GO-2026-6604 vulnerabilities

Vulnerabilities for packages: cert-manager, ingress-nginx-controller, external-dns, falco-no-driver, k8s-device-plugin, karpenter, flux, spire-server, kubernetes, loki, aactl...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: zarf, rancher, cert-manager, step, falco-no-driver, kyverno-policy-reporter, continuity, mesosphere-vsphere-csi, grafana-alloy, k6, atlantis, gitness, chartmuseum, gitlab-pages, hubble-ui, kyverno-policy-reporter-ui, juicefs, karpenter, opencost, openbao,...

GHSA-C3Q7-M35P-9QQ7 vulnerabilities

Vulnerabilities for packages: cert-manager, ingress-nginx-controller, external-dns, falco-no-driver, k8s-device-plugin, karpenter, flux, spire-server, kubernetes, loki, aactl...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: cert-manager, ingress-nginx-controller, external-dns, falco-no-driver, k8s-device-plugin, karpenter, flux, spire-server, kubernetes, loki, aactl...

Sapito

Sapito Authors: Sebastian Garcia [email protected], @eldracote, Veronica Valeros [email protected], @verovaleros About Sapito Sapito is a multicast DNS mDNS sniffer and interpreter written in Python. Sapito sniffs packets from a pcap or interface and interprets the findings. This means...

CVE-2020-35262

CVE-2020-35262: Stored XSS in Digisol DG-HR3400 Router Vulnerability Description It has been identified that the vulnerable endpoint doesn't have server side input validation and lacks client side filtering for any malicious script injection. An attacker can use this vulnerability to inject...

lockphish

Lockphish v2.0 Lockphish es la primera herramienta 07/04/2020 para ataques de phishing en la pantalla de bloqueo, diseñada para obtener credenciales de Windows, PIN de Android y Passcode de iPhone utilizando un enlace https. Tutorial de LockPhish: https://www.kalilinux.in/2020/05/lockphish.html...

lockphish

Lockphish v2.0 Lockphish it's the first tool 07/04/2020 for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode using a https link. LockPhish Tutorial: https://www.kalilinux.in/2020/05/lockphish.html Author: The Linux Choice Who deleted his...

d-os-descriptor

d-os-descriptor Summary The USB Gadget Subsystem includes security issues in the OS descriptor handling section of compositesetup function composite.c. Processing of properly crafted control transfer request messages result in device crash due to null pointer dereference or memory corruption...

CVE-2019-13361

CVE-2019-13361 How Packet 1: attacker updates wifi settings Packet 2: device replies with its ID and a success/error code Packet 3: attacker disarm device using the ID...

Azure-App-Tools

Azure-App-Tools Collection of tools to use with Azure Applications. https://azure.microsoft.com/en-us/get-started/apps/ Prerequisites Azure Powershell Module https://docs.microsoft.com/en-us/powershell/azure/install-az-ps?view=azps-3.8.0 Examples: Dynamic Device Codes Original PoC by @MrUn1k0d3r...

CVE-2002-0200

CVE-2002-0200 Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name. External reference at https://marc.info/?l=bugtraq&m=101174569103289&w=2 Author Alex Hernandez aka @alt3kx...

CVE-2021-47881

CVE-2021-47881 Local stack-based buffer overflow in dataSIMS Avionics ARINC 4.5.3 Data Device Corporation Hi, I'm Kağan Çapar. In February 2020 I found a local stack-based buffer overflow in DDC's dataSIMS avionics databus software and published a proof of concept on Exploit-DB in February 2021...

abdal-lockbox

🔐 Abdal LockBox 🌐 Read in your language: 🇬🇧 English | 🇨🇳 中文 | 🇷🇺 Русский | 🇪🇸 Español | 🇯🇵 日本語 | 🇮🇷 فارسی | 🇸🇦 العربية | 🇹🇷 Türkçe | 🇩🇪 Deutsch | 🇮🇳 हिन्दी Secure. Store. Autofill. — A privacy-first Android password manager by Abdal Security Group. Abdal LockBox keeps your credentials encrypted on...

EUVD-2026-95780

The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and retrieve the complete device and measurement topology of the system...

USN-8911-1 linux-oem-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Hardware crypto device drivers; - NVIDIA Tegra memory controller driver; - Network drivers; - USB core drivers; -...

Root-My-Device

Root My Device A fork of BuSung-dev/Root-My-Galaxy, under the Apache License 2.0 — see LICENSE and Credits. Root My Device is a one-click installer for explicitly supported firmware builds. The application itself is kept separate from device offsets, native exploit payloads, and KernelSU build...

CVE-2026-98203

A flaw was found in the Linux kernel's SoC System on Chip button array driver. The driver fails to verify that the button descriptor package contains entries before accessing them during device initialization. This issue may allow an invalid device configuration to trigger an out-of-bounds memory...

CVE-2026-98239

A flaw was found in the Linux kernel's LAN743x network device driver. This vulnerability allows an attacker capable of transmitting network traffic to an affected system to cause a Denial of Service DoS or memory corruption. The issue occurs because the driver attempts to update checksum...

process-enumeration-stealth

🚴 process-enumeration-stealth What is this? This is a simple PoC which allows you to return a list of PIDs currently using NTFS, by querying the \ntfs\ base device the Windows filesystem base object. Using this method circumvents the need to use typical APIs, such as NtQuerySystemInformation or t...