APT_REPORT

APTREPORT raccolto da @blackorbird https://x.com/blackorbird Interessante raccolta di report APT, sample, malware, tecnologia e intelligence Gruppi APT per paese Gruppi di attori delle minacce monitorati da Palo Alto Networks Unit 42...

CVE-2019-19781

Remote-Code-Ausführung-Exploit CVE-2019-19781 – Citrix Application Delivery Controller & Gateway Exploit für Remote-Code-Ausführung für Citrix Application Delivery Controller und Citrix Gateway CVE-2019-19781 Verwendung: bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE z.B : bash...

CVE-2022-29856-PoC

CVE-2022-29856-PoC Minimaler PoC für CVE-2022-29856 Quelle: https://dolosgroup.io/blog/2022/4/28/anatomy-of-a-zero-day-how-to-decrypt-a-robot...

CVE-2019-0708

CVE-2019-0708 Einführung Microsoft hat sein monatliches Sicherheitsupdate für Mai veröffentlicht. In diesem Patch Tuesday ist CVE-2019-0708 enthalten, eine kritische Schwachstelle zur Remotecodeausführung, die es einem nicht authentifizierten Remote-Angreifer ermöglichen könnte, auf einem...

106362522

106362522 Riguardo al problema delle vulnerabilità di Exchange Server recentemente corrette da Microsoft dopo un attacco hacker, il team DEVCORE di Taiwan ha dichiarato di aver scoperto le vulnerabilità di sicurezza già il 5 gennaio e di averle segnalate a Microsoft, identificandole con i codici...

shakeitoff

shakeitoff Una versione più piccola, ridotta e pulita di InstallerFileTakeOver, ovvero l'exploit zero-day che è una "variante" di CVE-2021-41379 successivamente assegnato come CVE-2021-43883. Questa versione non apre una shell come InstallerFileTakeOver. Lo scopo di questo codice era creare una...

CVE-2021-44228-Demo

CVE-2021-44228-Demo यह परियोजना zero-day log4j exploit को साबित करने और परीक्षण करने के लिए है। निर्भरता सत्यापित करें ./mvnw dependency:list patch A सेट करें ENV LOG4JFORMATMSGNOLOOKUPS=true B जोड़ें vm option -Dlog4j2.formatMsgNoLookups=true C.1 जोड़ें properties log4j2.formatMsgNoLookups=true...

google-chrome-emergency-update

Aggiornamento di Sicurezza Urgente di Chrome Questo repository contiene informazioni e strumenti relativi all'aggiornamento urgente di Chrome di Google per correggere vulnerabilità di sicurezza critiche. 🚨 Avviso di Aggiornamento Urgente Google ha rilasciato un aggiornamento urgente di Chrome per...

Apache-Struts-0Day-Exploit

Apache-Struts-0Day-Exploit ثغرة تنفيذ تعليمات برمجية عن بُعد حرجة CVE-2018-11776 اكتُشفت في Apache Struts. التثبيت git clone https://github.com/LightC0der/Apache-Struts-0Day-Exploit/ الاستخدام: python ApacheStruts.py URL : www.example.com/ Shell : "الأوامر" أي ls, dir, whoami...

CVE-2023-36874

CVE-2023-36874 Solo a scopo dimostrativo. L'exploit funziona su client/server Windows vulnerabili. Compilare il codice e creare le directory c:\test\system32. Posizionare il proprio wermgr.exe in quella directory ed eseguire il PoC compilato...

cve-2015-0313

CVE-2015-0313 Quellcode der Adobe-Flash-Sicherheitslücke cve-2015-0313 aus dem Angler Exploit Kit Referenzen: http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-new-adobe-flash-zero-day-exploit-used-in-malvertisements/...

CVE-2022-24086

CVE-2022-24682 PoC Come funziona questo metodo di rilevamento? Come indicato negli advisory, le versioni 8.8.x precedenti alla 8.8.15 patch 30 update 1 sono vulnerabili agli attacchi; il template verifica le seguenti versioni: root@kitploit: - "8.8" - "8.8.6" - "8.8.7" - "8.8.8" - "8.8.9" -...

PT-2026-76804

MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled AUTH ENABLED=true but the undocumented, defaultless INTERNAL SERVICE SECRET environment variable is unset, the is internal request check in src/memos/api/middleware/auth.py fails open:...

Patch Tuesday - August 2026

Microsoft is publishing 421 vulnerabilities on August 2026 Patch Tuesday, including 236 vulnerabilities in Windows. This is lower volume than last month’s record-breaking behemoth, but still one of the largest Patch Tuesday totals ever. There is no reason to suppose that Patch Tuesday will ever...

CVE-2026-62839

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:18+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:24+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:15+00:00| seen|...

Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication

Metabase has warned that a maximum-severity security flaw impacting its business intelligence and data visualization software package has been exploited in the wild as a zero-day. The vulnerability CVSS score: 10.0, which does not carry a CVE identifier, allows an unauthenticated remote attacker ...

Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)

Overview On July 14, 2026, SonicWall published a security advisory addressing two vulnerabilities affecting SMA1000 Series remote access appliances, including the critical server-side request forgery SSRF vulnerability CVE-2026-15409 CVSS 10.0 and the high-severity code injection vulnerability...

Vulnerabilities found in Check Point Remote and Mobile Access VPN-products

Check Point has identified vulnerabilities in Remote and Mobile Access VPN products, specifically those implemented using the IKEv1 key exchange protocol. Two vulnerabilities have been identified in Check Point Security Gateways and Remote Access VPN environments that utilize the outdated IKEv1...

1click-gh-token-stealing-via-vscode-POC

1-Click GitHub Token Stealing via VSCode Proof-of-Concept exp...

Zero-Day Exploit Against Windows BitLocker

It's nasty, but it requires physical access to the computer: The exploit, named YellowKey, was published earlier this week by a researcher who goes by the alias Nightmare-Eclipse. It reliably bypasses default Windows 11 deployments of BitLocker, the full-volume encryption protection Microsoft...