git_rce

CVE-2024-32002: Sfruttare RCE in Git tramite git clone Questo repository contiene un PoC per sfruttare CVE-2024-32002, una vulnerabilità in Git che consente RCE durante un'operazione di git clone. Creando repository con sottomoduli in modo specifico, un attaccante può sfruttare la gestione dei...

Ios-Safari-Mallicous-Extension-Example

Ios-Safari-Mallicous-Extension-Example Esempio su come effettuare l'iniezione attualmente in lavorazione di un keylogger js tramite l'estensione Safari quella parte è già fatta...

Mallicious-IOS-SHORTCUT-KEYLOGGER-

Mallicious-IOS-SHORTCUT-KEYLOGGER-...

CVE-2025-34299

CVE-2025-34299 Le versioni 2.11 e precedenti di Monsta FTP presentano una vulnerabilità che consente il caricamento arbitrario di file senza autenticazione. Questa falla permette agli attaccanti di eseguire codice arbitrario caricando un file appositamente concepito da un server SFTP malevolo. Co...

CVE-2026-59315

The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier...

CVE-2026-59314

Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1.0 - 6.1.28 Spring Framework 6.0.0 - 6.0.30 Spri...

CVE-2026-59288

The GraphiQL page bundled with Spring for GraphQL sends requests to the GraphQL endpoints of the application. An attacker can share a malicious URL so that the victim's browser might leak confidential information to the attacker's website. Spring for GraphQL 2.0.0 - 2.0.4 Spring for GraphQL 1.4.0...

CVE-2026-34616

DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information from memory. Exploitation of this issue requires user interaction in that a victim must...

CVE-2025-30065-PoC

CVE-2025-30065 PoC Verwendung Image erstellen root@kitploit: docker build -t cve-2025-30065 . Bösartiges Parquet generieren root@kitploit: docker run --rm -v $pwd:/poc/out cve-2025-30065 generate "cat /etc/passwd" ./out/malicious.parquet Exploit auslösen root@kitploit: docker run --rm -v...

CVE-2021-40444

CVE-2021-40444 completamente armato Generatore di docx malevolo per sfruttare CVE-2021-40444 Esecuzione di codice remoto in Microsoft Office Word, funziona con file DLL arbitrari. Aggiornamento 31/05/2022 - CVE-2022-30190 - Follina Ora il generatore è in grado di creare il documento necessario pe...

Supply-Chain

Sicherheit der Software-Lieferkette Eine umfassende dreibändige Buchreihe zur Sicherheit der Software-Lieferkette, die Bedrohungen, Abwehrmaßnahmen und Governance abdeckt. Dieses Open-Source-Manuskript bietet Sicherheitsexperten, Entwicklern und Führungskräften in Organisationen praktische...

EUVD-2026-67216

DNG SDK versions 1.7.1 2502 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information from memory. Exploitation of this issue requires user interaction in that a victim must...

CVE-2024-38526

CVE-2024-38526 - Polyfill Scanner: x Scanner di massa per URL Il CDN polyfill.io, precedentemente compromesso per servire codice dannoso, è stato ora messo in sicurezza con l'ultima correzione in pdoc 14.5.1. Panoramica Rileva potenziali problemi Automatizza attività ripetitive con facilità...

Malicious code in tailwindcss-3d-animate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc554005eb9004f33d22597b929261d865d4bfe991d0b99d148dc25fffb7e97c index.js re-exports the legitimate tailwindcss-3d plugin and then appends evalatob"..." at module top level, so the payload runs on any...

MAL-2026-14567 Malicious code in tailwindcss-3d-animate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc554005eb9004f33d22597b929261d865d4bfe991d0b99d148dc25fffb7e97c index.js re-exports the legitimate tailwindcss-3d plugin and then appends evalatob"..." at module top level, so the payload runs on any...

MAL-2026-14568 Malicious code in tailwindcss-form-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf4e5fbd59048a5ab6a5c04ad7c98e7246c9cf57363d95acc84f92d8ca883f4 src/index.js re-exports the legitimate tailwindcss-forms plugin as a working cover, then appends an obfuscator.io-style 0x string-array cipher that...

Malicious code in tailwindcss-form-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf4e5fbd59048a5ab6a5c04ad7c98e7246c9cf57363d95acc84f92d8ca883f4 src/index.js re-exports the legitimate tailwindcss-forms plugin as a working cover, then appends an obfuscator.io-style 0x string-array cipher that...

CVE-2026-59315

Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Affected versions include Spring Cloud Config 5.0.0–5.0.4, 4.3.0–4.3.4, 4.0.0–4.2.8, and 3.1.14 and earlier . The vulnerability is scored CVSS 5.3 (Medium) with a network attack vector, low complexity,...

CVE-2026-59315 Spring Cloud Config Monitor Denial of Service

The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier...

EUVD-2026-67197

The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring Cloud Config 3.1.14 and earlier...