certificate-ripper

Certificate Ripper 🔐 A CLI tool to extract server certificates Demo Advantages It is fast Easy to use No openssl required Runs on any Operating System Can be used with or without Java, native executables are present in the releases Extracts all the sub-fields of the certificate Certificates can b...

-CVE-2021-44790

CVE-2021-44790 Descrizione di CVE-2021-44790 CVE-2021-44790 descrive un bug di sicurezza a livello di sistema presente in modlua di Apache HTTP Server, in particolare nella versione 2.4.51 e precedenti. La vulnerabilità viene attivata quando la funzione r:parsebody gestisce in modo improprio le...

CVE-2026-11120-Command-Injection-via-Git-URL-in-CI-CD-Pipeline

CVE-2026-11120 – Command Injection über Git-URL in CI/CD-Pipeline Programmcode Python cicdbuild.py - Clones repository without sanitizing URL import subprocess, sys def cloneandbuildrepourl: Vulnerability: repourl can contain shell metacharacters cmd = f"git clone repourl /tmp/repo"...

CVE-2026-106155

In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report navigation actions or HTML text box links. When another user views t...

CVE-2026-106145

In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent. On the next server...

CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash

Sicherheitshinweis: Out-of-Bounds-Read im facil.io-MIME-Parser führt zu Serverabsturz Zugewiesene CVE-ID CVE-2026-66729 Produkt: facil.io Betroffene Versionen: facil.io = 0.6.0 alle 0.6.x, alle 0.7.x, master; eingeführt, als der MIME-Parser in 0.6.0 hinzugefügt wurde Komponente:...

CVE-2025-5548

Analisi e sfruttamento di FreeFloat FTP: CVE-2025-5548 Anderson Steven — Master in Cybersicurezza, Modulo 6 Vulnerabilità Consegna individuale: Metodologia di analisi e sfruttamento delle vulnerabilità Perché questo repository Non volevo semplicemente consegnare "ecco l'exploit funzionante". Ques...

binaryninja-ollama

Binary Ninja Ollama v1.0.9 Autor: Austin Haggard Binary Ninja Ollama integriert sich in Ihren eigenen lokal gehosteten Ollama-Server, um Funktionen und Variablen mit KI umzubenennen Beschreibung: Ollama ist ein Tool, mit dem Sie Open-Source-KI-Modelle herunterladen und lokal ausführen können...

CVE-2026-57941

A flaw was found in the modhttp2 module of Apache HTTP Server. A remote, unauthenticated attacker could exploit a use-after-free condition—where memory is accessed after being released—through re-entrant processing of shared session buffers. This flaw can allow an attacker to potentially execute...

CVE-2020-14882_Exploit_Gui

CVE-2020-14882ExploitGui Lo strumento deve essere utilizzato solo in stato autorizzato. In caso di reati penali, gli attacchi non autorizzati non sono di mia responsabilità. Si prega di essere ben informati sulla 《网络安全法》 Durante un'attività di ricognizione, ho incontrato 14882 e non ho trovato un...

CVE-2026-106155 Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers

In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report navigation actions or HTML text box links. When another user views t...

CVE-2026-106155

Progress Telerik Report Server prior to version 12.2.26.1007 is vulnerable to a stored cross-site scripting (XSS) flaw in the shared reporting engine. An authenticated report author can embed javascript: or vbscript: URLs within report navigation actions or HTML text box links. If another user vi...

EUVD-2026-95524

In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author to embed javascript: or vbscript: URLs in report navigation actions or HTML text box links. When another user views t...

CVE-2026-106145 Privilege Escalation in Telerik Report Server Service-Agent Hub

In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent. On the next server...

EUVD-2026-95523

In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent. On the next server...

CVE-2026-106145

Progress Telerik Report Server prior to version 12.2.26.1007 is vulnerable to a privilege escalation flaw due to incorrect privilege assignment in the service-agent SignalR hub . An authenticated user, such as a low-privilege or guest account with a valid bearer token, can register as a trusted s...

POC-CVE-2026-56164-exploit

CVE-2026-56164 – Exploit zur Umgehung der Microsoft SharePoint Server-Authentifizierung Kritisch CVSS 9.8 – Nicht authentifizierte Rechteausweitung zum Farm-Administrator in Microsoft SharePoint Server Inhaltsverzeichnis Überblick Details zur Sicherheitslücke Betroffene Versionen...

Rogue-MySql-Server

Rogue-MySql-Server Modifica lo script e cambia il file da leggere e la porta del server se vuoi. Esegui lo script e connettiti al tuo server per leggere il file dal lato client. Leggi mysql.log per il contenuto del file letto...

MAL-014

MAL-014: Lettura Arbitraria di File Autenticata in VMware vCenter Server Il componente API "com.vmware.appliance.version1.system.update.set" è vulnerabile a un attacco di iniezione di flag che può essere sfruttato con il plugin "com.vmware.showlog" per leggere file arbitrari come utente "root" su...

MAL-012

MAL-012: Cross-Site Scripting riflesso nella console di amministrazione che porta all'esecuzione remota di codice in Payara Server Un attacco di Cross-Site Scripting XSS riflesso è stato trovato nella console di amministrazione di Payara. Convincendo un utente amministratore ad accedere all'URL...