snmpwn

SNMPwn is an SNMPv3 user enumerator and attack tool. It is a legitimate security tool designed to be used by security professionals and penetration testers against hosts you have permission to test. It takes advantage of the fact that SNMPv3 systems will respond with "Unknown user name" when an...

aiiroverlay

Perché un overlay, non una sostituzione. La tesi. Parte del framework AI IR Overlay™. VediCONTENTMAP.md per la mappa completa del repository. The AI IR Overlay: Panoramica del Framework Versione attuale: v0.35.0 · 2026-07-09 · CHANGELOG Una baseline pratica di incident response per agenti AI in...

CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH...

CVE-2017-9841

🔍 Funktionen Multithread-Scanning für effizientes Testen mehrerer Ziele Intelligente Payload-Erzeugung mit eindeutigen Identifikatoren zur exakten Validierung Überprüfung mehrerer Schwachstellenpfade in gängigen Webanwendungsstrukturen Automatische Antwortvalidierung zur Bestätigung tatsächlicher...

Microsoft-Defender-for-Endpoint-Deployment-on-Windows-10-11-device

Dieses Repository dokumentiert die Bereitstellung von Microsoft Defender for Endpoint auf einem Windows 11-Gerät, einschließlich des Onboardings per lokalem Skript, der Aktivierung der Geräteerkennung, der Konfiguration der Log4j2-Erkennung CVE-2021-44228 und der Validierung von...

CVE-2023-3519

CVE-2023-3519 Scanner para NetScaler Citrix ADC CVE-2023-3519 Um scanner simples para encontrar netscalers e verificar a data da última modificação no cabeçalho da resposta HTTP Este projeto é um scanner feito por mim em C usando o código-fonte de mrr3b00t em powershell...

CVE-2023-20198

CVE-2023-20198 Verificador para CVE-2023-20198, não é um POC completo, apenas verifica a implementação e detecta se hex está na resposta ou não...

CVE-2026-42392

An attacker that has valid credentials can send an invalid IMAP URLFETCH command, which causes uninitialized memory to be included in the error response returned to the client. Process memory contents can be disclosed to the client, which may include sensitive data. Disable the IMAP URLAUTH...

EUVD-2026-67669

When IMAP compression is enabled, the same compression state is reused across responses in a session, so response sizes depend on both attacker-supplied mail and other mail in the same mailbox. An attacker that can send mail to a user and can also observe the sizes of that user's IMAP traffic can...

CVE-2026-40203

CVE-2026-40203 affects Open-Xchange Dovecot when IMAP compression is enabled. The root cause is that the same compression state is reused across responses in a session, causing response sizes to depend on both attacker-supplied mail and other mail in the same mailbox. An attacker who can send mai...

CVE-2022-37177

CVE-2022-37177 - HireVue-Broken-Or-Risky-Cryptographic-Algorithm Quando si visita il link di invito al colloquio che HireVue fornisce per un colloquio, si viene indirizzati a una pagina con i termini, in cui si accettano i termini prima di iniziare il processo di colloquio registrato e a tempo...

CVE-2025-46047

CVE-2025-46047 Silverpeas = 6.4.2 Benutzernamen-Enumeration – PoC Proof-of-Concept-Skript zur Demonstration einer Benutzernamen-Enumeration-Schwachstelle in Silverpeas Versionen 6.4.1 und 6.4.2. Details zur Schwachstelle Betroffene Software: Silverpeas Betroffene Versionen: 6.4.1, 6.4.2 und...

HW-Pyton-10

CVE-2020-11022 Breve descrizione CVE-2020-11022 — una vulnerabilità di tipo Reflected XSS cross-site scripting legata a una gestione non corretta dell'input utente, che viene riflesso nella risposta HTML senza escaping. Un attaccante può iniettare codice JavaScript che verrà eseguito nel browser...

CVE-2026-80635

In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix OOB read from short trigger BA firmware response The firmware response length is only checked against sizeofrsp 20 bytes, but when candidatecnt = 1, a 22-byte candidate struct is read at buf + 20 without...

subzy

Subzy Strumento per il subdomain takeover che funziona basandosi sul confronto delle impronte delle risposte provenienti da can-i-take-over-xyz Installazione root@kitploit: go install -v github.com/PentestPad/subzy@latest Se $GOBIN e $GOPATH sono impostati correttamente, esegui il programma come:...

PoC-CVE-2000-0649

PoC-CVE-2000-0649 Un piccolo strumento per creare un PoC per CVE-2000-0649. Utilizzo Questo script verifica se il server è vulnerabile a CVE-2000-0649. Tieni presente di provare con HTTP, HTTPS e percorsi diversi. Nella mia esperienza, la divulgazione avviene principalmente quando ci si connette...

JavaDeRe

Introduzione al progetto Utilizzato principalmente per codificare in base64 la classe durante la costruzione di payload di echo per la deserializzazione Java e, in situazioni di emergenza, per decodificare stringhe base64 e ripristinare il file class, consentendo di esaminare il payload...

CVE-2026-80635

CVE-2026-80635 is an out-of-bounds read vulnerability in the wcn36xx Wi-Fi driver of the Linux kernel. When processing a trigger BA (Block Acknowledgment) firmware response, the code checks the response length only against the base struct size (20 bytes). However, when candidate_cnt >= 1, a 22...

EUVD-2026-67511

In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix OOB read from short trigger BA firmware response The firmware response length is only checked against sizeofrsp 20 bytes, but when candidatecnt = 1, a 22-byte candidate struct is read at buf + 20 without...

CVE-2026-80635

In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix OOB read from short trigger BA firmware response The firmware response length is only checked against sizeofrsp 20 bytes, but when candidatecnt = 1, a 22-byte candidate struct is read at buf + 20 without...