E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands

Cybersecurity researchers are calling attention to a new campaign that employs FTP banners as dead drop resolvers DDRs to deliver two previously unreported remote access trojans RATs tracked as E4del and PINHOLE. While threat actors are known to abuse legitimate services to point to additional...

CVE-2021-3456

CVE-2021-3456 Una catena pratica che inizia con un innocuo file PDF e termina con una reverse shell su un'istanza AWS EC2 L'Inizio: Creare un Payload PDF Tutto inizia sul fronte dell'attacco. Utilizzando l'oggetto WScript integrato di PowerShell, incorporiamo uno script all'interno di un PDF che...

Reset-inetpub

Reset inetpub Dieses Skript stellt den Ordner %SYSTEMDRIVE%\inetpub und seine standardmäßigen Sicherheitsberechtigungen wieder her, die als Reaktion auf CVE-2025-21204 nach dem Windows-Update KB5055523 erforderlich sind. Es richtet sich an Benutzer, die diesen Ordner möglicherweise gelöscht haben...

log4j-vulnerable-app-cve-2021-44228-terraform

log4j-vulnerable-app-cve-2021-44228-terraform Um Terraform para implantar aplicativo vulnerável e um JNDIExploit para trabalhar com CVE-2021-44228 Sobre a Stack Este terraform cria duas instâncias em uma VPC na AWS Cloud. Você só precisa exportar suas AWSACCESSKEYID e AWSSECRETACCESSKEY Uma...

CVE-2021-31630

CVE-2021-31630 OpenPLC 3 WebServer Esecuzione Remota di Codice Autenticata. Descrizione La presenza di Command Injection nel webserver Open PLC v3 consente a remoti attaccanti di eseguire codice arbitrario. Testato solo sulla macchina HTB Wifinetictwo.htb. Ho riscontrato problemi con tutti gli...

gitlab_rce_cve-2022-2884

gitlabrcecve-2022-2884 Questo è un programma Python3 che sfrutta la vulnerabilità RCE autenticata di GitLab nota come CVE-2022-2884. DICHIARAZIONE DI NON RESPONSABILITÀ Questo strumento è destinato a ingegneri della sicurezza e personale appsec per valutazioni di sicurezza. Si prega di utilizzare...

Design-and-Evaluation-of-an-MCP-Governed-Pentest-Agent

Design-and-Evaluation-of-an-MCP-Governed-Pentest-Agent Dissert...

Mailcow-CVE-2022-31245

Mailcow CVE-2022-31245 CVE-2022-31245: RCE und Eskalation von Domain-Admin-Rechten für Mailcow. Inklusive POC. Gemeldet und behoben: 2022-05 Gepatchte Version: https://github.com/mailcow/mailcow-dockerized/releases/tag/2022-05d CVE: https://vulners.com/cve/CVE-2022-31245 CVE-2022-31245:...

Exploit for OS Command Injection in Synacor Zimbra_Collaboration_Suite

CVE-2026-73570 PoC - SMTP Command Injection Tester A custom,...

RHSA-2026:59136 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update

Bulletin has no description...

RHSA-2026:59135 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Bulletin has no description...

fortinet-fortiweb-cve-2025-64446-58034

Scopri le vulnerabilità di Fortinet FortiWeb CVE-2025-64446, CVE-2025-58034 1. Panoramica Fortinet FortiWeb è un dispositivo Web Application Firewall WAF ampiamente implementato nei sistemi aziendali per proteggere le applicazioni web dalle minacce comuni. Poiché FortiWeb si trova spesso nello...

npm_poisoning_poc

Guardians 2027 AI package lab Reusable setup for the first Gu...

CVE-2024-32019-POC

CVE-2024-32019-POC Netdata ndsudo lokale Privilegieneskalation – Workflow und POC CVE-2024-32019 Workflow Automatischer Exploit Ressourcen Workflow !TIP Bitte lesen Netdata ist ein Tool zur Überwachung von Anwendungen und Systemen. Es läuft auf Port 19999 und ist leicht zu finden: root@kitploit:...

CVE-2026-63586

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

EUVD-2026-65328

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

CVE-2026-63586 Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

CVE-2026-63586 Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

CVE-2026-63586

CVE-2026-63586 is a critical (CVSS 3.1: 9.8) unauthenticated remote code execution vulnerability in a web-based management interface that uses a modified uhttpd server with CGI shell scripts. The root cause is a shell injection flaw: the HTTP Basic Authentication username is taken directly from t...

MAL-2026-14489 Malicious code in hydration-cls-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c60e3a0dd707077bad78ec7f0e5f79032dc9b86814d65bfd0083275a6059de The package advertises itself as a dependency-free streak/date-math library but ships an x8664 Linux ELF at dist/internal/calc.dat and auto-launches...