204 matches found
shakeitoff
shakeitoff A smaller, minimized, and cleaner version of InstallerFileTakeOver aka the zero-day exploit that is a "variation" of CVE-2021-41379 later assigned CVE-2021-43883. This version does not pop a shell like InstallerFileTakeOver. The point of this code was to create a simpler proof of conce...
CVE-2019-0708
CVE-2019-0708 Introduction Microsoft has released its monthly security update for May. Included in this month's Patch Tuesday release is CVE-2019-0708, a critical remote code execution vulnerability that could allow an unauthenticated remote attacker to execute remote code on a vulnerable target...
CVE-2019-19781
Remote Code Execution Exploit CVE-2019-19781- Citrix Application Delivery Controller & Gateway Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway CVE-2019-19781 Usage : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE e.g : bash CVE-2019-19781.sh...
CVE-2023-36874
CVE-2023-36874 For demonstration purposes only. Exploit works on vulnerable Windows clients/servers. Compile code and create c:\test\system32 directories. Place your wermgr.exe in that directory and run compiled PoC...
Apache-Struts-0Day-Exploit
Apache-Struts-0Day-Exploit Critical Remote Code Execution Vulnerability CVE-2018-11776 Found in Apache Struts. Installation git clone https://github.com/LightC0der/Apache-Struts-0Day-Exploit/ Usage: python ApacheStruts.py URL : www.example.com/ Shell : "Commands" i.e ls, dir, whoami...
cve-2015-0313
CVE-2015-0313 Adobe Flash vulnerability source code cve-2015-0313 from Angler Exploit Kit Reference: http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-new-adobe-flash-zero-day-exploit-used-in-malvertisements/...
APT_REPORT
APTREPORT recopilado por @blackorbird https://x.com/blackorbird Interesante colección de informes APT, muestras, malware, tecnología e inteligencia Grupos APT por país Grupos de actores de amenaza rastreados por Palo Alto Networks Unit 42...
106362522
106362522 Riguardo al problema delle vulnerabilità di Exchange Server recentemente corrette da Microsoft dopo un attacco hacker, il team DEVCORE di Taiwan ha dichiarato di aver scoperto le vulnerabilità di sicurezza già il 5 gennaio e di averle segnalate a Microsoft, identificandole con i codici...
CVE-2022-29856-PoC
CVE-2022-29856-PoC PoC minimale per CVE-2022-29856 Crediti: https://dolosgroup.io/blog/2022/4/28/anatomy-of-a-zero-day-how-to-decrypt-a-robot...
CVE-2022-24086
CVE-2022-24682 PoC Come funziona questo metodo di rilevamento? Come indicato negli advisory, le versioni 8.8.x precedenti alla 8.8.15 patch 30 update 1 sono vulnerabili agli attacchi; il template verifica le seguenti versioni: root@kitploit: - "8.8" - "8.8.6" - "8.8.7" - "8.8.8" - "8.8.9" -...
CVE-2021-44228-Demo
CVE-2021-44228-Demo Dieses Projekt dient dem Nachweis und Testen des Zero-Day-log4j-Exploits Abhängigkeit überprüfen ./mvnw dependency:list Patch A setze die Umgebungsvariable LOG4JFORMATMSGNOLOOKUPS=true B Füge VM-Option -Dlog4j2.formatMsgNoLookups=true hinzu C.1 Füge Eigenschaft...
Ashwesker-CVE-2026-20045
🚨 CVE-2026-20045 — Analisi della Zero-Day 🚨 🧨 Cos'è Una vulnerabilità critica di esecuzione remota di codice RCE che colpisce diversi prodotti Cisco Unified Communications. È stata sfruttata attivamente in ambienti reali prima del rilascio delle patch. 🔥 Perché è pericolosa 🚫 Nessuna autenticazio...
google-chrome-emergency-update
Aggiornamento di Sicurezza Urgente di Chrome Questo repository contiene informazioni e strumenti relativi all'aggiornamento urgente di Chrome di Google per correggere vulnerabilità di sicurezza critiche. 🚨 Avviso di Aggiornamento Urgente Google ha rilasciato un aggiornamento urgente di Chrome per...
PT-2026-76804
MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled AUTH ENABLED=true but the undocumented, defaultless INTERNAL SERVICE SECRET environment variable is unset, the is internal request check in src/memos/api/middleware/auth.py fails open:...
Patch Tuesday - August 2026
Microsoft is publishing 421 vulnerabilities on August 2026 Patch Tuesday, including 236 vulnerabilities in Windows. This is lower volume than last month’s record-breaking behemoth, but still one of the largest Patch Tuesday totals ever. There is no reason to suppose that Patch Tuesday will ever...
CVE-2026-62839
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:18+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:24+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:15+00:00| seen|...
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
Metabase has warned that a maximum-severity security flaw impacting its business intelligence and data visualization software package has been exploited in the wild as a zero-day. The vulnerability CVSS score: 10.0, which does not carry a CVE identifier, allows an unauthenticated remote attacker ...
Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)
Overview On July 14, 2026, SonicWall published a security advisory addressing two vulnerabilities affecting SMA1000 Series remote access appliances, including the critical server-side request forgery SSRF vulnerability CVE-2026-15409 CVSS 10.0 and the high-severity code injection vulnerability...
Vulnerabilities found in Check Point Remote and Mobile Access VPN-products
Check Point has identified vulnerabilities in Remote and Mobile Access VPN products, specifically those implemented using the IKEv1 key exchange protocol. Two vulnerabilities have been identified in Check Point Security Gateways and Remote Access VPN environments that utilize the outdated IKEv1...
