Sitecore Experience Platform - Deserialization of Untrusted Data

Sitecore Experience Platform before 8.2 Update-7 and 9.0 before Update-2 is vulnerable to a remote code execution vulnerability CVE-2019-9874. An attacker can exploit this issue to execute arbitrary code on the affected system via a crafted request to the...

Barco/AWIND OEM Presentation Platform - Remote Command Injection

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pr...

Sitecore - Remote Code Execution

Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3. id: CVE-2023-35813 info: name: Sitecore - Remote Code Execution author: DhiyaneshDk,iamnoooob severity: critical description: | Multiple Sitecore...

XWiki Platform - Remote Code Execution

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Improper escaping in the document SkinsCode.XWikiSkinsSheet leads to an injection vector from view right on that document to programming rights, or in other words, it is possible to execute...

ServiceNow - Incomplete Input Validation

ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addresse...

SAP Memory Pipes (MPI) Desynchronization

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable to request smuggling and request concatenation attacks. An unauthenticated attacker can prepend a victim's request with arbitrary data. This...

d8-copy-fail-mitigation

Mitigazione CVE-2026-31431 per Deckhouse Kubernetes Platform Lingua: English | Русский | Italiano Informazioni sulla vulnerabilità CVE-2026-31431 è una vulnerabilità nel modulo algifaead del kernel Linux, che espone l'API crittografica del kernel allo spazio utente attraverso la famiglia di socke...

libptrace

libptrace libptrace è un framework per il debug, tracing e manipolazione di processi/thread guidato dagli eventi. È scritto in C e ha binding per Python 2.7 e 3.7. È progettato per essere usato come libreria. L'API è stata pensata con il supporto multipiattaforma in mente. Sebbene la versione...

ZipCracker

ZipCracker ZipCracker è un'utility semplice ma potente per la forza bruta delle password, progettata per decifrare archivi ZIP protetti da password. È costruito con Qt e integra un motore di cracking personalizzato, offrendo supporto sia CLI che GUI. ⚡ Disclaimer: Questo strumento è destinato...

CVE-2025-29722

🛡️ CVE-2025-29722 – Cross Site Request Forgery CSRF in Commercify v1.0 Scoperto da: David P.S Abraham alias Davycipher CVE ID CVE-2025-29722 è stato assegnato a questa vulnerabilità da MITRE Corporation. Riepilogo Una vulnerabilità CSRF è stata identificata in Commercify v1.0 , una piattaforma di...

WebGoat.NET

Webgoat.NET الكود المصدري: https://github.com/jerryhoff/WebGoat.NET تحميل zip: https://github.com/jerryhoff/WebGoat.NET/zipball/master تطبيق الويب هذا هو منصة تعليمية تحاول التعليم عن عيوب أمن الويب الشائعة. يحتوي على عيوب أمنية عامة تنطبق على معظم تطبيقات الويب. كما يحتوي على دروس تتعلق تحديدًا ...

NoFilter

NoFilter Strumento per abusare della piattaforma di filtro di Windows per l'escalation dei privilegi. Può avviare una nuova console come "NT AUTHORITY\SYSTEM" o come un altro utente che ha effettuato l'accesso alla macchina. Utilizzo root@kitploit: Usage: NoFilter.exe -s SESSIONID Crediti Ron Ben...

silicon2022-capturetheflag

silicon2022-ctf Über Eine CTF mit 41 Flags, die auf der RootTheBox-Plattform basiert. Die Infrastruktur wurde größtenteils auf dem Azure Kubernetes Service bereitgestellt. Terminal-Challenges wurden über Docker-Images mit einer modifizierten Version von WeTTY bereitgestellt. Erstellen Die meisten...

faraday-cli

Faraday on the terminal Use faraday directly from your favorite terminal faraday-cli is the official client that make automating your security workflows, easier. Before installing, we recommend creating and activating a Python virtual environment to avoid affecting your system Python packages. Fo...

apache__jspwiki_CVE-2019-10077_2-11-0-M3

Apache JSPWiki 2.11 - Dokumentation root@kitploit: Lizenziert unter der Apache Software Foundation ASF im Rahmen einer oder mehrerer Mitwirkenden-Lizenzvereinbarungen. Siehe die NOTICE-Datei, die mit dieser Arbeit verteilt wird, für zusätzliche Informationen bezüglich des Urheberrechts. Die ASF...

apache__jspwiki_CVE-2019-0225_2-11-0-M2

Apache JSPWiki 2.11 - Documentazione root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...

cloudflare-bypass-2026

Cloudflare Bypass Tool 2026 Ein Multistrategie-Toolkit für Forschung und Tests von Cloudflare-Turnstile-/Challenge -Abläufen unter macOS, Windows und Linux. 面向 Cloudflare Turnstile / Challenge 的多方案研究与授权测试工具集，支持 Mac / Windows / Linux 。 Inhaltsverzeichnis / 目录...

sdc

root@kitploit: +------------------------------------------------------------------------------+ SDC - مولد الثنائي ذاتي الفك تشفير حقوق الطبع والنشر C 2006 كلاس إم نيبيرغ +------------------------------------------------------------------------------+ -= ما هذا root@kitploit: يقوم برنامج SDC بإنش...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integrati...