ShadowSpray

ShadowSpray Ein Tool, um Shadow Credentials über eine gesamte Domain zu streuen, in der Hoffnung, längst vergessene GenericWrite/GenericAll-DACLs über andere Objekte in der Domain auszunutzen. Warum dieses Tool In vielen Engagements sehe ich in BloodHound, dass die Gruppe „Everyone“ /...

pi-hole

Blocco pubblicitario a livello di rete tramite il tuo hardware Linux Pi-hole® è un DNS sinkhole che protegge i tuoi dispositivi da contenuti indesiderati senza installare alcun software lato client. Facile da installare : le nostre finestre di dialogo ti guidano attraverso il semplice processo di...

zmap

ZMap: The Internet Scanner ZMap is a fast stateless single packet network scanner designed for Internet-wide network surveys. On a typical desktop computer with a gigabit Ethernet connection, ZMap is capable of scanning the entire public IPv4 address space on a single port in under 45 minutes. Fo...

lsarelayx

lsarelayx Introduzione lsarelayx è uno strumento di relay NTLM di sistema progettato per inoltrare le richieste di autenticazione NTLM in arrivo all'host su cui è in esecuzione. lsarelayx inoltra qualsiasi richiesta di autenticazione in arrivo, inclusa SMB. Poiché lsarelayx si aggancia ai flussi ...

combobulator

Dependency Combobulator Dependency Combobulator is an Open-Source, modular and extensible framework to detect and prevent dependency confusion leakage and potential attacks. This facilitates a holistic approach for ensuring secure application releases that can be evaluated against different sourc...

CVE-2026-1953

CVE-2026-1953 | XSS persistente — Nukegraphic CMS v3.1.2 Panoramica Una vulnerabilità di Cross-Site Scripting XSS persistente è presente in Nukegraphic CMS v3.1.2. Il problema consente a un utente autenticato di iniettare JavaScript dannoso nel campo nome del profilo , che viene salvato nel...

WordPress Smush plugin < 4.3.2 - Admin+ Network-Wide RCE vulnerability

Admin+ Network-Wide RCE vulnerability discovered by Jakub Herman in WordPress Plugin Smush Image Compression and Optimization versions 4.3.2...

WordPress Defender Security plugin < 6.2.0 - Admin+ Network-Wide RCE vulnerability

Admin+ Network-Wide RCE vulnerability discovered by Jakub Herman in WordPress Plugin Defender Security versions 6.2.0...

CVE-2026-19223

The Smush WordPress plugin (Image Compression and Optimization) before 4.3.2 contains an Admin+ Network-Wide RCE vulnerability in its Hub Connector component, discovered by Jakub Herman . A network-wide setting is not restricted to network administrators , allowing an administrator of any single ...

CVE-2026-19223 Smush < 4.3.2 - Admin+ Network-Wide RCE via Hub Connector on Multisite

The Smush WordPress plugin before 4.3.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...

usbsnoop

usbsnoop — Live-USB-Transfer-Sniffer mit zwei fentry-Hooks Ein Echtzeit-, farbcodierter Feed von USB-Verkehr systemweit — aufgebaut auf den zwei universellen URB-Engpässen, durch die jeder Host-Controller-Treiber leitet, sodass er auf xHCI/EHCI/OHCI/dwc gleichermaßen funktioniert, ohne...

CVE-2026-46242

CVE-2026-46242 poc completo e lpe Faixa do Kernel Estado Notas 5.15.209 - 5.16 Afetado Commit introdutor backportado 6.1.175 - 6.2 Afetado Commit introdutor backportado 6.4 - 6.18.32 Afetado Bug introduzido na mainline 6.4 6.19 - 7.0.9 Afetado Inclui a estável mais recente v6.1-based Pixel 8, mai...

Reticulum

Reticulum Network Stack Dieses Repository istein öffentlicher Spiegel. Die gesamte Entwicklung findet woanders statt. Um die grundlegende Philosophie und Ziele dieses Systems zu verstehen, lesen Sie den Zen of Reticulum. Reticulum ist der kryptografiebasierte Netzwerk-Stack zum Aufbau lokaler und...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

CVE-2026-17113

A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...

xmap

XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques...

AdGuardHome

Centro di protezione della privacy per te e i tuoi dispositivi Server DNS gratuito e open source, potente, per bloccare annunci e tracker su tutta la rete. AdGuard.com | Wiki | Reddit | Twitter | Telegram AdGuard Home è un software a livello di rete per bloccare annunci e tracciamento. Dopo averl...

EUVD-2026-63589

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a tenant, who has the ability to create HelmRelease custom resources CRs, to bypass existing security controls. The system's HelmRelease controller processes Helm chart templates using its own elevated...

CVE-2026-67567 Multicloud-operators-subscription: multicloud-operators-subscription: helmrelease chart applied with controller sa without gvk or namespace restriction

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a tenant, who has the ability to create HelmRelease custom resources CRs, to bypass existing security controls. The system's HelmRelease controller processes Helm chart templates using its own elevated...

CVE-2026-67567 Multicloud-operators-subscription: multicloud-operators-subscription: helmrelease chart applied with controller sa without gvk or namespace restriction

A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a tenant, who has the ability to create HelmRelease custom resources CRs, to bypass existing security controls. The system's HelmRelease controller processes Helm chart templates using its own elevated...