CVE-2026-21509-PoC

CVE-2026-21509 — Pädagogischer Dummy-PoC für Defender-Sichtbarkeit ⚠️ Dieses Repository stellt einen harmlosen, nicht-exploitativen Proof of Concept bereit. Sein Zweck ist die Unterstützung von defensiver Forschung , EDR/AV-Sichtbarkeitstests und Schulungen. Es exploitiert CVE‑2026‑21509 nicht und...

CVE-2021-4034

CVE-2021-4034...

CQPToolkit

CQP Tool kit Il sistema fornisce vari componenti per integrare QKD in un sistema di sicurezza. È scritto in C++11 ma utilizza interfacce GRPC che permettono l'integrazione con molti linguaggi diversi. Avvio Rapido Per eseguire il software in modo nativo, è possibile: scaricare e installare i...

AtomShields-cli

AtomShields Cli AtomShields Cli è un'interfaccia a riga di comando per utilizzare il software AtomShields .. raw:: html Installazione .. code-block:: shell pip install atomshieldscli Utilizzo base .. code-block:: shell ascli --target --name I valori consentiti per action sono: install : Per...

CVE-2026-25857

https://nvd.nist.gov/vuln/detail/CVE-2026-25857...

EUVD-2026-66977

In versions of Spring Security's OAuth2 Authorization Server module 7.0.0 through 7.0.4, when Dynamic Client Registration is explicitly enabled, the registration endpoint performs insufficient validation of certain client metadata fields supplied by the registering client. An attacker who possess...

next-16.2.4-pocs

Raccolta di PoC di Sicurezza per Next.js v16.2.4 Questo repository raccoglie materiale proof-of-concept ricostruito tramite reverse engineering per i problemi di sicurezza corretti in Next.js v16.2.5. La radice del repository contiene l'analisi della finestra di rilascio, e poc/ contiene un bundl...

ghost-checker

ghost-checker اختبر ما إذا كنت معرضًا لثغرة ghost CVE-2015-0235. كل الفضل يعود لفريق Qualys للأمان الاستخدام root@kitploit: /tmp/ghost-checker master$ make cc -o ghost ghost.c /tmp/ghost-checker master$ ./ghost not vulnerable /tmp/ghost-checker master$ make clean rm ghost الشكر فريق أمان Qualys...

CVE-2026-25924

CVE-2026-25924 PoC - RCE amministrativa in Kanboard Proof-of-Concept per RCE amministrativa tramite bypass dei controlli di sicurezza Divulgazione: Segnalata originariamente da me tramite GHSA-grch-p7vf-vc4f ⚠️ Solo per test di penetrazione/ricerca autorizzati. Informazioni sulla vulnerabilità...

middleforce

MiddleForce 🔍 Panoramica MiddleForce è uno strumento specializzato per test di sicurezza progettato per rilevare e sfruttare la vulnerabilità CVE-2025-29927 nel middleware di Next.js. Questo strumento aiuta i professionisti della sicurezza a identificare applicazioni vulnerabili ad attacchi di...

some-tweak-to-hide-jwt-payload-values

some-tweak-to-hide-jwt-payload-values a handful of tweaks and ideas to safeguard the JWT payload, making it futile to attempt decoding by constantly altering its value, ensuring the decoded output remains unintelligible while imposing minimal performance overhead. What is a JWT Token? A JSON Web...

CVE-2026-59270

Spring Security's embedded UnboundID LDAP server UnboundIdContainer unconditionally registers an administrative credential and binds its listener to all available network interfaces. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18...

CVE-2026-47877

Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6...

CVE-2026-19225

The Defender Security WordPress plugin before 6.2.0 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...

WSASS

WSASS Questo è uno strumento che utilizza il vecchio programma WerfaultSecure.exe per eseguire il dump della memoria dei processi protetti da PPL Protected Process Light, come LSASS.EXE. L'output è in formato Windows MINIDUMP. Questo strumento sostituisce automaticamente l'intestazione magica"MDM...

RLSA-2026:59821 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: sctp: purge outqueue on stale COOKIE-ECHO handling CVE-2026-52924 kernel: scsi: target: iscsi: Validate CHAPR length before base64 decode CVE-2026-63886 kernel: netfilter: conntrack: tcp:...

EUVD-2026-66874

The Defender Security WordPress plugin before 6.2.0 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...

WordPress Defender Security plugin < 6.2.0 - Admin+ Network-Wide RCE vulnerability

Admin+ Network-Wide RCE vulnerability discovered by Jakub Herman in WordPress Plugin Defender Security versions 6.2.0...

CVE-2026-19225

Defender Security WordPress plugin versions before 6.2.0 fail to restrict a network-wide setting (via the Hub Connector ) to network administrators on multisite installations. As a result, an administrator of any single site in the network can execute arbitrary code across the entire network . Th...

CVE-2026-19225 Defender Security < 6.2.0 - Admin+ Network-Wide RCE via Hub Connector on Multisite

The Defender Security WordPress plugin before 6.2.0 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...