Invoke-DCSync

Invoke-DCSync Invoke-DCSync Referencia: https://adsecurity.org/?p=1729 Referencia: https://silentbreaksecurity.com/invoke-dcsync-because-we-all-wanted-it/ Objetivo: recuperar los hashes de contraseñas de todas las cuentas de usuario en un controlador de dominio utilizando la función DCSync de...

ReplicatedRandom

Node MWC1616 Consulta el README en la carpeta node Java LCG Dado un double generado por nextDouble de un java.util.Random, recrea un Random con el mismo estado. Este ReplicatedRandom se puede usar entonces para predecir los valores futuros del Random original. Ejemplo: root@kitploit: Random r = n...

CVE-2023-27532

CVE-2023-27532 POC per CVE-2023-27532 che colpisce Veeam Backup and Replication Analisi Tecnica Un'analisi tecnica della causa principale della vulnerabilità è disponibile sul nostro blog: https://www.horizon3.ai/veeam-backup-and-replication-cve-2023-27532-deep-dive Sommario Questo POC sfrutta un...

CVE-2021-27905

CVE-2021-27905 N.| Titolo ---|--- 1| Panoramica 2| Causa principale 3| Prova di concetto 4| Mitigazione 8.8.2+ 5| Riferimenti Solo per scopi educativi e di ricerca. Non utilizzare questo codice su sistemi che non possiedi o per i quali non hai un'autorizzazione esplicita al test. Non sono...

CVE-2019-19470-RedTeamRD

CVE-2019-19470-RedTeamRD Dieses Repository enthält den Code und die Anleitungen, um den von CODEWHITE entdeckten Exploit CVE-2019-19470 zu replizieren. Hier finden Sie den Quellcode der Beispiele, die ich im HackTheBox-Meetup verwendet habe, um meinen Lernprozess und die Erstellung dieses Exploit...

CVE-2022-28219-Like

CVE-2022-28219-Like Crea un ambiente di test concettualmente simile a CVE-2022-28219...

ADSpider

root@kitploit: d8888 8888888b. .d8888b. d8b 888 d88888 888 "Y88b d88P Y88b Y8P 888 d88P888 888 888 Y88b. 888 /\ .-"""-. /\ d88P 888 888 888 "Y888b. 88888b. 888 .d88888 .d88b. 888d888 //\/ ,,, //\ d88P 888 888 888 "Y88b. 888 "88b 888 d88" 888 d8P Y8b 888P" |/| ,;;;;;, |/| d88P 888 888 888 "888...

WinRAR-Vulnerability-recurrence-tutorial

Tutorial per la replica della vulnerabilità WinRAR Replica delle vulnerabilità WinRAR-6.22, CVE-2023-38831, CNNVD-202308-1943, DM-202307-003730, QVD-2023-19572 Informazioni sulla vulnerabilità WinRAR 6.23 o WinRAR =6.22 Link di riferimento: https://cn-sec.com/archives/1980228.html...

Veeam Backup & Replication - Unauthenticated

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution RCE. id: CVE-2024-40711 info: name: Veeam Backup & Replication - Unauthenticated author: rootxharsh,iamnoooob,DhiyaneshDK severity: critical description: | A deserializati...

Vulnerability Resolved in Veeam Backup & Replication 13.1

Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...

WebSecurityProject

Progetto WebSecurity Analisi e replica di CVE-2022-23988 e CVE-2022-34265...

CVE-2026-48106

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterprise's cluster replication receiver at internal/cluster/replication/receiver.go validates only the wire-format envelope length, opcode of inbound messages. The MsgReplicateSync payload itself is...

CVE-2026-48106 Arc Enterprise cluster replication accepts unauthenticated MsgReplicateSync messages, enabling cluster-wide data injection from any TLS-trusted peer

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterprise's cluster replication receiver at internal/cluster/replication/receiver.go validates only the wire-format envelope length, opcode of inbound messages. The MsgReplicateSync payload itself is...

CVE-2026-48106

Arc Enterprise (an open, SQL-native time-series database for telemetry) prior to version 2026.06.1 has a vulnerability in its cluster replication receiver (internal/cluster/replication/receiver.go). The MsgReplicateSync payload is accepted without any application-layer authentication — no HMAC, s...

EUVD-2026-64193

Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterprise's cluster replication receiver at internal/cluster/replication/receiver.go validates only the wire-format envelope length, opcode of inbound messages. The MsgReplicateSync payload itself is...

CVE-2026-67360

Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An authenticated user could supply another customer's orderid to copy their cart contents and address data into the attacker's session. The CSRF token was validated but...

EUVD-2026-64059

Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An authenticated user could supply another customer's orderid to copy their cart contents and address data into the attacker's session. The CSRF token was validated but...

CVE-2026-67360

J2Store (a Joomla e-commerce extension by j2commerce.com) is affected by a cross-customer order replication vulnerability in versions 1.0.0–3.3.20, 4.0.0–4.0.20, and 4.1.0–4.1.5. An authenticated user can supply another customer's order_id to copy that customer's cart contents and address data in...

CVE-2026-67360 Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5

Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An authenticated user could supply another customer's orderid to copy their cart contents and address data into the attacker's session. The CSRF token was validated but...

CVE-2026-67360 Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5

Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An authenticated user could supply another customer's orderid to copy their cart contents and address data into the attacker's session. The CSRF token was validated but...