Vxscan

Vxscan 2.0 Inglese | 简体中文 Strumento di scansione completo per Python3, utilizzato principalmente per il rilevamento di file sensibili scansione directory e interfacce di leak da JS, identificazione WAF/CDN, scansione porte, identificazione impronte digitali/servizi, identificazione sistema...

CVE-2025-25062

CVE-2025-25062 Beschreibung Verwendung Beispiel Zeitleiste Beschreibung Im Backdrop CMS 1.29.2 besteht auf der Beitragsbearbeitungsseite eine Schwachstelle für gespeichertes Cross-Site-Scripting XSS. Dieses Skript verkettet die Schwachstelle mit einem CSRF-Payload, um eine Privilegienausweitung v...

CVE-2021-3156

CVE-2021-3156 https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt https://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit https://access.redhat.com/security/vulnerabilities/RHSB-2021-002...

CVE-2024-10511

CVE-2024-10511 CWE-287: Autenticazione impropria Sommario Il prodotto Schneider Electric PowerChute Serial Shutdown è un software di gestione UPS che consente lo spegnimento ordinato del sistema e funzionalità di gestione dell'energia per desktop, server e workstation. PowerChute Serial Shutdown...

Openbsd-Privilege-Escalation

Openbsd-Privilege-Escalation Ein Skript, das den Prozess der Rechteausweitung auf OpenBSD-Systemen automatisiert CVE-2019-19520, indem es das xlock-Binary ausnutzt und dessen sgid erlangt und dann zum Root-Benutzer eskaliert CVE-2019-19522 durch Ausnutzung der Privilegien der auth-Gruppe und...

CVE-2014-4322_poc

CVE-2014-4322poc كود الـ poc يعمل على Nexus Android 4.4/5.0 اكتساب صلاحيات: system - root، كجزء من https://github.com/retme7/CVE-2014-7911poc المؤلف: retme [email protected] @returnsme على تويتر و @retme على ويبو الموقع: retme.net يجب تنفيذ الإكسبلويت بصلاحيات النظام وسياق SELinux محدد. إذا...

CVE-2026-8023

CVE-2026-8023 — اجتياز المسار في HTTP static-fs في Zephyr PoC اجتياز المسار قبل المصادقة في معالج static-fs لخادم HTTP في Zephyr subsys/net/lib/http عند استخدام مطابقة الموارد باستخدام حرف البدل CONFIGHTTPSERVERRESOURCEWILDCARD=y مع HTTPRESOURCETYPESTATICFS. يؤثر على كلٍّ من HTTP/1.1 و HTTP/2...

CVE-2026-53580

Trilium is an open-source hierarchical note-taking application affected in versions prior to 0.104.0 . The automatic image-download feature accepts file:// URLs in tags within text notes and performs a filesystem read with no path validation . Because the HTML sanitizer allows the file scheme, a...

EUVD-2026-67229

Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the automatic image-download feature accepts file:// URLs in a note's img tags and reads the referenced local file with no path validation, allowing any authenticated user to disclose arbitrary files...

CVE-2026-53580 Trilium arbitrary file read and denial of service via file:// URLs in the automatic image-download feature

Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the automatic image-download feature accepts file:// URLs in a note's img tags and reads the referenced local file with no path validation, allowing any authenticated user to disclose arbitrary files...

CVE-2026-24135

CVE-2026-24135: Eliminazione arbitraria di file in Gogs tramite path traversal nel Wiki Gravità: Alta CVSS 7.5 Software interessato: Gogs Corretto in: 0.13.4, 0.14.0+dev Avviso: GHSA-jp7c-wj6q-3qf2 Patch: gogs/gogs8099 Riepilogo Durante un audit di sicurezza di Gogs un popolare servizio Git...

CVE-2026-50751-Mitigation-Scripts

CVE-2026-50751-Mitigation-Scripts Es gibt mehrere Sicherungsmaßnahmen, die Sie aus der SK verwenden können; https://support.checkpoint.com/results/sk/sk185033 1. Deaktivieren Sie die Unterstützung für Legacy-Clients. 2. Konfigurieren Sie den Remotezugriff so, dass nur IKE v2 verwendet wird. Es gi...

CVE-2026-81833

Roo-Code (RooCodeInc) up to version 3.51.1 is affected by a code injection vulnerability in the optimizeQuery function within src/utils/helpers.ts of the CodeIndexManager component. Manipulation of this function allows remote code injection with low impact on confidentiality, integrity, and avail...

CVE-2026-81833 RooCodeInc Roo-Code CodeIndexManager helpers.ts optimizeQuery code injection

A security flaw has been discovered in RooCodeInc Roo-Code up to 3.51.1. Affected by this vulnerability is the function optimizeQuery of the file src/utils/helpers.ts of the component CodeIndexManager. Performing a manipulation results in code injection. Remote exploitation of the attack is...

EUVD-2026-67228

A security flaw has been discovered in RooCodeInc Roo-Code up to 3.51.1. Affected by this vulnerability is the function optimizeQuery of the file src/utils/helpers.ts of the component CodeIndexManager. Performing a manipulation results in code injection. Remote exploitation of the attack is...

CVE-2026-7473---Arista-EOS-Tunnel-Decapsulation-Bypass

CVE-2026-7473 - Arista EOS Tunnel Decapsulation Bypass ⚠️ AVVERTENZA Questo codice è SOLO a scopo educativo e per test di sicurezza autorizzati. 📋 Descrizione CVE-2026-7473 è una vulnerabilità in Arista EOS in cui uno switch configurato come punto di terminazione di tunnel VXLAN, GRE, decap-groups...

security-portfolio-chris-peterson

security-portfolio-chris-peterson Il mio portfolio che presenta ricerca sulle vulnerabilità CVE-2026-11989, CVE-2026-11395 e ingegneria dell'orchestrazione automatizzata delle minacce Lucius Engine, TalonVigil...

osintnet-public

OsintNET ist eine browserbasierte OSINT-Plattform für Domain-Intelligence, Website-Risiko-Scans, SERP-Ermittlung, E-Mail- und Username-OSINT, Bild-Intelligence, Bildauthentizitätsprüfungen und KI-Bilderkennung. Webseite · OSINT-Tools · Beste OSINT-Tools · KI-OSINT-Tools · llms.txt · KI-Prompt-Map...

CVE-2024-3094

CVE-2024-3094 Bösartiger Code wurde in den Upstream-Tarballs von xz entdeckt, beginnend mit Version 5.6.0. Durch eine Reihe komplexer Verschleierungen extrahiert der liblzma-Buildprozess eine vorgefertigte Objektdatei aus einer getarnten Testdatei im Quellcode, die dann verwendet wird, um bestimm...

Security Bulletin:IBM SPSS Analytic Server is affected by an Eclipse Vert.x vulnerability that could expose credentials through cross-origin HTTP redirects

Summary IBM SPSS Analytic Server is affected by an Eclipse Vert.x vulnerability that could expose credentials through cross-origin HTTP redirects. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-15075 DESCRIPTION: In Eclipse Vert.x versions up to and...