awesome-osint

Awesome OSINT Una lista curata di strumenti e risorse OSINT incredibilmente fantastici. L'open-source intelligence OSINT è l'intelligence raccolta da fonti pubblicamente disponibili. Nella comunità dell'intelligence IC, il termine "open" si riferisce a fonti palesi e pubblicamente disponibili in...

St2-052

Test del PoC per S2-052 nome originale: distribuzione del war su Tomcat Indirizzo originale: http://blog.csdn.net/caiqiiqi/article/details/77861477 Scarica l'ultima versione interessata, struts-2.5.12, dal sito ufficiale di Struts2, all'indirizzo:...

CVE-2021-22911

CVE-2021-22911 Iniezione NoSQL cieca pre-autenticazione che porta all'esecuzione remota di codice in Rocket Chat 3.12.1 Il metodo getPasswordPolicy è vulnerabile ad attacchi di iniezione NoSQL e non richiede autenticazione/autorizzazione. Può essere utilizzato per assumere il controllo di account...

CVE-2026-29114

CVE-2026-29114 — Certificato root CA del dispositivo Dahua esposto Tipo di advisory: Divulgazione di sicurezza coordinata dal vendor ID CVE: CVE-2026-29114 Vendor: Dahua Technology Pubblicata: 2026-06-10T05:44:50 UTC Ultima modifica: 2026-06-10T05:44:50 UTC Fonte: Dahua Product Security Incident...

vault

Vault Please note : We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault, please responsibly disclose by contacting us at [email protected]. Website: developer.hashicorp.com/vault Announcement list: Google Groups Discussion...

Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite

Summary There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite CVE-2026-69152, CVE-2026-59645, CVE-2026-16221, CVE-2026-18446, CVE-2026-14257, CVE-2026-34481, CVE-2026-12802, CVE-2026-13586, CVE-2026-15055, CVE-2026-59639, CVE-2026-59642, CVE-2026-59647,...

norimaci

Norimaci "Norimaci" is a simple and lightweight malware analysis sandbox for macOS. This tool was inspired by "Noriben". Norimaci uses the features of OpenBSM or Monitor.app to monitor macOS system activity instead of Sysinternals Process Monitor procmon. Norimaci consists of 3 Python scripts...

printix-CVE-2022-30006

CVE-2022-30006 Simple Release | Print Friendly Eine Schwachstelle vom Typ „Exposure of Sensitive Information to an Unauthorized Actor“ und/oder „Exposed Dangerous Method or Function“ in PrintixService.exe, in Kofax Printix’ „Printix Secure Cloud Print Management“, Version 1.3.1156.0 und darunter,...

printix-CVE-2022-29554

CVE-2022-29552 Rilascio semplice | Versione stampabile Una vulnerabilità di "Mishandling of Input to API" o "Exposed Dangerous Method or Function" in PrintixService.exe, in "Printix Secure Cloud Print Management" di Kofax Printix, versione 1.3.1156.0 e precedenti, consente a un attaccante locale ...

printix-CVE-2022-29553

CVE-2022-29553 Simple Release | Print Friendly Uma vulnerabilidade "Exposed Dangerous Method or Function" ou "Use of Hard-coded, Security-relevant Constants" no PrintixService.exe, no "Printix Secure Cloud Print Management" da Kofax Printix, versão 1.3.1156.0 e anteriores, permite que um atacante...

printix-CVE-2022-29551

CVE-2022-29551 Versione semplice | Versione stampabile Una vulnerabilità "Exposed Dangerous Method or Function" in PrintixService.exe, in "Printix Secure Cloud Print Management" di Kofax Printix, versione 1.3.1156.0 e precedenti, consente a un attaccante locale o remoto di installare driver di...

ScheduleRunner

ScheduleRunner - Uno strumento C con maggiore flessibilità per personalizzare le attività pianificate per persistenza e movimento laterale nelle operazioni di red team L'attività pianificata è una delle tecniche di attacco più popolari dell'ultimo decennio e viene ancora comunemente utilizzata da...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

CVE-2017-14263

HoneywellNVRvul CVE-2017-14263 xfuturesec Co., Ltd Zuerst die SessionID für einen Gastbenutzer erhalten. Wir können die SessionID aus jeder HTTP-Anfrage finden. Zum Beispiel: POST https://192.168.1.104/RPC2 HTTP/1.1 Accept: text/javascript, text/html, application/xml, text/xml X-Requested-With:...

CVE-2026-5118

🔥 CVE-2026-5118 Divi Form Builder Um campo oculto. Um valor alterado. Acesso total a todo o site. 🧨 O que o Atacante Pode Fazer? 🔬 Análise da Vulnerabilidade Localização da Vulnerabilidade root@kitploit: includes/shared/handlers/FormSubmissionHandler.php → createuser Código Vulnerável...

CVE-2026-5076

☠️ CVE-2026-5076 ARMember Premium = 7.3.1 असुरक्षित पासवर्ड रीसेट तंत्र → पूर्ण व्यवस्थापक खाता अधिग्रहण प्लेनटेक्स्ट पासवर्ड रीसेट कुंजियाँ डेटाबेस में संग्रहीत + SQL इंजेक्शन = पूर्ण व्यवस्थापक अधिग्रहण 📋 भेद्यता जानकारी आइटम| विवरण ---|--- CVE ID| CVE-2026-5076 प्लगइन| ARMember – सदस्यता प्लगइन...

Elementor Pro <=4.2.1 - Unauthenticated Arbitrary File Upload via Form Handler

Elementor Pro plugin for WordPress in versions =4.2.1 is vulnerable to unauthenticated arbitrary file upload in the Forms module File Upload field. The validation and processfield methods iterate over submitted file entries with different early-exit logic for UPLOADERRNOFILE entries. When an...

KeePass-CVE-2023-24055

KeePass-CVE-2023-24055 KeePass CVE-2023-24055 Reproduktion KeePass CVE-2023-24055 Reproduktion 1. Vorbereitung der Maschinen: Kali 192.168.232.129, Windows 10 192.168.232.128 2. KeePass-Version: 2.53 2. Prinzip: Durch Ändern der KeePass-Konfigurationsdatei KeePass.config.xml wird eine...

Security Bulletin: Security Vulnerabilities have been found in IBM Sovereign Core

Summary Security Vulnerabilities have been addressed in IBM Sovereign Core Vulnerability Details CVEID:CVE-2026-45022 DESCRIPTION: go-git is an extensible git implementation library written in pure Go. Prior to 5.19.0 and 6.0.0-alpha.3, go-git may parse malformed Git objects in a way that differs...

blueshrimp

Proof-of-concept for CVE-2025-48593 based on examining the patch. You shouldn't worry about this. As far as I can tell, phones are NOT vulnerable to CVE-2025-48593. The issue only affects Android devices that support acting as Bluetooth headphones / speakers, such as some smartwatches, smart...