CVE-2020-24227

CVE-2020-24227 Playground Sessions - Memorizzazione delle credenziali utente in chiaro Playground Sessions v2.5.582 e versioni precedenti per Windows memorizza le credenziali utente in testo semplice, consentendo a chiunque abbia accesso a C:\Users\AppData\Roaming\Playground\Local...

CVE-2022-23131

CVE-2022-23131 CVE-2022-23131 Unsafe Session Storage 0x00 Introduzione La vulnerabilità di Zabbix CVE-2022-23131 è stata scoperta casualmente su un server Zabbix di un'azienda estera. Zabbix Sia Zabbix è un sistema di monitoraggio open-source sviluppato dall'azienda lettone Zabbix SIA Zabbix Sia...

azure-pentesting-suite

azure-pentesting-suite azpt 🚧 Beta pubblica. azpt è in fase di sviluppo attivo — comandi, flag e formati di output possono ancora cambiare tra le release. Segnalazioni di bug e feedback sono benvenuti tramite le issue su GitHub. azpt è un toolkit Go per valutazioni di sicurezza Azure autorizzate...

EUVD-2026-95708

The Livees Checkout WordPress plugin through 7.0.2 does not perform any capability, nonce or order-key check before acting on request parameters on the order confirmation page, allowing unauthenticated users to change the status of arbitrary orders, store arbitrary data and notes on them, and...

BIT-GHOST-2026-104411 Ghost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploads

Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scripts by uploading files served with extension-derived content types on the default local storage adapter. Attackers can upload script-bearing files to the site's domain to...

CVE-2026-19585

A flaw was found in go-getter. A remote attacker can exploit a path traversal vulnerability to write files outside of the intended target directory during directory downloads from Amazon Simple Storage Service S3 or Google Cloud Storage GCS. By supplying specially crafted file paths within a remo...

CVE-2026-98262

A flaw was found in the Linux kernel's libahci driver. This issue can lead to a Denial of Service DoS when initializing storage controllers configured to use 32-bit Direct Memory Access DMA. Because the driver fails to clear the upper 32-bit memory address registers on hardware that physically...

EUVD-2026-95523

In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent. On the next server...

usbrip

usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...

stenographer

Stenographer Overview Stenographer is a full-packet-capture utility for buffering packets to disk for intrusion detection and incident response purposes. It provides a high-performance implementation of NIC-to-disk packet writing, handles deleting those files as disk fills up, and provides method...

stenographer

Stenographer Panoramica Stenographer è un'utility di cattura a pacchetto completo per bufferizzare i pacchetti su disco a scopo di intrusion detection e incident response. Fornisce un'implementazione ad alte prestazioni della scrittura da NIC a disco, gestisce l'eliminazione dei file man mano che...

CVE-2026-2699

CVE-2026-2699 — Bypass dell'autenticazione di Progress ShareFile Storage Zones Controller Bypass critico dell'autenticazione CVSS 9.8 in Progress ShareFile Storage Zones Controller SZC gestito dal cliente ≤ 5.12.3. 📋 Panoramica CVE-2026-2699 è una grave vulnerabilità di bypass dell'autenticazione...

EUVD-2026-95309

Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks...

CVE-2025-26794-exploit

CVE-2025-26794: Exploit di SQL Injection ETRN in Exim Uno strumento proof-of-concept per CVE-2025-26794, che dimostra la vulnerabilità di SQL injection nel server di posta Exim 4.98 tramite il comando ETRN quando si utilizza l'archiviazione DBM SQLite. ⚠️ Disclaimer Legale SOLO PER TEST DI...

CVE-2026-105826

A flaw was found in ImageMagick. A remote attacker can cause a Denial of Service DoS by submitting a specially crafted MATLAB MAT image containing highly compressed data. The MAT decoder fails to enforce configured temporary file size limits during decompression, allowing oversized temporary file...

shadowd

Logo Shadow Daemon è un firewall per applicazioni web che intercetta le richieste a livello applicativo. Questo repository contiene il componente principale di Shadow Daemon che gestisce l'analisi e l'archiviazione delle richieste. Documentazione Per la documentazione completa, fare riferimento a...

CVE-2026-106393

An use after free flaw was found in the Storage component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/559793873...

CVE-2026-107829

Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks...

CVE-2026-107829 Jivejdon through 5.0 Unsalted MD5 Password Storage via AccountDaoSql

Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks...

CVE-2026-107829

Jivejdon versions through 5.0 are vulnerable to a weak password storage issue. The application uses ToolsUtil.hash() in AccountDaoSql to store account passwords as unsalted MD5 digests . If an attacker gains access to the user table via database access or SQL injection , they can crack the passwo...