phpLDAPadmin <= 1.2.3 - Reflected XSS

phpLDAPadmin = 1.2.3 contains a reflected cross-site scripting caused by unsanitized input in htdocs/entrychooser.php via the form, element, rdn, or container parameter, letting attackers execute malicious scripts in victim browsers, exploit requires sending crafted input. id: CVE-2017-11107 info...

CVE-2026-78637

A vulnerability was detected in Fdawgs node-poppler up to 9.1.2/10.0.1. The impacted element is the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pdfToHtml/pdfToPs/pdfFonts/pdfDetach/pdfAttach/pdfSeparate/pdfUnite of the file src/index.js of the component Argument Injection Handler...

CVE-2026-78637

CVE-2026-78637 is an argument injection vulnerability in Fdawgs node-poppler (versions up to 9.1.2/10.0.1 ), a Node.js wrapper for the Poppler PDF library. The flaw resides in the Argument Injection Handler within src/index.js, affecting multiple PDF conversion and manipulation functions includin...

CVE-2026-78637 Fdawgs node-poppler Argument Injection index.js pdfUnite argument injection

A vulnerability was detected in Fdawgs node-poppler up to 9.1.2/10.0.1. The impacted element is the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pdfToHtml/pdfToPs/pdfFonts/pdfDetach/pdfAttach/pdfSeparate/pdfUnite of the file src/index.js of the component Argument Injection Handler...

CVE-2026-78637 Fdawgs node-poppler Argument Injection index.js pdfUnite argument injection

A vulnerability was detected in Fdawgs node-poppler up to 9.1.2/10.0.1. The impacted element is the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pdfToHtml/pdfToPs/pdfFonts/pdfDetach/pdfAttach/pdfSeparate/pdfUnite of the file src/index.js of the component Argument Injection Handler...

EUVD-2026-65293

A vulnerability was detected in Fdawgs node-poppler up to 9.1.2/10.0.1. The impacted element is the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pdfToHtml/pdfToPs/pdfFonts/pdfDetach/pdfAttach/pdfSeparate/pdfUnite of the file src/index.js of the component Argument Injection Handler...

TransitionPlayer

Dieses Problem wurde für Android 14+ im June 2026 Android Security Bulletin behoben. Klicken Sie hier, um den Patch zu sehen Writeup TODO Ich werde den Writeup vervollständigen, wenn ich etwas freie Zeit habe Aber davor muss ich mich mit Schularbeiten und Prüfungen herumschlagen Ich habe...

wiremax

wiremax Un dissector Wireshark/tshark per gli Information Element vendor Ubiquiti AirMAX AC + M e il compagno Mikrotik / RouterBoard , scritto in Lua. È la controparte over-the-wire di pyrmax: la logica di decodifica rispecchia quel pacchetto Python campo-per-campo. Il formato dei pacchetti AC è...

CVE-2026-64638

CVE-2026-64638 XSS riflesso sulla schermata di login che porta all'esecuzione di codice PHP — WordPress Core Software: WordPress Core ≤ 7.0.2 tutte le versioni precedenti alla 7.0.3 CVSS: 8.9 Alto CWE: CWE-79 — Neutralizzazione impropria dell'input durante la generazione di pagine web...

CVE-2024-54152

⚙️🔨 IN CORSO POC CVE-2024-54152 Angular Expressions fornisce espressioni per il framework web Angular.JS come modulo autonomo. Prima della versione 1.4.3, un attaccante può scrivere un'espressione malevola che evade la sandbox per eseguire codice arbitrario sul sistema. Con un payload più compless...

RealPlayer_G2_RCE

Real Player v.20.0.8.310 G2 Control 'DoGoToURL' Sicherheitslücke bei der Remote-Code-Ausführung Video-Demo: https://www.youtube.com/watch?v=9c9Q4VZQOUk Die Real Player G2 Control-Komponente enthält eine Sicherheitslücke bei der Remote-Code-Ausführung, da sie es erlaubt, dass 'javascript:'-URIs al...

perl-CryptX

BEZEICHNUNG CryptX - Kryptografische Werkzeugsammlung ÜBERBLICK CryptX ist der Einstiegspunkt der Distribution. Im normalen Code lädt man eines der unten aufgeführten konkreten Module. root@kitploit: Einmal-Hashing use Crypt::Digest qwdigestdatahex; my $sha256 = digestdatahex'SHA256', 'hello...

CVE-2025-7558-PoC

CVE-2025-7558-PoC Zusammenfassung Eine als kritisch eingestufte Schwachstelle wurde im code-projects Voting System 1.0 gefunden. Das betroffene Element ist eine unbekannte Funktion der Datei /admin/positionsadd.php. Eine solche Manipulation des Arguments Description führt zu SQL-Injection. Diese...

POC-CVE-2026-19681

CVE-2026-19681 — Befehlsinjektion in der Verarbeitung von Datei-Uploads authentifiziert Status: BESTÄTIGT in einer 6.7.2-14.el9-Lab-Umgebung 2026-08-20. Über POST /rest/file/upload wurde ein präparierter Dateiname p;sleep$IFS20;-EvvfJk eingebracht das Kontext-Präfix trägt die Metazeichen;...

kubebox

= Kubebox small^⎈❏^ Antonin Stefanutti https://github.com/astefanutti@astefanutti // Meta :description: Terminal- und Web-Konsole für Kubernetes // Settings :idprefix: :idseparator: - :experimental: // Aliases ifdef::env-github :note-caption: ℹ️ :icon-check: ✔️ :icon-edit: ✏️ endif::...

CMF-Watch-Pro-2-BLE-Protocol

CMF Watch Pro 2 — Protocollo BLE reverse-engineered Ufficioso. Questo documento descrive il protocollo Bluetooth Low Energy BLE del CMF Watch Pro 2 CMF by Nothing, ricostruito tramite reverse engineering per un'app companion alternativa. Non è affiliato o approvato da Nothing/CMF. Utilizzalo a tu...

Aura-State

Aura-State Un framework Python per costruire workflow LLM come macchine a stati, con verifica formale integrata. root@kitploit: pip install git+https://github.com/munshi007/Aura-State.git Che cos'è La maggior parte dei framework LLM ti permettono di concatenare chiamate API e sperare per il megli...

shodan-dorks

Shodan dorks Description: This GitHub repository provides a range of search queries, known as "dorks," for Shodan, a powerful tool used to search for Internet-connected devices. The dorks are designed to help security researchers discover potential vulnerabilities and configuration issues in...

scallion

2020 Project Update Scallion was a hobby project to learn OpenCL and RSA. We are not currently maintaining scallion. It has bitrotted in two important ways: 1. Tor has moved on to v3 Onion addresses, which scallion does not support. Old v2 addresses will stop working in October of 2021. The new...

shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...