EP4-redes

POC CVE-2018-15473 exploit Adattato da https://github.com/Rhynorater/CVE-2018-15473-Exploit Per eseguire questo exploit è necessario avere installato: docker docker compose server ssh Iniziamo tirando da DockerHub un'immagine che ha una versione vecchia 6.6 di SSH su un vecchio Ubuntu: Potrebbe...

CVE-2025-53379

A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versions may allow a remote unauthenticated attacker to retrieve sensitive information via a specially crafted request...

AZL-77877 CVE-2026-23214 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: btrfs: reject new transactions if the fs is fully read-only BUG There is a bug report where a heavily fuzzed fs is mounted with all rescue mount options, which leads to the following warnings during unmount: BTRFS: Transaction...

CVE-2025-69344

Summary: CVE-2025-69344 affects WordPress Theme Oneline Lite (ThemeHunk Oneline Lite) versions through 6.6, with a Missing Authorization / Broken Access Control vulnerability caused by incorrectly configured access control security levels. This can allow unauthorized access due to improperly cons...

EUVD-2018-10101

Malware in sbrugna...

EUVD-2017-14902

Malware in sbrugna...

EUVD-2020-16635

Malware in sbrugna...

EUVD-2017-14904

Malware in sbrugna...

EUVD-2017-14905

Malware in sbrugna...

EUVD-2019-13393

Malware in sbrugna...

EUVD-2025-2580

Malicious code in bioql PyPI...

EUVD-2022-28639

Malicious code in bioql PyPI...

CVE-2025-52658 HCL MyXalytics is affected by the use of vulnerable/outdated versions

HCL MyXalytics is affected by the use of vulnerable/outdated versions which can expose the application to known security risks that could be exploited...

EUVD-2025-32352

A vulnerability in HCL HCL MyXalytics allows HTML InjectionThis issue affects HCL MyXalytics: 6.6...

AZL-66506 CVE-2025-38601 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: clear initialized flag for deinit-ed srng lists In a number of cases we see kernel panics on resume due to ath11k kernel page fault, which happens under the following circumstances: 1 First ath11khaldumpsrngstats ca...

CVE-2024-7269

Improper Neutralization of Input During Web Page Generation vulnerability in "Update of Personal Details" form in ConnX ESP HR Management allows Stored XSS attack. An attacker might inject a script to be run in user's browser. After multiple attempts to contact the vendor we did not receive any...

CVE-2024-50049 affecting package kernel for versions less than 6.6.57.1-1

CVE-2024-50049 affecting package kernel for versions less than 6.6.57.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-7269

Improper Neutralization of Input During Web Page Generation vulnerability in "Update of Personal Details" form in ConnX ESP HR Management allows Stored XSS attack. An attacker might inject a script to be run in user's browser. After multiple attempts to contact the vendor we did not receive any...

CVE-2024-7269

CVE-2024-7269 pertains to ConnX ESP HR Management and is a Stored XSS vulnerability in the "Update of Personal Details" form. Affected are ESP HR Management versions prior to 6.6. The root cause is improper neutralization of input during web page generation, enabling an attacker to inject script ...

CVE-2024-7269 Stored XSS in ConnX ESP HR Management

Improper Neutralization of Input During Web Page Generation vulnerability in "Update of Personal Details" form in ConnX ESP HR Management allows Stored XSS attack. An attacker might inject a script to be run in user's browser. After multiple attempts to contact the vendor we did not receive any...