5492125 matches found
CVE-2025-21333
CVE-2025-21333 puoi trovare la prima versione dell'exploit per questa CVE su https://github.com/MrAle98/CVE-2025-21333-POC/tree/master . Ho realizzato questo nuovo exploit ispirandomi a quello di MrAle98. È più stabile e un po' improvvisato in quanto non apre il processo sandbox di Windows per...
CVE-2020-0796
CVE-2020-0796 Windows SMBv3 LPE Exploit Autori Daniel García Gutiérrez @danigargu Manuel Blanco Parajón @dialluvioso Analisi dell’exploit Analisi POC di SungLin Knownsec 404 Team Writeup+PoC di @ZecOps Riferimenti https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796...
libssh-scanner
scanner libssh Introdução Este é um script baseado em Python para identificar hosts vulneráveis ao CVE-2018-10933. O scanner libssh tem dois modos: passivo banner grabbing e agressivo bypass de autenticação para validar a existência da vulnerabilidade. Por padrão, o scanner libssh usa o modo...
Detect-CVE-2017-15361-TPM
Erkennen von Trusted Platform Modules, die für CVE-2017-15361 anfällig sind Dieses Repository enthält Inhalte, die DoD-Administratoren dabei unterstützen, Systeme mit einem aktivierten Trusted Platform Module TPM zu erkennen, das für CVE-2017-15361 anfällig ist, und ist eine Ergänzung zur...
cve-analysis-exploitation-mitigation
CVE Analysis, Exploitation & Mitigation A hands-on cybersecur...
CVE-2022-36804-PoC
CVE-2022-36804-PoC Multithreaded Exploit-Skript für CVE-2022-36804, das die meisten BitBucket-Versionen 8.3.1 betrifft. Das vollständige Advisory finden Sie hier https://jira.atlassian.com/browse/BSERV-13438 Alle Anerkennung für die Entdeckung gebührt TheGrandPew Das Skript erkennt automatisch...
CVE-2013-3900-PowerShell-PoC
CVE-2013-3900-PowerShell-PoC Questo PoC è fornito solo a scopo educativo e di ricerca. L'autore non si assume alcuna responsabilità per un uso improprio o danni causati da questo codice. Questo script PowerShell è uno strumento di test per simulare l'attacco descritto in CVE-2013-3900...
seccubus
About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...
Pentest-Windows
Pentest-Windows11 v3.2 Die erste Windows-Penetrationstest-Umgebung auf Mac M-Chips 中文文档 | English README 📖 Projektübersicht 📝 Systembeschreibung Diese Umgebung bietet eine sofort einsatzbereite Windows-Penetrationstest-Umgebung. Weiterverbreitung ist erwünscht, bitte mit Quellenangabe und Link:...
CVE-2026-78002
A heap buffer overflow in the RainerScript replace() function of rsyslog allows an unauthenticated remote attacker to cause a denial of service by sending specially crafted syslog messages. The root cause is an incorrect buffer size calculation during string replacement, leading to memory corrupt...
CVE-2026-78002 Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function
A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...
CVE-2026-78002 Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function
A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...
EUVD-2026-67085
A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...
CVE-2026-69248
A flaw was found in python-cryptography. This vulnerability arises from incorrect handling of wildcard Domain Name System DNS names during certificate validation. Specifically, the verifier may accept a certificate with a broad wildcard DNS name e.g., .example.com even when a more restrictive nam...
CVE-2025-29927-scanner
Next.js Version Vulnerability Scanner von nocomp Übersicht Dieses Python-Skript ist ein umfassendes Tool zum Scannen mehrerer Subdomains, um Next.js-Versionen zu erkennen und potenzielle CVE-2025-29927-Sicherheitslücken zu identifizieren. Es bietet eine detaillierte Analyse von Webanwendungen, di...
CVE-2021-46422
CVE-2021-46422 SDT-CW3B1 1.1.0 - OS Command Injection root@kitploit: Exploit Title: SDT-CW3B1 1.1.0 - OS Command Injection Vendor Homepage: http://telesquare.co.kr/ CVE : CVE-2021-46422 CVE Description: Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a...
xz-backdoor-research
Toolkit di Ricerca CVE-2024-3094 Di Nikolaos Natsopoulos , Consulente IAM Strumento interattivo basato su browser che accompagna il report di ricerca: "CVE-2024-3094: Compromissione della Supply Chain tramite Ingegneria Sociale e Manipolazione del Sistema di Build in XZ Utils"...
threatspec
threatspec - continuous threat modeling, through code Threatspec is an open source project that aims to close the gap between development and security by bringing the threat modelling process further into the development process. This is achieved by having developers and security engineers write...
Security Bulletin: Multiple vulnerabilities in IBM MQ Agent images
Summary Multiple vulnerabilities were addressed in IBM MQ Agent images Vulnerability Details CVEID:CVE-2026-62995 DESCRIPTION: joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. in versions 1.7.1 and prior, joserfc accepts JWT...