CVE-2023-3519

CVE-2023-3519 Scanner para NetScaler Citrix ADC CVE-2023-3519 Um scanner simples para encontrar netscalers e verificar a data da última modificação no cabeçalho da resposta HTTP Este projeto é um scanner feito por mim em C usando o código-fonte de mrr3b00t em powershell...

CVE-2023-3519-BackdoorCheck

cve-2023-3519-citrix-scanner Questo script è uno scanner Citrix di base per CVE-2023-3519. Cerchiamo di identificare gateway/ADC Citrix vulnerabili osservando gli header HTTP. Come funziona Durante la nostra analisi di questa vulnerabilità, noi e i nostri amici del CERT-Verbund abbiamo notato che...

CVE-2022-24227-updated

CVE-2022-24227 Aggiornata - BoltWire v8.00 - Cross-site Scripting persistente XSS Descrizione CVE-2022-24227 Aggiornata : nella versione 8.00 di BoltWire CMS , i campi Nome e Cognome nella pagina di completamento della registrazione del membro sono anch'essi vulnerabili ad attacchi di cross-site...

LAST

L.A.S.T. Strumento di scansione di sicurezza automatizzato per Linux l'ultimo strumento che userai mai! Questo strumento viene utilizzato per automatizzare il processo di ricognizione degli esercizi Red Team. Raccoglie tutte le informazioni e le riporta in un formato di facile lettura. Lo script ...

Spotweb <= 1.5.1 - Cross Site Scripting

Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the lastname parameter. id: CVE-2021-40973 info: name: Spotweb = 1.5.1 - Cross Site Scripting author: theamanrawat severity:...

hoper

Hoper It shows all the hops that makes a url you specify to reach its endpoint. For example if you want to see the entire trip by email URL or like a URL shorten. Hoper returns you all URLs redirections. Installation root@kitploit: $ gem install hoper Usage Type in your command line: root@kitploi...

CVE-2022-3546

CVE-2022-3546 https://vulners.com/cve/CVE-2022-3546 Una vulnerabilità è stata trovata in SourceCodester Simple Cold Storage Management System 1.0 e classificata come problematica. Interessata da questo problema è una funzionalità sconosciuta del file /csms/admin/?page=user/list del componente...

cve-2023-3519-citrix-scanner

cve-2023-3519-citrix-scanner Este script é um scanner básico para Citrix para CVE-2023-3519. Tentamos identificar gateways/ADCs Citrix vulneráveis observando os cabeçalhos HTTP. Como funciona Durante nossa análise dessa vulnerabilidade, nós e nossos amigos da CERT-Verbund notamos que nossos...

dconstruct

dconstruct Open the source MP4 dconstruct ist ein Reverse-Engineering-Werkzeug für die DC-Script-Dateien, die in The Last of Us Part II verwendet werden. Es verfügt über einen Disassembler und einen Decompiler. Es gibt .asm-Dateien aus, die die disassemblierten Strukturen und den Bytecode...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 AGGIORNAMENTO: Oracle ha appena divulgato una nuova vulnerabilità CVE-2025-61884, lo script di rilevamento per tale vulnerabilità può essere trovato in questo repository o originalmente qui:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. Come cita...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bonding: Annotate the data races around slave-lastrx. slave-lastrx and slave-targetlastarprx... can be read and written without locking. Add READONCE and WRITEONCE annotations. syzbot reported: BUG: KCSAN: Data race in...

cs-get-last-error

cs-get-last-error Ottieni i messaggi di errore dai codici di GetLastError direttamente all'interno del client Cobalt Strike senza l'aiuto di Google search, net helpmsg o Microsoft Error Lookup Tool. I messaggi di errore sono inclusi nell'aggressor script e non è richiesta alcuna interazione con i...

EUVD-2026-62703

Wekan is open source kanban built with Meteor. Prior to 9.89, the second Boards.allow update rule in server/permissions/boards.js called canUpdateBoardSort in server/lib/utils.js, which authorized any board member whenever fieldNames included sort. Because Meteor combines allow rules with OR...

EUVD-2026-60559

A flaw has been found in Webkul Bagisto up to 2.4.4. The affected element is an unknown function of the file /customer/register of the component Customer-Registration Notification Email. This manipulation of the argument firstname/lastname causes basic cross site scripting. It is possible to...

CVE-2026-68329

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Wait for completion instead of returning early in iommucompletionwait needsync is a per-IOMMU flag shared by all domains and devices behind that IOMMU. It is set whenever a command is queued with sync == true and clear...

CVE-2026-68421 sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx()

In the Linux kernel, the following vulnerability has been resolved: schedext: Don't warn on core-sched forced idle in putprevtaskscx putprevtaskscx warns when a runnable task drops to a lower schedclass without SCXOPSENQLAST, on the assumption that balanceone would have kept it running. Core...

EUVD-2026-55607

In the Linux kernel, the following vulnerability has been resolved: schedext: Don't warn on core-sched forced idle in putprevtaskscx putprevtaskscx warns when a runnable task drops to a lower schedclass without SCXOPSENQLAST, on the assumption that balanceone would have kept it running. Core...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: smb: client: prevented races in -queryinterfaces It was possible for two query interfaces to simultaneously attempt to update the interfaces. This issue can be avoided by checking and updating ifacelastupdate under ifacelock...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconncount: Update lastgc only when garbage collection GC has been performed. Currently, lastgc is updated every time a new connection is tracked. This means it is updated even if no garbage collection was performed...