CVE-2019-1253

CVE-2019-1253 PoC originale inviato a MSRC. Questo problema è stato corretto con l'aggiornamento regolare di settembre 2019 "martedì". Assegnato a CVE-2019-1253 - Windows Elevation of Privilege Vulnerability. https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-1253 Ci sono...

DEBIAN-CVE-2026-82417

Summary qs.stringify throws a TypeError when it serializes an object whose own constructor property has a truthy, non-callable isBuffer member. utils.isBuffer duck-types buffers by calling obj.constructor.isBufferobj after checking only that the property is truthy, so a value such as constructor:...

CVE-2026-82417

Summary qs.stringify throws a TypeError when it serializes an object whose own constructor property has a truthy, non-callable isBuffer member. utils.isBuffer duck-types buffers by calling obj.constructor.isBufferobj after checking only that the property is truthy, so a value such as constructor:...

BEAST-PoC

BEAST-PoC attacco a testo scelto Questa prova di concetto è incentrata sulla crittografia alla base dell'attacco BEAST Browser Exploit Against SSL/TLS presentato da Thai Duong e Juliano Rizzo il 23 settembre 2011. Si tratta di un attacco a testo scelto e consente di recuperare informazioni...

kamene

kamene precedentemente noto come "scapy for python3" o scapy3k Generale Segui @pktkamene per le ultime novità. Documentazione originale aggiornata per kamene Novità Abbiamo attraversato una transizione di denominazione del repository github, del nome del pacchetto pip e del nome del pacchetto...

juniper-cve-2015-7755

Juniper CVE-2015-7755 & CVE-2015-7756 Questo repository contiene note, binari e informazioni correlate emerse dall'analisi dei problemi CVE-2015-7755 e CVE-2015-7756 all'interno di Juniper ScreenOS. Per maggiori informazioni su questi problemi, consulta gli URL seguenti:...

crackerjack

!CAUTION Questo repository non è mantenuto, visita https://github.com/sadreck/crackerjack per l'ultima versione. CrackerJack Interfaccia Web per Hashcat di Context Information Security Indice Introduzione Architettura Caratteristiche Limitazioni Installazione Risoluzione dei problemi Screenshot...

nf-tables-lpe

nf-tables-lpe Exploit di Team Orca di Sea Security e Qrious Secure per molteplici vulnerabilità nel modulo nftable di Netfilter...

openapi_security_scanner

OpenAPI Security Scanner Über das Projekt Autorisierungssicherheitslücken in modernen Webanwendungen können von Sicherheitsscannern nicht einfach erkannt werden. Einige Beispiele von Shopify, LINE, NordVPN. Einer der Gründe ist, dass Sicherheitsscanner hauptsächlich nach SQLi, XSS, RCE suchen,...

Rails-doubletap-RCE

Rails-doubletap-exploit RCE su Rails 5.2.2 usando un path traversal CVE-2019-5418 e una deserializzazione di oggetti Ruby CVE-2019-5420 Analisi Tecnica : CVE-2019-5418 - https://github.com/mpgn/CVE-2019-5418 CVE-2019-5420 - https://hackerone.com/reports/473888 Avviso di Sicurezza : CVE-2019-5418 ...

PT-2026-83569

WWBN AVideo contains an unauthenticated credential submission vulnerability in plugin/Live/api/preauthorize.json.php that accepts credentials over GET without rate limiting. Attackers can submit correct credentials repeatedly to trigger uncapped two-factor confirmation emails and perform sustaine...

PT-2026-83505

Cleartext Storage of Sensitive Information vulnerability in ash-project ash paper trail allows an attacker with read access to the generated version resource to recover sensitive values nested inside embedded resources, unions, or lists. sensitive attributes :redact and :ignore only act on the...

PT-2026-83528

The Really Simple Security WordPress plugin before 9.8.0 does not check that the user is allowed to install Really Simple Security WordPress plugin before 9.8.0 before installing one from a user-supplied URL, allowing an administrator of a subsite on a multisite network to install and execute...

PT-2026-83546

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash sql allows a user who supplies a search term to contains/2, string starts with/2, or string ends with/2 to inject live SQL LIKE wildcards, turning a literal substring search into an attacker-controlle...

PT-2026-83549

Incorrect Authorization vulnerability in ash-project ash sql allows a caller in a schema-based multitenant application to receive aggregate values computed from another tenant's rows. When an aggregate is computed over a distinct query, AshSql.AggregateQuery.add single aggs/5 rebuilds the outer...

PT-2026-83550

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/sup edit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...

PT-2026-83548

Incorrect Authorization vulnerability in ash-project ash sql allows a caller to receive an aggregate value computed over rows a more restrictive filter should have excluded, disclosing counts, sums, or lists across an authorization or tenancy boundary. AshSql.Aggregate.different queries?/2 report...

PT-2026-83563

Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized with DOMPurify using a configuration that forbade only the tag FORBID TAGS: 'script' in apps/readest-app/src/services/transformers/sanitizer.ts. DOMPurify does not parse the conten...

Security update for mozjs102 (moderate)

openSUSE Security Update: Security update for mozjs102 Announcement ID: openSUSE-SU-2026:0315-1 Rating: moderate References: 1259713 1259728 1259731 Cross-References: CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 CVSS scores: CVE-2026-32776 SUSE: 8.7...

Security update for v2ray-core (important)

openSUSE Security Update: Security update for v2ray-core Announcement ID: openSUSE-SU-2026:0307-1 Rating: important References: 1258546 1266787 1276119 Cross-References: CVE-2026-27017 CVE-2026-39821 CVE-2026-72815 CVE-2026-72816 CVE-2026-72817 CVSS scores: CVE-2026-39821 SUSE: 9.1...