CVE-2025-3248

CVE-2025-3248 Langflow é uma plataforma low-code usada principalmente para construir e implantar agentes de IA e fluxos de trabalho. Ela simplifica o processo de desenvolvimento ao fornecer uma interface visual para criar aplicações complexas de IA, incluindo chatbots, sistemas RAG Geração...

HG532d-RCE-Exploit

Exploit RCE HG532d Panoramica Un exploit di Remote Code Execution RCE basato sulla vulnerabilità CVE-2017-17215. Modificato dal codice PoC originale da exploit-db.com per funzionare sui router gateway domestici Huawei HG532d. Descrizione Questo exploit RCE si basa su CVE-2017-17215 che sfrutta le...

CVE-2023-1389

TP-Link Archer AX21 - Iniezione di comandi non autenticata Loader POC CVE-2023-1389 Titolo Exploit: TP-Link Archer AX21 - Iniezione di comandi non autenticata Data di scoperta: 25/07/2023 Autore Exploit: Voyag3r root@kitploit: How to Use :- Scanning - Use Zmap : zmap -p 80 -o list.txt NetCat...

CVE-2026-80214

LibreNMS 's Virtualization Discovery module is susceptible to command line injection , allowing an authenticated admin user to execute arbitrary code on the host server. The CVSS 4.0 base score is 8.6 (HIGH) , reflecting network reachability with low attack complexity but requiring high privilege...

EUVD-2026-66227

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server...

CVE-2026-80214 LibreNMS Virtualisation Discovery Module RCE

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server...

CVE-2026-80214 LibreNMS Virtualisation Discovery Module RCE

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server...

CVE-2026-80214 LibreNMS Virtualisation Discovery Module RCE

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server...

EntraFalcon V20260824

EntraFalcon EntraFalcon is a PowerShell-based assessment tool for pentesters, security analysts, and system administrators to evaluate the security posture of a Microsoft Entra ID environment. Designed for ease of use, EntraFalcon runs on PowerShell 5.1 and 7, supports both Windows and Linux, and...

CVE-2025-49844

CVE-2025-49844 – Use-After-Free im Redis-Lua-Parser Lua-Chunk-Name-GC-Race, die in Redis 8.2.1 zu Use-After-Free und Remote-Code-Ausführung führt. Übersicht Redis bettet Lua 5.1 für Skripting ein. In Versionen bis 8.2.1 verankert die Funktion luaYparser die Chunk-Name-Zeichenkette NICHT auf dem...

Windows-Non-Paged-Pool-Overflow-Exploitation

Indice Indice Introduzione Introduzione alle Named-Pipes Sfruttamento Spraying del pool non paginato Divulgazione di memoria/Lettura arbitraria Controllo completo sui dati dell'overflow Controllo limitato sui dati dell'overflow Scrittura arbitraria Liberazione arbitraria di oggetti...

CavalryHive

CavalryHive Autonomous web-security assessment toolkit for...

cupcake

Cupcake KI-Agenten dazu bringen, die Regeln einzuhalten. Richtliniendurchsetzungs -Schicht für KI-Agenten; bietet bessere Leistung und Sicherheit ohne Verbrauch von Modellkontext. Deterministisches Regelbefolgen für Ihre Agenten. Interaktive Beispiele Bessere Leistung durch Verlagerung von Regeln...

grepmarx

Grepmarx - Piattaforma di Sicurezza delle Applicazioni Grepmarx è un'applicazione web che fornisce una piattaforma unica per comprendere, analizzare e identificare rapidamente le vulnerabilità in basi di codice potenzialmente grandi e sconosciute. Caratteristiche Capacità SAST Static Analysis...

tplmap

Tplmap This project is no longer maintained. I'm happy to merge new PRs as long they don't break the test suite. Tplmap assists the exploitation of Code Injection and Server-Side Template Injection vulnerabilities with a number of sandbox escape techniques to get access to the underlying operatin...

USN-8681-1: OpenJDK 25 vulnerabilities

It was discovered that the JSSE component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 25 did not correctly authorize users. A remote attack...

USN-8681-1 openjdk-25 vulnerabilities

It was discovered that the JSSE component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 25 did not correctly authorize users. A remote attack...

CVE-2024-24919

Check Point Security Gateways Divulgazione di informazioni - CVE-2024-24919 Potenzialmente consente a un attaccante di leggere determinate informazioni sui Check Point Security Gateways, se connessi a Internet e con Remote Access VPN o Mobile Access Software Blades abilitati. È disponibile una...

rootsh

rootsh rootsh ist eine lokale Privilegieneskalation, die auf OS X Yosemite 10.10.5 Build 14F27 abzielt. Es nutzt CVE-2016-1758 und CVE-2016-1828 aus, zwei Schwachstellen in XNU, die in OS X El Capitan 10.11.4 und 10.11.5 gepatcht wurden. rootsh funktioniert nicht auf Plattformen mit aktiviertem...

CVE-2023-35078-Exploit-POC

CVE-2023-35078 Exploit POC La vulnerabilità di accesso API remoto non autenticato CVE-2023-35078 è stata scoperta in Ivanti Endpoint Manager Mobile EPMM, precedentemente noto come MobileIron Core. Questa vulnerabilità interessa tutte le versioni supportate – versione 11.4, release 11.10, 11.9 e...