GhostStrike

HEAD Projekt 2 ist LIVE: GhostStrike Vollautomatisiertes Spring4Shell CVE-2022-22965 + GitLab RCE-Framework 100% selbst geschrieben • Python • 2025 Features: • Auto-Listener nc/tmux • Modularer Aufbau spring4shell.py, payloads/ • Farbige Ausgabe + Banner • Bereit für zukünftige Exploits LFI-to-RC...

shiro-cve-2022-32532

Ambiente di riproduzione per Apache Shiro CVE-2022-32532 Questa è un'applicazione Web minimale per riprodurre CVE-2022-32532 bypass dell'autenticazione Apache Shiro RegExPatternMatcher. Descrizione della vulnerabilità CVE : CVE-2022-32532 Versioni interessate : Shiro 1.9.1 Causa :...

r2s

R2S - React2Shell Scanner Ein webbasierter Schwachstellenscanner für CVE-2025-55182 , eine kritische Remote-Code-Ausführung RCE Sicherheitslücke in React Server Components. Live-Scanner: https://r2s.mxm0z.com Über CVE-2025-55182 CVE-2025-55182 ist eine kritische CVSS 10.0 Sicherheitslücke im Reac...

react2shell-checker

React2Shell Checker Next.js और React अनुप्रयोगों में React2Shell भेद्यता CVE-2025-55182 का पता लगाने के लिए एक सुरक्षा भेद्यता स्कैनर। अवलोकन React2Shell Checker आपको यह पता लगाने के लिए वेबसाइटों को स्कैन करने की सुविधा देता है कि वे Next.js या React Server Components के असुरक्षित संस्करण चला रह...

CVE-2026-8181

EN: PoC controllato e brevi note tecniche per test di sicurezza autorizzati del bypass dell'autenticazione in Burst Statistics. TR:...

jackit

JackIt Do you like JackIt but don't want to carry around a laptop? Checkthis out. What This is a partial implementation of Bastille's MouseJack exploit. See mousejack.com for more details. Full credit goes to Bastille's team for discovering this issue and writing the libraries to work with the...

RDL-detect

Verificação do Serviço Remote Desktop Licensing Referência: https://github.com/fortra/impacket/blob/master/examples/rpcdump.py Enumera os serviços abertos via MSRPC e, com base no UUID: 3d267954-eeb7-11d1-b94e-00c04fa3080d, determina se o Terminal Server Licensing está presente. Uso: python3...

CVE-2026-80588

A flaw was found in the Linux kernel's Multipath TCP mptcp implementation. Errors occurring during the receive path, before data is queued, may prevent the system from reclaiming forward-allocated memory. This can lead to an unbounded increase in memory usage under certain network conditions, suc...

CVE-2026-71401

An integer underflow in the wicked DHCPv4 packet capture code (function ni_capture_inspect_udp_header() in src/capture.c) allows an unauthenticated attacker on an adjacent network to trigger an out-of-bounds read past the receive buffer in the wickedd-dhcp4 daemon. The IP total length field is no...

CVE-2026-71401 wicked: integer underflow of the UDP length in ni_capture_inspect_udp_header() leads to an out-of-bounds read

An integer underflow was found in the DHCPv4 packet capture code of wicked. nicaptureinspectudpheader in src/capture.c does not verify that the IP total length field iplen is at least as large as the IP header length ihl before subtracting the header length. An unauthenticated attacker on the sam...

EUVD-2026-67079

An integer underflow was found in the DHCPv4 packet capture code of wicked. nicaptureinspectudpheader in src/capture.c does not verify that the IP total length field iplen is at least as large as the IP header length ihl before subtracting the header length. An unauthenticated attacker on the sam...

CVE-2026-71401 wicked: integer underflow of the UDP length in ni_capture_inspect_udp_header() leads to an out-of-bounds read

An integer underflow was found in the DHCPv4 packet capture code of wicked. nicaptureinspectudpheader in src/capture.c does not verify that the IP total length field iplen is at least as large as the IP header length ihl before subtracting the header length. An unauthenticated attacker on the sam...

AI-Red-Teaming-Playground-Labs

KI-Red-Teaming-Playground-Labs Dieses Repository enthält die Herausforderungen Challenges für die Labs, die im Kurs „KI-Red-Teaming in der Praxis" verwendet werden. Der Kurs wurde ursprünglich auf der Black Hat USA 2024 von Dr. Amanda Minnich und Gary Lopez unterrichtet. Martin Pouliot kümmerte...

CVE-2020-14883

CVE-2020-14883 Oracle WebLogic Server Authentifizierte Remote-Codeausführung RCE Eine Schwachstelle im Produkt Oracle WebLogic Server von Oracle Fusion Middleware Komponente: Console. Betroffene unterstützte Versionen sind 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 und 14.1.1.0.0. Die leicht...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 17, 2026 to August 23, 2026)

Last week, there were 240 vulnerabilities disclosed in 184 WordPress Plugins and 17 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 105 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabiliti...

CVE-2025-71346

A flaw was found in Nokogiri, which packages a vulnerable version of libxml2. This heap-based buffer under-read vulnerability, located in the xmlSchemaIDCFillNodeTables function, can be triggered when processing untrusted XML Schemas or documents. A remote attacker could exploit this by providing...

CVE-2019-11447

CVE-2019-11447 - PoC Sfrutta CuteNews 2.1.2 tramite controlli deboli sul caricamento dei file utilizzati per caricare un'immagine avatar, portando a RCE. Installazione Clona il repository e installa i requisiti. pip install -r requirements.txt Utilizzo Per caricare un avatar è necessario un accou...

MAL-2026-14560 Malicious code in inspectstack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ea349a23210beae0386dd29fc147dcebd45224f63c57c7f05c80e17b7c8e907 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stackpaths (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a47a89c9250e68ea4aa51bff92f6e9282f14bc2b7b0c61de459b25b3e48627ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in inspectstack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ea349a23210beae0386dd29fc147dcebd45224f63c57c7f05c80e17b7c8e907 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...