CVE-2025-6860

CVE-2025-6860 Exploit-Tool Ein Proof-of-Concept-Kommandozeilenwerkzeug in C zum Erkennen und rudimentären Ausnutzen der SQL-Injection-Schwachstelle CVE‑2025‑6860 in staffcommision.php Parameter fromdate und todate. Nutzt libcurl für HTTP-Anfragen, wechselt durch gängige Payloads und User-Agents,...

CVE-2025-10046

CVE-2025-10046 - ELEX WooCommerce Google Shopping Autor: Byte Reaper Beschreibung CVE-2025-10046 ist eine SQL-Injection-Schwachstelle im ELEX WooCommerce Google Shopping Product Feed Plugin für WordPress, Version 1.4.3 und früher. Das Problem befindet sich in der Datei...

asf__cxf_CVE-2016-6812_3-0-11

toolchain-integration-tests jdk-cxf-with-toolchain Currently disabled due to https://issues.apache.org/jira/browse/CXF-7714 This project contains sample maven module using cxf-codegen-plugin to generate java from WSDL file. it enforces usage of JDK 1.9 or higher to run the mvn command it configur...

zarp

Introduzione Zarp è uno strumento di attacco di rete incentrato sullo sfruttamento delle reti locali. Questo non include lo sfruttamento dei sistemi, ma piuttosto l'abuso dei protocolli e degli stack di rete per prendere il controllo, infiltrarsi e mettere fuori uso. Le sessioni possono essere...

Security Bulletin: Security Vulnerability in Spring MVC affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2024-38828)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Spring MVC Vulnerability Details CVEID:CVE-2024-38828 DESCRIPTION: Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack. CWE:CWE-400: Uncontroll...

creep-web-app-scanner

creep-web-app-scanner Uno scanner per siti web molto primitivo attualmente in sviluppo da un dipendente di NCC Group, laureato universitario, con il 20% di tempo dedicato alla ricerca. creep attualmente esegue il crawling di un sito e cerca informazioni potenzialmente interessanti all'interno di...

dotnetpaddingoracle

dotnetpaddingoracle Piccolo script per verificare se l'applicazione web .NET è vulnerabile al padding Oracle Questo script verifica effettivamente se l'oracolo è presente e sfruttabile, non solo se la patch è stata installata. Uso root@kitploit: dotnetpaddingoracle.py -h -t -b -d -s -p PARAMETER...

Extractor

Istruzioni di installazione per chi non vuole compilare da sé: 1. Scarica la libreria GSON di Google da Maven http://central.maven.org/maven2/com/google/code/gson/gson/2.8.2/gson-2.8.2.jar wget http://central.maven.org/maven2/com/google/code/gson/gson/2.8.2/gson-2.8.2.jar 2. Nella scheda...

fips203

NCC Group: FIPS 203 Standard für modul-gitterbasierte Schlüsselverkapselungsmechanismen Der FIPS 203 Erster öffentlicher Entwurf ist ein Standard für modul-gitterbasierte Schlüsselverkapselungsmechanismen, geschrieben in reinem Rust für Server-, Desktop-, Browser- und eingebettete Anwendungen. Da...

readable-thrift

Readable Thrift Readable Thrift erleichtert die Arbeit mit binären Thrift-Protokollnachrichten, indem es sie in ein für Menschen gut lesbares Format umwandelt und zurück. Dadurch wird die manuelle Analyse und Manipulation von Thrift-Nachrichten im Binärformat genauso einfach wie die Arbeit mit...

test_avb_key

Sul quasi firmare i build Android Introduzione Un errore che i consulenti di NCC Group incontrano talvolta è firmare i build Android con chiavi private note. Questo rende vulnerabili i produttori di dispositivi e di conseguenza i loro utenti, anche su dispositivi in cui è abilitato il secure boot...

WindowsJobLock

Windows-Prozess-Lockdown unter Verwendung von Job Objects Ein Microsoft-Windows-Prozess-Lockdown-Tool unter Verwendung von Job Objects Als Open Source veröffentlicht von NCC Group Plc - http://www.nccgroup.com/ Entwickelt von Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com...

cabir_analysis

description: Bluetooth-Wurm:SymbOS/Cabir-Analyse Bluetooth-Wurm:SymbOS/Cabir-Analyse Bevor du mit dem Lesen beginnst, muss ich diese Ankündigung machen: BITTE NIMM ALLES, WAS DU LIEST, MIT VORSICHT, DA ICH KEINESWEGS EIN SymbianOS-ENTWICKLER ODER IRGENDWIE MIT DER SymbianOS-UMGEBUNG VERTRAUT BIN...

CVE-2026-76060 OS Command Injection in PayRange API

An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality. The exportFile HTTP request parameter is passed unsanitized into a shell command executed via PHP's exec, allowing any authenticated user with View Events permission to execute arbitrary operati...

CVE-2026-76060 OS Command Injection in PayRange API

An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality. The exportFile HTTP request parameter is passed unsanitized into a shell command executed via PHP's exec, allowing any authenticated user with View Events permission to execute arbitrary operati...

EUVD-2026-67311

An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality. The exportFile HTTP request parameter is passed unsanitized into a shell command executed via PHP's exec, allowing any authenticated user with View Events permission to execute arbitrary operati...

CVE-2026-76060

An authenticated OS command injection vulnerability in ZoneMinder's event export functionality allows any user with View Events permission to execute arbitrary commands on the server. The exportFile HTTP parameter is passed unsanitized into a shell command executed via PHP's exec() , enabling ful...

CVE-2026-76060 OS Command Injection in PayRange API

An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality. The exportFile HTTP request parameter is passed unsanitized into a shell command executed via PHP's exec, allowing any authenticated user with View Events permission to execute arbitrary operati...

XPKeygen

XPKeygen Windows XP / Windows Server 2003 VLK कुंजी जनरेटर। यह टूल आपको रॉ प्रोडक्ट कुंजी के आधार पर मान्य Windows XP कुंजियाँ उत्पन्न करने की सुविधा देता है, जो यादृच्छिक हो सकती है। रॉ प्रोडक्ट कुंजी RPK 9 अंकों XXX-YYYYYY के रूप में दी जाती है और यह केवल Windows XP कुंजी उत्पन्न करने के लिए...

CVE-2026-54713

CakePHP Queue is a queue-interop compatible queueing library. From 0.1.11 until 2.3.1, QueueManager::getUniqueId generates identifiers for jobs with shouldBeUnique enabled from the job class, method, and parameters, but sorting parameter values drops associative-array keys. An unauthenticated...