CVE-2026-80590

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gsotype to fragoff...

CVE-2026-80590 inet: frags: strip GSO state from fragments before reassembly

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gsotype to fragoff...

Kernel_VADInjector

Driver DLL Injector Driver DLL Injector Descrizione Driver DLL Injector è un potente strumento che consente agli utenti di caricare i driver di loro scelta utilizzando il mapper preferito. Sfruttando le capacità di un caricatore di driver non firmato, come KDmapper, questo injector è stato creato...

kdmp-parser

kdmp-parser Questa libreria C++ analizza i dump del kernel Windows completi .dump /f in WinDbg, i dump BMP .dump /ka in WinDbg così come i tipi di dump più recenti introdotti intorno al 2022. La libreria supporta il caricamento di dump a 64 bit e fornisce accesso in lettura a elementi come: Il...

Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite

Summary There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite CVE-2026-69152, CVE-2026-59645, CVE-2026-16221, CVE-2026-18446, CVE-2026-14257, CVE-2026-34481, CVE-2026-12802, CVE-2026-13586, CVE-2026-15055, CVE-2026-59639, CVE-2026-59642, CVE-2026-59647,...

Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-66010, CVE-2026-54515, CVE-2026-59889, CVE-2026-49844, CVE-2026-69153)

Summary Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite CVE-2026-66010, CVE-2026-54515, CVE-2026-59889, CVE-2026-49844, CVE-2026-69153. Vulnerability Details CVEID:CVE-2026-66010 DESCRIPTION: DOMPurify before 3.4.12 fails to execute...

CVE-2025-25706

CVE-2025-25706 विवरण आइटम: root@kitploit: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix भेद्यता प्रकार: दूरस्थ कोड निष्पादन...

CVE-2025-25705

CVE-2025-25705 Elemento descritto: root@kitploit: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix Tipo di vulnerabilità: Esecuzio...

Gopherus

Gopherus Se conosci un luogo vulnerabile a SSRF, questo strumento ti aiuterà a generare payload Gopher per sfruttare SSRF Server Side Request Forgery e ottenere RCE Remote Code Execution. Ti aiuterà anche a ottenere una reverse shell sul server vittima. E per maggiori informazioni puoi consultare...

CVE-2024-46878-TikiCMS-XSS

CVE-2024-46878 - Vulnerabilità di Cross-Site Scripting XSS Riflessa in Tiki CMS Tiki CMS - Vulnerabilità di Cross-Site Scripting XSS Riflessa nel parametro 'page' Disclaimer Destinato esclusivamente a scopi educativi, di ricerca e difensivi. L'uso non autorizzato contro sistemi senza permesso è...

PSTrojanFile

PSTrojanFile Windows PowerShell Dateiname und Defender Anti-Malware API - Code Execution POC Entdeckt von John Page alias hyp3rlinx 2019 und erneut geprüft 2023 Aktualisiert am 24. Dez. 2023 Umgehung des Hindernisses einfacher Anführungszeichen in PowerShell für Code-Ausführung und Bonus: PS...

CVE-2009-0229-PoC

CVE-2009-0229-PoC PoC für CVE-2009-0229 "Druckerwarteschlangen-Dateileseschwachstelle" LPE AFR verwandt mit CVE-2020-1048 Details Autor: Andrei Costin [email protected] https://twitter.com/costinandrei/ PoC-Datum: 2010-xx-xx Veröffentlichungsdatum: 2020-05-14 erinnert/inspiriert durch...

CVE-2024-22641

CVE-2024-22641 Tipo de Vulnerabilidade Negação de Serviço por Expressão Regular ReDoS Produto e Versão Afetados TCPDF root@kitploit: AddPage; $pdf-ImageSVG$file='poc.svg'; ?...

Security Bulletin: Security Vulnerabilities have been found in IBM Sovereign Core

Summary Security Vulnerabilities have been addressed in IBM Sovereign Core Vulnerability Details CVEID:CVE-2026-45022 DESCRIPTION: go-git is an extensible git implementation library written in pure Go. Prior to 5.19.0 and 6.0.0-alpha.3, go-git may parse malformed Git objects in a way that differs...

simple-file-list-rce

simple-file-list-rce Simple File List 4.2.3 - RCE tramite Caricamento File Arbitrario Non Autenticato root@kitploit: usage: simple.py -h -u URL -f1 FILE1 -f2 FILE2 -p PATH optional arguments: -h, --help show this help message and exit -u URL, --url URL Wordpress Url i.e https://wordpress.lan -f1...

CVE-2024-12594

CVE-2024-12594 ALL In One Custom Login Page input...

magnolia-rce

Titolo Exploit: Magnolia DX Core 6.3.8 - Iniezione di comandi Data: 05/16/2025 Autore Exploit: tmrswrr Versione: 6.3.8 Home page del fornitore: https://docs.magnolia-cms.com/home/ Prodotto: https://docs.magnolia-cms.com/product-docs/6.3/releases/release-notes-for-magnolia-cms-6.3.8/ 1. Autenticat...

CVE-2024-55988

CVE-2024-55988 Navayan CSV Export = 1.0.9 - Nicht authentifizierte SQL-Injection Beschreibung Das Navayan-CSV-Export-Plugin für WordPress ist in Versionen bis einschließlich 1.0.9 anfällig für SQL-Injection, da der vom Benutzer bereitgestellte Parameter unzureichend maskiert wird und die bestehen...

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

webrtc-ips

STUN-IP-Adressanfragen für WebRTC Demo: https://diafygi.github.io/webrtc-ips/ Was das macht Firefox und Chrome haben WebRTC implementiert, das Anfragen an STUN-Server ermöglicht, die die lokalen und öffentlichen IP-Adressen des Benutzers zurückgeben. Diese Anforderungsergebnisse stehen JavaScript...