CVE-2025-31651-o

CVE-2025-31651 Für eine Teilmenge von unwahrscheinlichen Rewrite-Regel-Konfigurationen war es möglich, dass eine speziell gestaltete Anfrage einige Rewrite-Regeln umgehen konnte. Wenn diese Rewrite-Regeln effektiv Sicherheitsbeschränkungen durchsetzten, konnten diese Beschränkungen umgangen werde...

CVE-2021-21300

CVE-2021-21300 Basta clonarmi poi la tua macchina stamperà "PWNED" rif:https://www.openwall.com/lists/oss-security/2021/03/09/3...

kcfg-bypass

kcfg-bypass Esempio di bypass kcfg - CVE-2024-21338...

CVE-2018-8420

CVE-2018-8420...

CVE-2026-42271

cve-id ⚡ Utilizzo Semplice Usa questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Contenitori Docker Setup di laboratorio isolati Ambienti di penetration testing autorizzati Esempio di configurazione: root@kitploit: git clone cd Project use python follow below...

CVE-2025-55423-analysis-and-reproduction

Questo repository non contiene un README...

CVE-2026-50507

cve-id ⚡ Uso semplice Usa questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Contenitori Docker Configurazioni di laboratorio isolate Ambienti di test di penetrazione autorizzati Configurazione di esempio: root@kitploit: git clone cd Project use python follow...

doggie_workshop

EvilDoggie Workshop Car Simulator Presentazione del Progetto Benvenuti nel repository del Simulatore di Auto per Workshop EvilDoggie! Questo strumento replica l'ambiente CAN Bus dell'auto utilizzato nella sessione Black Hat Arsenal 2025. Sviluppato da Faraday Security, il simulatore emula multipl...

CVE-2026-0745

⚠️ Ricerca sulla Sicurezza e Disclaimer Legale - CVE-2026-0745 📌 Scopo di Questo Repository Questo repository è fornito esclusivamente per scopi educativi, accademici e di ricerca autorizzata in ambito di cybersecurity. È pensato per favorire la comprensione di: Concetti di vulnerabilità di...

Trend_Micro_POC

TrendMicroPOC CVE-2018-3608...

CVE-2024-10924-Wordpress-Docker

CVE-2024-10924 : vulnerabilità di bypass dell'autenticazione di Wordpress Really Simple Security in Docker Descrizione I plugin Really Simple Security Free, Pro e Pro Multisite per WordPress, versioni da 9.0.0 a 9.1.1.1, sono interessati da una vulnerabilità di bypass dell'autenticazione. Il...

CVE-2026-20245

cve-id ⚡ Utilizzo Semplice Utilizza questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Container Docker Configurazioni di laboratorio isolate Ambienti di test di penetrazione autorizzati Configurazione di esempio: root@kitploit: git clone cd Project use python...

Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)

Microsoft Exchange Server contains a remote code execution caused by improper input validation in the server component, letting remote attackers execute arbitrary code, exploit requires network access to the server. id: CVE-2021-28480 info: name: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass...

OctoberCMS - Account Takeover

octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request. The issue has been patched in Build 472 and v1.1.5. id:...

Ruby on Rails - Open Redirect via Host Header Injection

Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers. id: CVE-2021-22881 info: name: Ru...

Cartadis Gespage 8.2.1 - Directory Traversal

Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData. id: CVE-2021-33807 info: name: Cartadis Gespage 8.2.1 - Directory Traversal author: daffainfo severity: high description: Cartadis Gespage through 8.2.1 allows Directory Traversa...

WordPress Modern Events Calendar <6.1.5 - Blind SQL Injection

WordPress Modern Events Calendar plugin before 6.1.5 is susceptible to blind SQL injection. The plugin does not sanitize and escape the time parameter before using it in a SQL statement in the mecloadsinglepage AJAX action. An attacker can possibly obtain sensitive information, modify data, and/o...

Jira - Local File Inclusion

Jira before version 7.13.4, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1, allows remote attackers to access files in the Jira webroot under the META-INF directory via local file inclusion. id: CVE-2019-8442 info: name: Jira - Local File Inclusion author:...

Roundcube Webmail - Remote Code Execution

Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the from parameter in a URL is not validated in program/actions/settings/upload.php, leading to PHP Object Deserialization. id: CVE-2025-49113 info: name: Roundcube Webmail - Remote...

ManageEngine ServiceDesk 9.3.9328 - Arbitrary File Retrieval

ManageEngine ServiceDesk 9.3.9328 is vulnerable to an arbitrary file retrieval due to improper restrictions of the pathname used in the name parameter for the download-snapshot path. An unauthenticated remote attacker can use this vulnerability to download arbitrary files. id: CVE-2017-11512 info...