misp-extractor

MISP Extractor This code connects to a given MISP Malware Information Sharing Platform server and parses a given number of events, writing the IP addresses, URLs, and MD5 hashes found in the events to three separate files. Usage To use this script, you will need to provide the URL of your MISP...

https-github.com-xaitax-CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 | Proof-of-Concept für die Microsoft Outlook Remote Code Execution-Schwachstelle 📜 Beschreibung Dieses Skript präsentiert einen Proof-of-Concept PoC für CVE-2024-21413, eine bedeutende Sicherheitsschwachstelle, die in Microsoft Outlook entdeckt wurde und einen CVSS-Wert von 9,8...

CVE-2026-6128

The All-in-One WP Migration Unlimited Extension WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) via the ai1wm_backups_path parameter in all versions up to and including 2.84 . The root cause is insufficient input sanitization and output escaping on user-supplied attributes, co...

EUVD-2026-67648

The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ai1wmbackupspath' parameter in all versions up to, and including, 2.84. This is due to insufficient input sanitization and output escaping on user-supplied attributes combine...

CVE-2026-6128 All-in-One WP Migration Unlimited Extension <= 2.84 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ai1wm_backups_path' Parameter

The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ai1wmbackupspath' parameter in all versions up to, and including, 2.84. This is due to insufficient input sanitization and output escaping on user-supplied attributes combine...

WordPress wpForo Forum plugin <= 2.4.17 - Unauthenticated SQL Injection via 'referer' Parameter vulnerability

Unauthenticated SQL Injection via 'referer' Parameter vulnerability discovered by Leonid Semenenko lsemenenko in WordPress Plugin wpForo Forum versions = 2.4.17...

WordPress ElementsKit Pro plugin <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting via 's' Parameter vulnerability discovered by Ren Voza in WordPress Plugin ElementsKit Pro versions = 4.10.1...

WordPress One User Avatar | User Profile Picture plugin <= 2.5.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wpua-file Parameter vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting via wpua-file Parameter vulnerability discovered by Dthangws - PTIT in WordPress Plugin One User Avatar versions = 2.5.4...

CVE-2023-3460

CVE-2023-3460 - Nicht autorisierter Admin-Zugriff für Ultimate Member Plugin POC CVSS-Score: 9.1 Datum: 07.04.2023 Was ist das Ultimate Member Plugin? Das Ultimate Member Plugin ist ein beliebtes Mitgliedschafts-Plugin zur Registrierung von Benutzern. Das Plugin hat über 200.000 aktive...

WordPress Optimole plugin <= 4.2.10 - Unauthenticated Stored Cross-Site Scripting via 'a' (above_fold_images) Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting via 'a' abovefoldimages Parameter vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os - krei.dev | ogbuilders.io in WordPress Plugin Optimole versions = 4.2.10...

CVE-2019-20933

LAB 5-CVE-2019-20933 I. SYSTEMANALYSE Angriffsfläche identifizieren Beginnend mit dem, was in der Umgebung läuft. Ich liste alle aktiven Container auf: root@kitploit: docker ps Das Opfer gibt einen einzelnen Port frei:8086. Derzeit habe ich keine detaillierten Informationen über das Ziel. Aus der...

Log4Shell-CVE-2021-44228

Ausnutzung von Log4Shell CVE-2021-44228: Ein vollständiges, modernes Demonstrationslabor Log4Shell CVE-2021-44228 ist eine der folgenreichsten Schwachstellen zur Remote-Code-Ausführung, die je offengelegt wurde. Sie betrifft Apache Log4j 2 , ein weit verbreitetes Java-Logging-Framework, und...

CVE-2026-80717 sctp: validate Adaptation Indication parameter length

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...

CVE-2026-80717 sctp: validate Adaptation Indication parameter length

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...

EUVD-2026-67452

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...

CVE-2026-80717

CVE-2026-80717 is an information disclosure vulnerability in the Linux kernel SCTP subsystem. The root cause is that sctp_verify_param() accepts a header-only Adaptation Layer Indication parameter because the generic parameter walker only checks for header presence. sctp_process_param() then read...

CVE-2026-80717

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter length The Adaptation Layer Indication parameter contains a fixed 32-bit Adaptation Code Point after its parameter header. However, sctpverifyparam accepts a header-only parameter...

EUVD-2026-67443

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix missing mem scrub at clear key import in ccaclr2cipherkey The helper function ipcprbhelper uses internal buffer memory for building and processing CPRBs. After use this buffer was never scrubbed which could lead ...

CVE-2026-80708

This Linux kernel vulnerability affects the s390/zcrypt subsystem, specifically the cca_clr2cipherkey() function used during clear key to secure key token import. The root cause is that the internal helper _ip_cprb_helper() used internal buffer memory for building and processing CPRBs but never s...

CVE-2026-80708

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix missing mem scrub at clear key import in ccaclr2cipherkey The helper function ipcprbhelper uses internal buffer memory for building and processing CPRBs. After use this buffer was never scrubbed which could lead ...