Erforderliche Berechtigungen: root@kitploit: Falls untergeordnete Domänen vorhanden sind: Enterprise-Admin Falls einzelner Wald, einzelne Domäne: Domänen-Admin Dieses Skript muss auf einem...

log4shell-hotfix-side-effect

Test caso effetti collaterali hotfix Log4Shell Volevo sapere se viene sollevata qualche ClassNotFoundException o simile eccezione imprevista quando si applica l'hotfix per CVE-2021-44228 noto come Log4Shell come raccomandato qui. Risultato: sembra che nessuna eccezione venga sollevata. Per testar...

xerces-3.2.3-DTD-hotfix

Questo repository non contiene un README...

Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0011)

Before Kentico Xperience 13 Hotfix 173, this vulnerability can be exploited with any username provided. For Hotfix = 173 and = 173 and 178, this vulnerability can be exploited only if you provide a valid Staging Service username default: admin impact: | Unauthenticated attackers can bypass...

Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass

IKEv1 key exchange contains a broken authentication caused by logic flow weakness in Remote Access and Mobile Access certificate validation, letting unauthenticated remote attackers bypass user authentication and establish VPN connections without valid passwords, exploit requires use of deprecate...

SolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control Bypass

SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality. id: CVE-2025-40536 info: name: SolarWinds Web Help Desk 12.8.8 Hotfix 1 HF1 - Security...

FortiClient EMS - Authentication Bypass

Detects whether Fortinet hotfix FG-IR-26-099 for CVE-2026-35616 is missing by comparing behavioral responses from a certificate-authenticated endpoint. The template sends X-SSL-CLIENT-VERIFY: SUCCESS without certificate material and checks whether this spoofed header changes server behavior. id:...

kentico-xperience13-AuthBypass-wt-2025-0006

WT-2025-0006 CVE non ancora assegnato Kentico Xperience 13 CMS - Controllo del Bypass dell'Autenticazione del Servizio di Staging Rilevamento in Azione root@kitploit: python3 watchTowr-vs-kentico-xperience13-AuthBypass-wt-2025-0006.py -H http://labcms / | | |\ \ \ / / \ \ / | | | | / \ / / ...

kentico-xperience13-AuthBypass-wt-2025-0011

WT-2025-0011 CVE ainda não atribuído Kentico Xperience 13 CMS - Verificação de Bypass de Autenticação do Staging Service Detecção em Ação root@kitploit: python3 .\watchTowr-vs-kentico-xperience13-AuthBypass-wt-2025-0011.py -H http://labcms -u admin / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ ...

CVE-2020-0601

CVE-2020-0601 Questo script verifica se l'hotfix per CVE-2020-0601 è stato applicato in base alla versione di Windows in uso. Inoltre, controlla se vi è un tentativo di sfruttare la vulnerabilità nota. Il file .xml è destinato agli utenti di ControlUp. Importa il file XML nelle tue azioni Script...

CVE-2022-41082-POC

CVE-2022-41082-POC CVE-2022-41082 NotProxyShell OWASSRF भेद्यता के लिए PoC जो Microsoft Exchange सर्वरों को प्रभावित करती है यह ProxyNotShell OWASSRF के लिए पोस्ट-प्रमाणीकरण RCE है, कमांड निष्पादन के लिए मान्य प्रमाण-पत्र आवश्यक हैं। TabShell भेद्यता CVE-2022-41076 के लिए Powershell PoC स्क्रिप्ट...

cve-2018-12895-hotfix

Este repositorio nao tem um README...

cve_2026_frag_family_fix

Software zur Behebung von Schwachstellen der Frag-Familie / Mitigation-Tool für die Frag-Family-Sicherheitslücke Copy Fail 2026 Dirty Frag 2026 Fragnesia 2026 DirtyClone 2026 PEdit-CoW 2026 Hotfix auf jedem Linux ausführen / Führen Sie einen Hotfix auf jedem Linux aus root@kitploit:...

Virtuozzo Hybrid Infrastructure 7.1 Hotfix 4 (7.1.0-205)

This update provides security fixes. Vulnerability id: VSTOR-130225 A security fix for CVE-2026-31431. Vulnerability id: VSTOR-130767 Security fixes for CVE-2026-43284 and CVE-2026-43500. Vulnerability id: VSTOR-131868 A security fix for CVE-2026-46333. Vulnerability id: VSTOR-132074 A security f...

August 11, 2026—Hotpatch KB5120229 (OS Build 20348.5440)

None None...

N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist

N-able has released a fresh round of hotfixes for N‑central as part of its investigation into ongoing exploitation of a recently disclosed security flaw in the Remote Monitoring and Management RMM product. "We are proactively expanding protections in response to ongoing monitoring of threat actor...