CVE-2026-19889

CVE-2026-19889 is a Server-Side Request Forgery (SSRF) vulnerability in the GitLab AI Gateway component, affecting versions 18.9.0 through 19.0.12 , 19.1 through 19.1.7 , and 19.2 through 19.2.2 . An authenticated user with Duo Agent Platform access could redirect model requests to an externally-...

log4shell-poc-lab

Log4Shell POC Demo Questo repository contiene un sottomodulo, clonalo con: root@kitploit: git clone --recurse-submodules [email protected]:obscuritylabs/log4shell-poc-lab.git Per avviare la demo, esegui: root@kitploit: docker compose up Per vedere l'exploit creare un file sul server vittima,...

PetitPotam

PetitPotam Strumento PoC per costringere host Windows ad autenticarsi verso altre macchine tramite MS-EFSRPC EfsRpcOpenFileRaw o altre funzioni : Gli strumenti utilizzano la named pipe LSARPC con interfaccia c681d488-d850-11d0-8c52-00c04fd90f7e perché è più diffusa. Ma è possibile attivarlo anche...

CVE-2022-41099-Fix

Non mi assumo alcuna responsabilità e non fornisco garanzie su questo script; testalo completamente prima dell'uso. CVE-2022-41099-Fix Aggiorna il file WINRE.WIM per correggere CVE-2022-41099 REF: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099 Microsoft Catalog:...

Microsoft-Windows-SMBGhost-Vulnerability-Checker---CVE-2020-0796---SMBv3-RCE

Microsoft Windows SMBGhost Controllo Vulnerabilità - CVE-2020-0796 - SMBv3-RCE Lo scanner è destinato solo a testare se un server è vulnerabile. Non è destinato alla ricerca o allo sviluppo, da qui il payload fisso. Verifica il dialetto SMB 3.1.1 e la capacità di compressione tramite una richiest...

CVE-2019-8997

CVE-2019-8997 Una vulnerabilità di XML External Entity Injection XXE nel Management System console di BlackBerry AtHoc, versioni precedenti alla 7.6 HF-567, potrebbe potenzialmente consentire a un utente malintenzionato di leggere file locali arbitrari dal server dell'applicazione o effettuare...

smartermail-cve-scanner

Scanner SmarterMail CVE-2025-52691 Vulnerabilità RCE CVSS 10.0 in SmarterMail. Il tuo server di posta è vulnerabile? Scanner rapido e accurato per CVE-2025-52691 - una vulnerabilità critica di caricamento arbitrario di file senza autenticazione che consente l'esecuzione remota di codice sui serve...

CVE-2026-5680

Undertow (specifically the Undertow-core component) is vulnerable to a Denial of Service (DoS) attack exploitable over the network without authentication. A remote attacker can send specially crafted WebSocket messages with the permessage-deflate extension negotiated, triggering excessive memory ...

EUVD-2026-67086

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...

CVE-2026-5680 Undertow-core: undertow: denial of service via websocket permessage-deflate processing

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...

CVE-2026-5680

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...

CVE-2020-10558

CVE-2020-10558: Tesla Model S/3/X Denial of Service DoS Sicherheitsforscher: Jacob Archuleta @nullze 📝 Schwachstellenübersicht Eine kritische Denial-of-Service-Schwachstelle DoS wurde im Tesla Model 3, Model S und Model X alle Versionen vor 2020.4.10 entdeckt. Diese Schwachstelle erlaubte einem...

CVE-2026-67355

A flaw was found in guzzlehttp/guzzle. The software does not correctly enforce the "host-only" scope for cookies, which means it stores the request host in the cookie's domain field instead of restricting the cookie to the exact host. This vulnerability could allow an attacker who controls a...

CVE-2026-67339

A flaw was found in guzzlehttp/guzzle, where it fails to properly isolate Proxy-Authorization headers from origin servers when using cURL handlers. A remote attacker could exploit this vulnerability when requests are redirected, bypassed, or sent through SOCKS proxies that Guzzle misclassifies as...

wazuh

Wazuh Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh solution consists of an endpoint security agent, deployed to the monitored...

CVE-2025-53136

CVE-2025-53136 Kernel-Informationsoffenlegung durch Race Condition. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43511 https://www.crowdfense.com/nt-os-kernel-information-disclosure-vulnerability-cve-2025-53136/...

CVE-2025-21333

CVE-2025-21333 puoi trovare la prima versione dell'exploit per questa CVE su https://github.com/MrAle98/CVE-2025-21333-POC/tree/master . Ho realizzato questo nuovo exploit ispirandomi a quello di MrAle98. È più stabile e un po' improvvisato in quanto non apre il processo sandbox di Windows per...

CVE-2020-0796

CVE-2020-0796 Windows SMBv3 LPE Exploit Autori Daniel García Gutiérrez @danigargu Manuel Blanco Parajón @dialluvioso Analisi dell’exploit Analisi POC di SungLin Knownsec 404 Team Writeup+PoC di @ZecOps Riferimenti https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796...

libssh-scanner

scanner libssh Introdução Este é um script baseado em Python para identificar hosts vulneráveis ao CVE-2018-10933. O scanner libssh tem dois modos: passivo banner grabbing e agressivo bypass de autenticação para validar a existência da vulnerabilidade. Por padrão, o scanner libssh usa o modo...

Detect-CVE-2017-15361-TPM

Erkennen von Trusted Platform Modules, die für CVE-2017-15361 anfällig sind Dieses Repository enthält Inhalte, die DoD-Administratoren dabei unterstützen, Systeme mit einem aktivierten Trusted Platform Module TPM zu erkennen, das für CVE-2017-15361 anfällig ist, und ist eine Ergänzung zur...