CVE-2025-66478-Exploit-PoC

CVE-2025-66478 Exploit PoC Questo repository contiene il codice proof of concept PoC per la riproduzione e la ricerca della vulnerabilità Next.js CVE-2025-66478. Include un'applicazione Next.js vulnerabile e uno script di exploit in Node.js per testare la vulnerabilità. English · 中文 Cos'è...

CVE-2025-32433-PoC-Analysis

FAQ - CVE-2025-32433 1. Che cos'è Erlang OTP? Erlang è un linguaggio di programmazione generico. OTP Open Telecom Platform è una raccolta di middleware, librerie e principi di progettazione utilizzati per la tolleranza ai guasti tramite la BEAM VPN. 2. Perché questa versione di Erlang è...

CVE-2026-73566 vulnerabilities

Vulnerabilities for packages: renovate, prism, saf, sqlpad, kubeflow-centraldashboard, npm, pulumi, code-server, lerna, opensearch-dashboards, node-gyp...

MouseServer-1.7.8.5-RCE

WiFi Mouse Server 1.7.8.5 - RCE Um exploit de Prova de Conceito PoC otimizado em Python 3 para WiFi Mouse Server v1.7.8.5. Este script aproveita uma vulnerabilidade inerente do protocolo para obter Execução Remota de Código RCE por meio de injeção automatizada de teclas. Esta versão foi...

westone-CVE-2021-21972-scanner

westone-CVE-2021-21972-scanner Vulnerabilidade de execução remota de código no VMware vCenter Server. Um invasor malicioso com acesso à porta 443 pode enviar uma requisição cuidadosamente construída ao vCenter Server, o que eventualmente causará execução remota arbitrária de código. Instalação e...

MSSQL-Analysis-Coerce

MSSQL Analysis Services - Autenticazione forzata Una tecnica per forzare un SQL Server Windows ad autenticarsi su una macchina arbitraria. Questa proof of concept è co-scritta da: Podalirius: Worty: Prova di concetto Per innescare l'autenticazione come account della macchina locale, dobbiamo...

CVE-2026-75866

Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them. Punk::OAuth2::Server::Store registers scopes and granttypes per client and documents both as client registration. token dispatches...

CVE-2026-63311

NLTK before 3.10.0 affected versions = 3.9.4 contains a server-side request forgery SSRF vulnerability in the validatenetworkurl function in nltk/pathsec.py. The resolvehostname helper catches OSError and ValueError during socket.getaddrinfo and returns an empty list; when DNS resolution fails, t...

EUVD-2026-64293

Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them. Punk::OAuth2::Server::Store registers scopes and granttypes per client and documents both as client registration. token dispatches...

CVE-2026-75866 Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them

Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them. Punk::OAuth2::Server::Store registers scopes and granttypes per client and documents both as client registration. token dispatches...

CVE-2026-75866

Punk::OAuth2::Server for Perl (versions through 0.03 ) issues access tokens outside a client's registered scopes and grant types because no authorization path validates them against the client registration. Specifically, the token endpoint dispatches on the grant_type from the request body withou...

R2SAE

R2SAE - React2Shell Auto-Exploit Eine Firefox-Erweiterung zur Erkennung und Ausnutzung von CVE-2025-55182 Prototype-Pollution-Schwachstelle in React Server Actions Funktionen • Installation • Verwendung • Haftungsausschluss ⚠️ Haftungsausschluss Dieses Tool ist ausschließlich für autorisierte...

My-Presentation-Slides

Le Mie Slide di Presentazione Le slide delle presentazioni pubbliche di Orange Tsai. Puoi trovarmi su: Blog: https://blog.orange.tw/ Email: [email protected] Twitter: @orange8361 2024 WorstFit: Svelare i Transformer nascosti in Windows ANSI! Black Hat Europe DEVCORE CONF 2025 Confusion...

JuicyPotatoNG

JuicyPotatoNG Solo un'altra escalation di privilegi locali di Windows da account di servizio a System. Dettagli completi su -- https://decoder.cloud/2022/09/21/giving-juicypotato-a-second-chance-juicypotatong/ Utilizzo root@kitploit: JuicyPotatoNG by decoderit & splintercode Mandatory args: -t...

SQLRecon

SQLRecon SQLRecon एक Microsoft SQL Server टूलकिट है जिसे आक्रामक टोही और पोस्ट-एक्सप्लॉइटेशन के लिए डिज़ाइन किया गया है। प्रत्येक तकनीक का उपयोग कैसे करें, इसके बारे में विस्तृत जानकारी के लिए विकि देखें। आप SQLRecon की एक प्रति रिलीज़ पृष्ठ से डाउनलोड कर सकते हैं। वैकल्पिक रूप से, आप सोल्यूशन को...

XSLeaker

XSLeaker XSLeaker é uma ferramenta que ajuda a encontrar XS-Leaks em websites. A ferramenta compara valores de recursos para os quais uma técnica de vazamento é conhecida ex.: número de iframes entre diferentes estados. XSLeaker consiste em dois componentes: uma extensão do Chrome que é usada par...

CVE-2026-77002

The SmilePass Selfie Login WordPress plugin through version 1.0.2 lacks any server-side verification of the identity it is asked to authenticate. This allows unauthenticated users to log in as any registered account, including administrators , resulting in full compromise of confidentiality, inte...

ghe-push-option-rce-scanner

CVE-2026-3854 — RCE no GitHub Enterprise Server via Injeção de Opção de Push Visão Geral Neutralização inadequada de valores de opções de push no GHE. Atacante com acesso de push obtém RCE na instância. Campo| Valor ---|--- CVE| CVE-2026-3854 Gravidade| CRÍTICA Produto| GitHub Enterprise Server...

CVE-2026-49360

Recce (a data-validation toolkit for dbt PR review) versions prior to 1.50.0 are vulnerable to unauthenticated SQL execution through the query run API when deployed with a DuckDB-backed project and exposed to an untrusted network without authentication. An attacker can leverage DuckDB filesystem ...

CVE-2022-36804-Bitbucket-RCE-Analysis

CVE-2022-36804: Bitbucket Remote Command Execution RCE Analisi Tecnica & Sfruttamento in Laboratorio dell'Argument Injection tramite Null-Byte Riepilogo della Vulnerabilità CVE-2022-36804 è una vulnerabilità di Argument Injection ad alta gravità/critica all'interno dell'API REST di Atlassian...