CVE-2024-25412

CVE-2024-25412 Uma vulnerabilidade de cross-site scripting XSS no Flatpress v1.3 permite que atacantes executem scripts web ou HTML arbitrários através de uma carga maliciosa inserida no campo de email Tipo de Vulnerabilidade: Cross Site Scripting XSS Fornecedor do Produto:...

CVE-2026-34234-Lab

CVE-2026-34234 - Lab RCE dell'Installer CtrlPanel Lab Docker locale per dimostrare CVE-2026-34234 in CtrlPanel. Questo repository confronta: vuln: CtrlPanel 1.1.1 bloccata tramite digest patched: CtrlPanel 1.2.0 bloccata tramite digest Il lab è esclusivamente locale e vincola i servizi a 127.0.0....

Mystikal

Mystikal Generatore di payload per l'accesso iniziale su macOS Pensato per essere usato con https://github.com/its-a-feature/Mythic Post del blog correlato: https://posts.specterops.io/introducing-mystikal-4fbd2f7ae520 Utilizzo: 1. Installa Xcode sulla macchina di build Richiesto per il pacchetto...

msiscan

MSI Analyzer Этот Python-скрипт для Linux анализирует установочные файлы Microsoft Windows .msi и указывает на потенциальные уязвимости. Он был разработан Michael Baer @derbaer0 в SEC Consult Vulnerability Lab. В настоящее время он в первую очередь подходит для локального повышения привилегий,...

CVE-2026-41452-PoC

CVE-2026-41452 — Bypass de Autenticação no Instalador do Krayin CRM → Assunção de Conta de Admin CVSS 9.8 Crítico · CWE-287 / CWE-306 · Writeup da Jiva · VulnCheck Resumo O instalador do Krayin CRM expõe POST /install/api/admin-config-setup além de run-migration, run-seeder sem proteção CSRF grup...

msi-search

MSI Search Windows memorizza nella cache i file MSI in C:\Windows\Installer\ con nomi di file casuali composti da lettere e numeri seguiti dall'estensione ".msi". Questo strumento semplifica il compito degli operatori red team e dei team di sicurezza di identificare quali file MSI corrispondono a...

rekall

Rekall discontinuation This project is no longer maintained. In December 2011, a new branch within the Volatility project was created to explore how to make the code base more modular, improve performance, and increase usability. This branch was later forked to become Rekall. The modularity allow...

CVE-2024-44346

CVE-Offenlegung: CVE-2024-44346 Datum: 13.09.2024 Zusammenfassung Eine Schwachstelle wurde in Tosibox tbsetup.exe Version 4.0.0.0 identifiziert, die eine lokale Privilegienausweitung ermöglichen könnte. Diesem Problem wurde die Kennung CVE-2024-44346 zugewiesen. Der Hersteller hat eine...

CVE-2024-10930

Divulgazione CVE: CVE-2024-10930 Divulgazione pubblica di CVE-2024-10930 Data: 12-02-2025 Riepilogo È stata identificata una vulnerabilità nel prodotto Carrier E20-BLK416X.EXE versione 4.16, che potrebbe consentire l'escalation dei privilegi locali. A questo problema è stato assegnato...

notepadpp-supply-chain-iocs

Notepad++ Supply-Chain-Angriff — IoC-Repository CVE-2025-15556 | Lotus Blossom / Raspberry Typhoon | Juni – Dezember 2025 Überblick Dieses Repository enthält eine umfassende, konsolidierte Sammlung von Indikatoren für Kompromittierung IoCs im Zusammenhang mit dem Notepad++-Supply-Chain-Angriff ,...

qlikview-poc-CVE-2024-29863

Applicazione interessata: QlikView Piattaforma: Windows Problema: Escalation dei privilegi locale tramite l'installer MSI race condition di DLL hijacking Scoperto e segnalato da: Pawel Karwowski e Julian Horoszkiewicz Eviden Red Team Dettagli: Sui sistemi con QuikView12 installato, è possibile pe...

CVE-2024-25411

CVE-2024-25411 Una vulnerabilità di cross-site scripting XSS in Flatpress v1.3 consente agli attaccanti di eseguire script web arbitrari o HTML tramite un payload appositamente creato iniettato nel parametro username in setup.php Tipo di vulnerabilità : Cross Site Scripting XSS Vendor del prodott...

CVE-2025-51726

Come richiesto, ho ora dimostrato entrambe le vulnerabilità BA2022 e BA2015 con scenari di sfruttamento pratici e prove di PoC, che mostrano come un attaccante potrebbe abusare di questi problemi in un contesto reale. 📌 1. BA2022 Hash Debole nella Firma del Codice – Dimostrazione dello Sfruttamen...

cuckooautoinstall

About CuckooAutoinstall Cuckoo Sandbox . auto install script What is Cuckoo Sandbox? Cuckoo Sandbox is a malware analysis system. What does that mean? It means that you can throw any suspicious file at it and get a report with details about the file's behavior inside an isolated environment. We...

cve-2026-25676

Ricerca su CVE-2026-25676 DLL Search Path Hijacking nell'Installer di M-Track Duo HD Panoramica Questo repository contiene la ricerca iniziale e una proof-of-concept relativa a CVE-2026-25676, una vulnerabilità di DLL search path hijacking che colpisce l'installer di M-Track Duo HD 1.0.0...

lowkey

Selbst gehostete KI-Coding-Agenten auf AWS — OpenClaw, Claude Code, Codex, Kiro, NemoClaw, Hermes ▶️ Sehen Sie sich den vollständigen Walkthrough auf YouTube an 📝 Lesen Sie den Blogbeitrag: „I Gave My Agent Its Own AWS Account“ TL;DR — Lowkey bereitstellen: root@kitploit: curl -sfL...

CVE-2026-54550

IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers. In 5.2.6 and earlier, UnpackerBase.unpack in izpack-installer/src/main/java/com/izforge/izpack/installer/unpacker/UnpackerBase.java obtains an attacker-controlled PackFile targetPath, passes...

CVE-2026-54550 IzPack: Path Traversal in UnpackerBase allows writing files outside the installation directory via malicious pack entries

IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers. In 5.2.6 and earlier, UnpackerBase.unpack in izpack-installer/src/main/java/com/izforge/izpack/installer/unpacker/UnpackerBase.java obtains an attacker-controlled PackFile targetPath, passes...

CVE-2026-54550

IzPack versions 5.2.6 and earlier contain a path traversal vulnerability in UnpackerBase.unpack(). The method passes an attacker-controlled PackFile targetPath through IoHelper.translatePath(), which only converts separators without normalizing ../ segments or enforcing directory containment. A t...

CVE-2026-54550 IzPack: Path Traversal in UnpackerBase allows writing files outside the installation directory via malicious pack entries

IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers. In 5.2.6 and earlier, UnpackerBase.unpack in izpack-installer/src/main/java/com/izforge/izpack/installer/unpacker/UnpackerBase.java obtains an attacker-controlled PackFile targetPath, passes...