cve-2019-1458_POC

CVE-2019-1458: dal 'report in the wild' alla POC Introduzione A dicembre Kaspersky ha pubblicato un post sul blog riguardante l'exploit 0day usato in the wild1. Ha suscitato il mio interesse perché, sebbene abbiano descritto come funzionava l'exploit, non hanno fornito alcuna POC nella loro...

TokenTactics

TokenTactics Set di strumenti per la manipolazione di Azure JSON Web Token "JWT" I token di accesso di Azure consentono di autenticarsi su determinati endpoint come un utente che accede tramite un codice di dispositivo. Anche se l'utente ha usato l'autenticazione a più fattori. Una volta ottenuto...

dlsw_exploit

DLSW Exploit Уязвимость раскрытия информации в Cisco DLSw В реализации DLSw от Cisco есть ошибка, затрагивающая ветки 12.x и 15.x, которая позволяет неаутентифицированному удаленному злоумышленнику получать частичное содержимое пакетов, проходящих через маршрутизатор Cisco с настроенным и активны...

kubebox

= Kubebox small^⎈❏^ Antonin Stefanutti https://github.com/astefanutti@astefanutti // Meta :description: Terminal and Web console for Kubernetes // Settings :idprefix: :idseparator: - :experimental: // Aliases ifdef::env-github :note-caption: ℹ️ :icon-check: ✔️ :icon-edit: ✏️ endif::...

CVE-2026-31431

CVE-2026-31431 Proof of Concept PoC Dieses Repository enthält einen Proof-of-Concept-Exploit PoC für CVE-2026-31431 , der eine lokale Privilegienausweitung demonstriert. !WARNING Dieses Projekt ist ausschließlich für Bildungs- und Sicherheitsforschungszwecke gedacht. Verwenden Sie es nur auf...

fcn-

fcn conecte sua rede privada gratuitamente de qualquer lugar 1. O que é o fcn fcnfree connect é uma ferramenta simplificada para conectar redes privadas com um clique, composta por servidor e cliente O fcn usa o servidor de dados público do fcn e tecnologias de criptografia de dados para conectar...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

uhubctl

uhubctl uhubctl è una utility per controllare l'alimentazione USB per porta su hub USB intelligenti. Un hub intelligente è definito come uno che implementa la commutazione dell'alimentazione per porta. L'idea originale per questo codice è stata ispirata da hub-ctrl.c di Niibe Yutaka:...

CVE-2026-58092

CVE-2026-58092 affects the mac_do(4) MAC policy module in FreeBSD 15.0 and later . After a kernel credential structure change, the function group_is_primary() was not properly updated, causing it to incorrectly read the primary group ID from the first element of the supplementary group array duri...

CVE-2026-58092 Unauthorized credential switching

In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primary group ID was stored in the first element of the array containing the list of supplementary group IDs, whereas now the primary group ID is stored in a dedicated field. This change was largely...

CVE-2026-58092 Unauthorized credential switching

In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primary group ID was stored in the first element of the array containing the list of supplementary group IDs, whereas now the primary group ID is stored in a dedicated field. This change was largely...

FreeBSD : FreeBSD -- Unauthorized credential switching (55fbe7b1-a0fe-11f1-ae1f-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 55fbe7b1-a0fe-11f1-ae1f-bc241121aa0a advisory. In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primar...

FreeBSD -- Unauthorized credential switching

Problem Description: In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primary group ID was stored in the first element of the array containing the list of supplementary group IDs, whereas now the primary group ID is stored in a dedicated field. This...

FreeBSD-SA-26:59.mac_do

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:59.macdo Security Advisory The FreeBSD Project Topic: Unauthorized credential switching Category: core Module: macdo Announced: 2026-08-25 Credits: Hazley...

aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability allows a remote attacker to perform HTTP request smuggling due to an edge case in the WebSocket upgrade procedure. When a WebSocket upgrade request includes a body, the parser may switch protocols before...

aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade

A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability allows a remote attacker to perform HTTP request smuggling due to an edge case in the WebSocket upgrade procedure. When a WebSocket upgrade request includes a body, the parser may switch protocols before...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix ref leak when switching zones When switching zones or network namespaces without performing a ct clear in between, a reference to the old ct entry is still leaked. This occurs because tcfctskbnfctcached...

NotaMy

🇬🇧 Englisch| 🇮🇹 Italienisch ---|--- 🧠 NotaMy NotaMy ist ein hierarchischer, terminalbasierter technischer Notizmanager, der darauf ausgelegt ist, die mentalen Kosten von Kontextwechseln für Personen zu senken, die an langfristigen Analyseaufgaben arbeiten Pentesting, Reverse Engineering, Wargames...

rootkit-signal-hunter

Rootkit Signal Hunter Erkennt Linux-Rootkits, die Signale verwenden, um Prozessrechte zu erhöhen. Manche Rootkits installieren Signalhandler, die auf bestimmte Signale warten, um Prozessrechte zu erhöhen. Dieses Tool kann diese Rootkits identifizieren, indem es Signale sendet und beobachtet, ob d...

Powershell-Tools

PSUnzipper - PowerShell-Entpacker Verwendet SharpZipLiB in .NET, zur Laufzeit geladen keine Datei auf der Festplatte - Ref. https://github.com/icsharpcode/SharpZipLib Kann mit Passwort verwendet werden Zip, Unzip Beide Verschlüsselungsmethoden AES und ZipCrypto werden unterstützt. Beim...