3287 matches found
PT-2026-82742
A MongoDB C driver document-replacement code path omits the element-name/shape validation that the equivalent write paths apply, so a value supplied as a replacement is forwarded to the server without neutralization of query-language special elements. An application that passes untrusted,...
CVE-2026-65930
LimeSurvey Community Edition 7.0.5 contains an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog used by the administrative question editor.This issue affects LimeSurvey: 7.0.5...
CVE-2026-31431-Copy-Fail
CVE-2026-31431: Quando a Cópia Não É uma Cópia e a Falha Vem Tarde Demais Artefatos e scripts para o artigo CopyFail. O guia detalhado: https://4xura.com/binex/kernel/copy-fail/ Estrutura proof-of-concept/ contém as demonstrações apenas com primitivas usadas no artigo. exploit-scripts/ contém as...
wolfGuard
WolfGuard VPN mit FIPS 140-3 Kryptographie WolfGuard ist das wolfSSL FIPS-konforme Refactoring des auf dem Linux-Kernel basierenden WireGuard, ursprünglich entworfen und verfasst von Jason Donenfeld. Die Verwendung ist im Wesentlichen identisch. Es gibt zwei Hauptkomponenten von WolfGuard: das...
CVE-2017-4490-
CVE-2017-4490 لقد أجريت بعض التجارب ونجحت في استغلال ملف .basgrc المتخصص في الكتابة والتزيين على الطرفية. أنشأت ثغرة في ملف .bashrc ونجحت في تعطيل الطرفية. الثغرة موجودة لدي وتعمل على جميع أنظمة لينكس لأن figlet يعمل على جميع الأنظمة. فقط اكتب الأمر apt-get install figlet وسيُنشئ لك .bashrc في Ho...
CVE-2026-65930 LimeSurvey Community Edition 7.0.5 - Stored XSS in replacement-fields
LimeSurvey Community Edition 7.0.5 contains an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog used by the administrative question editor.This issue affects LimeSurvey: 7.0.5...
CVE-2026-65930
LimeSurvey Community Edition 7.0.5 is affected by an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog within the administrative question editor. An attacker with low privileges can inject a persistent script that executes in the context of other users who i...
CVE-2026-65930 LimeSurvey Community Edition 7.0.5 - Stored XSS in replacement-fields
LimeSurvey Community Edition 7.0.5 contains an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog used by the administrative question editor.This issue affects LimeSurvey: 7.0.5...
ExtensionSpoofer
ExtensionSpoofer ExtensionSpoofer è un'app desktop Visual Basic .NET che dimostra come nomi di file e icone possano essere manipolati visivamente su Windows mentre il tipo di file eseguibile sottostante rimane invariato. Utilizza il carattere Unicode Right-to-Left Override U+202E per invertire i...
CVE-2024-10449-patch
Patch per CVE-2024-10449 https://nvd.nist.gov/vuln/detail/CVE-2024-10449 Passaggi: Scarica il file loginAction.php corretto da questo repository https://raw.githubusercontent.com/g-u-i-d/CVE-2024-10449-patch/refs/heads/main/loginAction.php e sostituisci la versione vulnerabile con questo. Modific...
qubes-mirage-firewall
qubes-mirage-firewall Un unikernel che può funzionare come ProxyVM di QubesOS, sostituendo sys-firewall. Usa la libreria mirage-qubes per implementare i protocolli di Qubes. Vedi A Unikernel Firewall for QubesOS per maggiori dettagli. Binary releases I binari precompilati sono disponibili nella...
sudo_digest_toctou_poc_CVE-2015-8239
POC TOCTOU do DigestSpec do sudoers Justificativa Alyssa Milburn https://twitter.com/noopwafel descobriu um bug de condição de corrida TOCTOU no sudo quando a configuração DigestSpec é usada. A configuração DigestSpec pode ser usada para permitir que um usuário execute sudo em um binário se, e...
e9patch
E9Patch - Ein leistungsstarker statischer Binär-Rewriter E9Patch ist ein leistungsstarkes Tool zum statischen Binär-Rewriting für x8664 Linux-ELF-Binärdateien. E9Patch ist: Skalierbar : E9Patch kann große/komplexe Binärdateien zuverlässig umschreiben, darunter Webbrowser 100 MB Größe. Kompatibel ...
jsch
Fork di JSch-0.1.55 Vedi il README originale Perché dovresti usare questa libreria? Come ho spiegato in un post del blog, i punti principali sono: OpenSSH ha disabilitato ssh-rsa per impostazione predefinita nella release 8.8 e hai bisogno di una libreria che supporti rsa-sha2-256 e rsa-sha2-512...
NoLongerEvil-Thermostat
Configurazione Firmware Nest Thermostat 🏆 Vincitore del FULU Bounty 🏆 Hack House e questo progetto sono i vincitori ufficiali del FULU Bounty per Nest Learning Thermostat Gen 1/2 Alternativa Hardware: Se sei interessato al lato hardware, dai un'occhiata a https://sett.homes per un'opzione di...
npcap
Npcap Npcap è una libreria di cattura e iniezione di pacchetti per Windows realizzata dal Nmap Project. È un aggiornamento completo del WinPcap, ormai non mantenuto, con miglioramenti in velocità, affidabilità e sicurezza. Documentazione La documentazione completa di Npcap è disponibile nella Npc...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098730)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098730 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: jitterentropy - replace long-held spinlock with mutex jentkcapirandom serializes the shar...
CVE-2026-70551
A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL...
CVE-2026-70551
CVE-2026-70551 is a Server-Side Request Forgery (SSRF) vulnerability in JFrog Artifactory via VCS remote download. A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL , redirecting the server's request to an attacker-controlle...
