smbexec

root@kitploit: smbexec Ein schneller Angriff im psexec-Stil mit Samba-Werkzeugen Ursprüngliches Konzept und Skript von Brav0Hax & PureHate Nach Ruby portiert und modifiziert von Smilingraccoon und Zeknox Codename - Machiavellian Geschrieben, weil wir es satt hatten, dass Metasploit PSExec aufflog...

GlacierCTF2023_writeups

Glacierctf 2023 Descrizione Data del CTF: 24.11.2023 - 26.11.2023 Durata: 48 ore CTF Time: https://ctftime.org/event/1992 GlacierCTF 2023 è stata la seconda edizione del CTF in stile jeopardy organizzato da LosFuzzys. Il CTF ha proposto sfide in varie categorie, tra cui pwn, rev, web, crypto, sma...

Malicious code in digitalexp-style-module-l9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c1b3e9059995d4d535c65fafd0105eea420510acb17ad9befbc99c18aa25df9 package.json declares both preinstall and postinstall as node beacon.js, so beacon.js runs automatically on every npm install. beacon.js reads...

EUVD-2026-65160

Subscriber Broken Access Control in Style Kits = 2.6.5 versions...

CVE-2026-27364

Subscriber Broken Access Control in Style Kits = 2.6.5 versions...

CVE-2026-27364

Broken Access Control vulnerability in the WordPress Style Kits plugin (AnalogWP) versions ≤ 2.6.5 . A Subscriber -level authenticated user can exploit insufficient access controls, resulting in a high impact on integrity (CVSS 3.1: 6.5 MEDIUM, vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). No conf...

CVE-2026-27364 WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability

Subscriber Broken Access Control in Style Kits = 2.6.5 versions...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Net: Atlantic: Fixed an index out of range error in aqvec. The final update statement of the for loop exceeds the array range. The dereference of self-aqveci is not checked, leading to an index out of range error. This issue h...

Astra Linux – Vulnerability in Firefox

By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could be applied, leading to memory corruption and potentially exploitable crashes. This vulnerability affects Firefox versions less than 87...

PT-2026-81045

Name of the Vulnerable Software and Affected Versions Style Kits versions prior to 2.6.6 Description Broken Access Control allows a user with Subscriber privileges to perform unauthorized actions. Recommendations Update Style Kits to version 2.6.6 or later...

PT-2026-79777

Name of the Vulnerable Software and Affected Versions justhtml versions prior to 1.12.0 Description A mutation cross-site scripting mXSS issue exists during the serialization of raw-text elements, such as and . When the sanitize dom function processes a DOM tree using a custom policy that retains...

CVE-2026-74604

In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Revert commit 030a48b0f6ce "thermal/drivers/hwmon: Cleanup coding style a bit" that introduced a use-after-free into the error path of thermaladdhwmonsysfs by removing a...

CVE-2026-74604

CVE-2026-74604 is a use-after-free vulnerability in the Linux kernel's thermal/drivers/hwmon component. It was introduced by commit 030a48b0f6ce ("thermal/drivers/hwmon: Cleanup coding style a bit"), which removed a valid check from the error path of thermal_add_hwmon_sysfs() . The fix is a rever...

CVE-2026-74604 Revert "thermal/drivers/hwmon: Cleanup coding style a bit"

In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Revert commit 030a48b0f6ce "thermal/drivers/hwmon: Cleanup coding style a bit" that introduced a use-after-free into the error path of thermaladdhwmonsysfs by removing a...

BIT-JUPYTERLAB-2026-73417 JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 3.3.0 until 4.5.10 and 4.6.2, JupyterLab allows notebook settings to be shared and applied through an overrides.json file using the Import button in the Settings...

docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Service

Summary docx4j's PropertyResolver and several adjacent helpers recursively walk the OpenXML style inheritance chain w:basedOn without cycle detection. A WordprocessingML document containing a cyclic style chain for example, Style A based on B and Style B based on A causes unbounded recursion and ...

CVE-2026-15441

The CVE-2026-15441 entry concerns the WC Product Table Lite WordPress plugin (versions up to 5.6.0). It is vulnerable to CSS Injection via the unauthenticated shortcode attribute laptop_scroll_offset passed through the wcpt_ajax() handler (wp_ajax_nopriv_wcpt_ajax). The handler JSON-decodes attac...

CVE-2026-73044

SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing stored cross-site scripting injection into style attributes. Attackers can inject malicious payloads through the setAttrViewColWidth API that break out of style attributes and inject event handlers on eve...

CVE-2026-73044 SiYuan before v3.7.4 Stored Cross-Site Scripting via Column Width

SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing stored cross-site scripting injection into style attributes. Attackers can inject malicious payloads through the setAttrViewColWidth API that break out of style attributes and inject event handlers on eve...

CVE-2026-73044

SiYuan before v3.7.4 is affected: it fails to validate/escape table column width values, enabling stored XSS via style attributes. Attackers can use the setAttrViewColWidth API to break out of style attributes and inject event handlers on every table cell, enabling arbitrary code execution in the...