IIITA-IoT-Security-Research

IIIT Allahabad – Tirocinio di Ricerca in Sicurezza IoT Panoramica Questo repository illustra il lavoro svolto durante il mio Tirocinio di Ricerca presso l'Indian Institute of Information Technology, Allahabad IIIT Allahabad nell'ambito del Laboratorio di Crittografia e Sicurezza delle Reti CNS...

security-research

Security Research Questo progetto ospita i security advisory e i relativi proof-of-concept legati alla ricerca condotta presso Google che ha un impatto su codice non di proprietà di Google. Crediamo che la divulgazione delle vulnerabilità sia una strada a doppio senso. I vendor, così come i...

Astro - Unauthorized Third-Party Image Access

Astro 5.13.2 and 4.16.18 contains an information disclosure vulnerability caused by improper validation of protocol-relative URLs in the image optimization endpoint, letting attackers serve images from unauthorized third-party domains, exploit requires on-demand rendering deployment. id:...

Wowza Streaming Engine Manager 4.7.4.01 - Directory Traversal

Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via a remote, specifically crafted HTTP request to the REST API. id: CVE-2018-19365 info: name: Wowza Streaming Engine Manager 4.7.4.01 - Directory Traversal author: 0xAkoko severity: critical...

WP Cerber < 8.9.3 - Broken Access Control

WP Cerber 8.9.3 contains a bypass of /wp-json access control caused by improper handling of trailing '?' character, letting unauthorized users access protected REST API endpoints, exploit requires sending a request with a trailing '?'. id: CVE-2021-37598 info: name: WP Cerber 8.9.3 - Broken Acces...

BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File Disclosure

Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability caused by improper validation of the 'READ.filePath' parameter in fileread script and SendCGICMD API, letting authenticated attackers read arbitrary system files. id: CVE-2019-25246 info: name: BEWARD...

WPS Hide Login <= 1.9.15.2 - Login Page Disclosure

The WPS Hide Login plugin for WordPress is vulnerable to Login Page Disclosure in all versions up to, and including, 1.9.15.2. This is due to a bypass that is created when the 'action=postpass' parameter is supplied. This makes it possible for attackers to easily discover any login page that may...

CVE-2023-1767

Entdeckung von Stored XSS auf snyk.io 19/03/23 CVE-2023-1767 Bericht zur verantwortungsvollen Offenlegung von Sicherheitslücken Blog-Beitrag zur Sicherheitslücke...

Disclosures

Offenlegungen Dieses Repository enthält meine Schwachstellenberichte, die weder unter eine NDA fallen noch durch die VRP-Nutzungsbedingungen eingeschränkt sind. Inhalt Fancy Product Designer Microsoft Xfinity...

CVE-2026-80558

creationtimestamp| type| source ---|---|--- 2026-08-27 08:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2gmdhwlv2t 2026-08-27 16:23:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

NETGEAR DGN2200 / DGND3700 - Admin Password Disclosure

NETGEAR DGN2200 / DGND3700 is susceptible to a vulnerability within the page 'BSWcxttongr.htm' which can allow a remote attacker to access this page without any authentication. The attacker can then use this password to gain administrator access of the targeted router's web interface. id:...

advisories

Sicherheitshinweise Sicherheitshinweise von Kelly Kaoudis @kaoudis und Freunden. Im Allgemeinen veröffentliche ich hier erst, nachdem der Hersteller den Patch bereitgestellt hat, oder 90 Tage nach Entdeckung der Schwachstelle. Viel Spaß beim Lesen! Die Advisories werden in der Reihenfolge der...

securitylab

GitHub Security Lab Este é o repositório git principal do GitHub Security Lab. Nós o usamos para estes propósitos principais: Compartilhamos com nossa comunidade algumas melhores práticas sobre pesquisa de segurança e divulgação de vulnerabilidades em nossos docs Usamos issues neste repositório...

Vulnerability-Disclosures

Divulgazioni di vulnerabilità Mandiant Questo repository descrive in dettaglio le vulnerabilità divulgate da Mandiant. Queste vulnerabilità sono state scoperte tramite ricerca interna, valutazioni Red Team o riscontrate in uso in the wild. I proof of concept PoC possono essere forniti o meno. Le...

Ctirix_RCE-CVE-2019-19781

CtirixRCE-CVE-2019-19781 Citrix ADC RCE cve-2019-19781 Video Seguici Vulnmachines YouTube Twitter Facebook...

rtx-cve-2023-45779

Questo repository è fornito COSÌ COM'È per accompagnareuna divulgazione di vulnerabilità di Meta Red Team X. Non è un progetto ufficiale di Meta e non sarà supportato come tale. Un insieme di script e artefatti che dimostrano l'individuazione e lo sfruttamento di dispositivi Android che includono...

CVE-2026-78568

creationtimestamp| type| source ---|---|--- 2026-08-25 09:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117155327251147740 2026-08-25 09:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtvherzvbl2f 2026-08-25 09:29:16+00:00| seen|...

owasp-threat-dragon-desktop

OWASP Threat Dragon Threat Dragon is a free, open-source, cross-platform threat modeling application including system diagramming and a rule engine to auto-generate threats/mitigations. It is an OWASP Incubator Project. The focus of the project is on great UX, a powerful rule engine and integrati...

CVE-2026-31337

creationtimestamp| type| source ---|---|--- 2026-08-24 08:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99429 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept|...

pub

❤ Sei ein Held, spende ein 🍺 🙂 ⟶ Ƀ : 1AZMeGVfCBbYwVYyG9s79pJDyocTZgiApa | Ξth : 0x438B38E30eF117C15fBfF833f9C2c70182925815 Exploit PoCs und Tools für Schwachstellen, die von tintinweb offengelegt wurden. pub root@kitploit: police line - do not cross ==== police line - do not cross ==== police lin...