Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite

Summary There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite CVE-2026-69152, CVE-2026-59645, CVE-2026-16221, CVE-2026-18446, CVE-2026-14257, CVE-2026-34481, CVE-2026-12802, CVE-2026-13586, CVE-2026-15055, CVE-2026-59639, CVE-2026-59642, CVE-2026-59647,...

Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-66010, CVE-2026-54515, CVE-2026-59889, CVE-2026-49844, CVE-2026-69153)

Summary Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite CVE-2026-66010, CVE-2026-54515, CVE-2026-59889, CVE-2026-49844, CVE-2026-69153. Vulnerability Details CVEID:CVE-2026-66010 DESCRIPTION: DOMPurify before 3.4.12 fails to execute...

Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite

Summary There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite CVE-2026-12185, CVE-2026-12803, CVE-2026-12816, CVE-2026-12860, CVE-2026-13506, CVE-2026-13586, CVE-2026-14682, CVE-2026-15055, CVE-2026-58059, CVE-2026-58060, CVE-2026-58061, CVE-2026-58062,...

AMSI-patches-learned-till-now

AMSI-patches-learned-till-now Eu documentei todos os patches de AMSI que aprendi até agora ❗ Meu aprendizado de patch de AMSI até agora. Não pertence aos ativos da minha empresa! AVISO LEGAL: Este código não tem a intenção de ser evasivo até agora! Apenas uma abordagem conceitual. Links: 1...

Security Bulletin: Security Vulnerabilities have been found in IBM Sovereign Core

Summary Security Vulnerabilities have been addressed in IBM Sovereign Core Vulnerability Details CVEID:CVE-2026-45022 DESCRIPTION: go-git is an extensible git implementation library written in pure Go. Prior to 5.19.0 and 6.0.0-alpha.3, go-git may parse malformed Git objects in a way that differs...

CVE-2025-55130

CVE-2025-55130 - Evasione del Permission Model di Node.js tramite Symlink root@kitploit: / | | | | |/ \ / \ | | | | / | // \ | | || | || || || | | | | \ | \ \ | | | | | | |/|| \ ||| ||/||| | || | || | |/ |//||// Bypass del Permission Model di Node.js tramite symlink appositamente costruiti...

Flowise-RCE-CVE-2025-59528

CVE-2025-59528 — Execução Remota de Código RCE Autenticada no Flowise AI Visão Geral ID do CVE: CVE-2025-59528 Software Afetado: Flowise AI Versões Vulneráveis: = 3.0.4 Versão Corrigida: 3.0.5 e posterior Severidade: Crítica Autor: r3nsi15 Data: 2025 Descrição As versões do Flowise AI até 3.0.4...

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

webrtc-ips

STUN-IP-Adressanfragen für WebRTC Demo: https://diafygi.github.io/webrtc-ips/ Was das macht Firefox und Chrome haben WebRTC implementiert, das Anfragen an STUN-Server ermöglicht, die die lokalen und öffentlichen IP-Adressen des Benutzers zurückgeben. Diese Anforderungsergebnisse stehen JavaScript...

CVE-2026-82090

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. JavaScript code can alter the application state via native bridge methods...

NorthStarC2

O NorthStarC2 é um framework de comando e controle de código aberto desenvolvido para testes de penetração e red teaming por Engin Demirbilek. O NorthStar C2 Framework consiste em duas aplicações: um aplicativo web GUI no lado do servidor para gerenciar sessões e um stager no lado do cliente para...

CVE-2025-22381

CVE-2025-22381: Iniezione dell'header Host in Aggie Analisi dettagliata e Proof-of-Concept per CVE-2025-22381, una vulnerabilità di Iniezione dell'header Host scoperta nel progetto open-source Aggie. Panoramica della vulnerabilità+ CVE ID: CVE-2025-22381 Pubblicata: ottobre 2025 assegnazione MITR...

Security Bulletin: Multiple vulnerabilities in Spring Boot's Cassandra have been addressed in IBM webMethods API Management

Summary Multiple vulnerabilities in Spring Boot's Cassandra have been addressed in IBM webMethods developer portal and IBM webMethos API ControlPlane. Vulnerability Details CVEID:CVE-2026-22746 DESCRIPTION: Vulnerability in Spring Spring Security. If an application is using the...

pickl3

Pickl3 Pickl3 is Windows active user credential phishing tool. You can execute the Pickl3 and phish the target user credential. Operational Usage - 1 Nowadays, since the operating system of many end users is Windows 10, we cannot easily steal account information with Mimikatz-like projects like t...

avscript

Avast Antivirus JavaScript-Interpreter HINWEIS: Am 03.11.2020 gab Avast bekannt, dass sie beschlossen hatten, diesen Interpreter global zu deaktivieren! Der Hauptprozess des Avast-Antivirenprogramms heißt AvastSvc.exe und wird als SYSTEM ausgeführt. Dieser Dienst lädt die Low-Level-Antiviren-Engi...

wwwgrep

WWWGrep OWASP Foundation Web Respository Autor: Mark Deen & Aditi Mohan Einleitung WWWGrep ist ein schneller Such-„Grepping“-Mechanismus, der HTML-Elemente nach Typ durchsucht und fokussierte einzelne, mehrere dateibasierte URLs und rekursive bezogen auf die Root-Domain oder nicht Suchen...

Privilege_Escalation

PrivilegeEscalation Ein Windows-UAC-Bypass, einfach gemacht 😋 Eigenschaften Automatischer Bypass für Windows 7/8/10 Manueller Bypass Failsafe löscht alle von Privilege Escalation erstellten Registrierungsschlüssel Erstellung root@kitploit: git clone...

goop

goop Google Search Scraper Note: It no longer works. Google team told me it's not a legitimate issue when I reported it to them but now they just silently fixed it. Contents Introduction How it works? Usage Installation Example Legal Introduction goop can perform google searches without being...

Cmulator

Cmulator - Skriptfähiger x86 RE Sandbox-Emulator v0.3 Beta Cmulator ist ein x86 - x64 skriptfähiger Reverse-Engineering-Sandbox-Emulator für Shellcode und PE-Binärdateien, basierend auf Unicorn & Capstone Engine & Javascript. 💬 Dies ist die letzte unterstützte Pascal-Version und die neue Codebasi...

Dr0p1t-Framework

Derzeit nicht gewartet Warten Sie auf die nächste Version Dr0p1t-Framework Haben Sie schon einmal von Trojan-Droppern gehört? Kurz gesagt, ein Dropper ist eine Art Malware, die andere Malware herunterlädt. Dr0p1t gibt Ihnen die Möglichkeit, einen unsichtbaren Dropper zu erstellen, der die meisten...