5487393 matches found
CVE-2026-64779
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper locking. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server,...
CVE-2026-64781
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper input validation. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...
CVE-2026-65332
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...
CVE-2024-21532-PoC-ggit
Vulnerabilità di Command Injection CVE-2024-21532 in ggit ggit si descrive come: root@kitploit: Local promise-returning git command wrappers Risorse: Codice sorgente GitHub del progetto: https://github.com/bahmutov/ggit Pacchetto npm del progetto: https://www.npmjs.com/package/ggit Articolo di...
Serious-Sam---CVE-2021-36934-Mitigation-for-Datto-RMM
Übersicht Dies ist eine Datto RMM-Komponente zur Minderung von CVE-2021-36934, auch bekannt als Serious SAM. Sie folgt den unter den folgenden Links beschriebenen Minderungsmaßnahmen: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934 https://kb.cert.org/vuls/id/506989 NUTZUNG A...
CVE-2026-16809
CVE-2026-16809 affects LimeSurvey Community Edition 7.0.5 and is a stored cross-site scripting (XSS) vulnerability in the survey quota creation workflow. An authenticated low-privileged user with the ability to create and manage their own survey can store malicious JavaScript in a quota message ,...
CVE-2026-16809 LimeSurvey Community Edition 7.0.5 - Stored XSS in quota message rendering
LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the survey quota creation workflow. An authenticated low-privileged user who can create and manage their own survey can store malicious JavaScript in a quota message. This issue affects LimeSurvey: 7.0.5...
See-SURF
See-SURF Scanner di sicurezza ora potenziato con AI 🤖 per trovare potenziali parametri Server Side Request Forgery SSRF nella tua applicazione web. See-SURF non solo ti aiuta a rilevare potenziali parametri SSRF, ma ti aiuta anche a validarli, proteggendo la tua applicazione da compromissioni di...
ghidra-scripts
ghidra-scripts "Gli esseri umani sono più adatti a riconoscere il cibo che a tenere a mente grandi grafi." -- Halvar Flake Una raccolta dei miei script Ghidra per facilitare il reverse engineering e la ricerca di vulnerabilità. Articolo del blog...
CVE-2025-32463_POC
CVE-2025-32463 – إثبات المفهوم لـ sudo chroot "chwoot" يوفر هذا المستودع بيئة بسيطة وقابلة لإعادة الإنتاج لإظهار ثغرة تصعيد الامتيازات CVE‑2025‑32463 في ميزة chroot في sudo. المحتويات الملف| الغرض ---|--- Dockerfile| ينشئ صورة Ubuntu 24.04 مع sudo 1.9.16p2 المعرض للثغرة وأدوات البناء...
CVE-2024-4956
CVE-2024-4956 Questo repository contiene un'utility Python per automatizzare lo sfruttamento di CVE-2024-4956 ed è in grado di testare in massa i percorsi file da un file di input, automatizzando il processo di salvataggio su disco dei contenuti dei percorsi file esistenti per l'analisi. I dettag...
CVE-2024-32002
GIT RCE CVE-2024-32002 Descrizione | CVE-2024-32002 | https://www.tarlogic.com/blog/cve-2024-32002-vulnerability-git/ | Exploit | Per prima cosa devi creare i repository "calledrepo" e "commandrepo" su git. | La vittima eseguirà successivamente la clonazione di calledrepo con "git clone --recursi...
EUVD-2026-66770
SeaweedFS is a distributed storage system for files and blobs. In versions prior to 4.40, an authenticated S3 principal with permissions scoped to a nested object key can overwrite a different object outside that scope by calling PutObjectAcl on the key it is allowed to access. The handler...
PetitPotam
Erkennung von PetitPotam-NTLM-Relay-Angriffen Ein Zeek-Paket zur Erkennung einiger Versuche, über den Petit-Potam-Exploit NTLM-Relay-Angriffe auszulösen. Dieses Paket erkennt, was wie erfolgreiche und erfolglose Exploit-Versuche aussieht. Es unterscheidet zwischen ihnen, indem es den Rückgabecode...
fortiscan
Fortiscan CVE-2018-13379 FG-IR-18-384 Strumento di sfruttamento, Puoi usare questo strumento per verificare la vulnerabilità nel tuo FortiGate SSL-VPN. Questa vulnerabilità interessa le seguenti versioni: • FortiOS 6.0 - 6.0.0 fino a 6.0.4 • FortiOS 5.6 - 5.6.3 fino a 5.6.7 • FortiOS 5.4 - 5.4.6...
ECHO-3C72-D65D-FEF3
Bulletin has no description...
ECHO-9CB0-61A9-C42A
Bulletin has no description...
ECHO-A444-0F4D-8828
Bulletin has no description...