20191 matches found
SOC-L1-OSINT-Investigation-MikroTik-CVE-2018-1156
SOC L1 Threat Investigation: MikroTik RouterOS Multiple Exposed Services Analyst: Jonatan Alexander Guerrero Gomez | Role Target: SOC L1 / Jr. Cybersecurity Analyst Status: Investigation Closed | Severity: High Executive Summary Proactive threat hunting exercise indentifying a public-facing...
SignChecker
SignChecker Test tool to demonstrate the vulnerability of CVE-2022-21449...
log4j2-vulnerable-spring-app
Aplicación de muestra de prueba para Log4j 2 CVE-2021-44228 Basada en spring-boot-starter-log4j2:2.6.1 log4j 2.14.1 Endpoints disponibles Endpoint| Método de solicitud| Parámetros ---|---|--- vulnerablerequestget| GET| v=payload vulnerablerequestpost| POST| v=payload vulnerablerequestheaderua| GE...
CVE-2020-27194-exp
CVE-2020-27194-exp test...
Malicious code in @dransay/phone-fix-test (npm)
@dransay/[email protected] is a dependency-confusion probe claiming the internal @dransay/ namespace, not an identified public package. Its preinstall hook runs on npm install as node beacon.js and sends a DNS lookup and an HTTPS GET to db3klhbi6i9hark1kegg174t38h33b6wt.oast.site, using the...
MAL-2026-17698 Malicious code in @dransay/phone-fix-test (npm)
@dransay/[email protected] is a dependency-confusion probe claiming the internal @dransay/ namespace, not an identified public package. Its preinstall hook runs on npm install as node beacon.js and sends a DNS lookup and an HTTPS GET to db3klhbi6i9hark1kegg174t38h33b6wt.oast.site, using the...
com.github.gitssie:play-rabbitmq_2.12 (2.6.6), com.hellosoda.rmq:rmq-core_2.11 (>=1.0.7, <=1.0.9) +9 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (4.1.1)
com.rabbitmq:amqp-client MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.gitssie:play-rabbitmq2.12 2.6.6 - com.hellosoda.rmq:rmq-core2.11 =1.0.7, =1.0.7, =1.0-alpha5, =0.0.7...
com.rabbitmq:perf-test (>=1.4.0, <=1.4.2), com.sportradar.mts.sdk.app:mts-sdk-app (>=2.3.6.0-1, <=2.4.1.2) +6 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (4.2.2)
com.rabbitmq:amqp-client MAVEN version 4.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.rabbitmq:perf-test =1.4.0, =2.3.6.0-1, =2.3.6.0-1, =2.3.6.0-1, =0.1.5, =2.1.0, =2.1.0, =2.1.0, =2.1.4 Sourc...
com.github.gitssie:play-rabbitmq_2.12 (2.6.6), com.hellosoda.rmq:rmq-core_2.11 (>=1.0.7, <=1.0.9) +9 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (4.1.1)
com.rabbitmq:amqp-client MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.gitssie:play-rabbitmq2.12 2.6.6 - com.hellosoda.rmq:rmq-core2.11 =1.0.7, =1.0.7, =1.0-alpha5, =0.0.7...
Faraday 5.25.0
Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use...
[SECURITY] [DLA 4821-2] libmodule-cpants-analyse-perl regression update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4821-2 [email protected] https://www.debian.org/lts/security/ Arnaud Rebillout October 06, 2026 https://wiki.debian.org/LTS -...
log4j-samples
log4j-muestras Muestras de versiones de la librería log4j para ayudar a los escáneres/detectores de log4j incluyendo nuestro propio log4j-detector a mejorar su precisión para detectar CVE-2021-45046 y CVE-2021-44228. Las muestras incluyen jars sombreados, uber jars, jars ejecutables de spring-boo...
[SECURITY] Fedora 43 Update: python3.12-3.12.15-1.fc43
Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...
[SECURITY] Fedora 45 Update: ocaml-ppx-inline-test-0.17.1-10.fc45
Ppxinlinetest is a syntax extension for writing inline tests in OCaml code...
[SECURITY] Fedora 45 Update: ocaml-ounit-2.2.7-23.fc45
OUnit is a unit test framework for OCaml. It allows one to easily create unit-tests for OCaml code. It is loosely based on HUnit, a unit testing framework for Haskell. It is similar to JUnit, and other xUnit testing frameworks...
CVE-2023-4966
CVE-2023-4966 just to test!...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: comedi: das6402: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: c / IRQs 2, 3, 5, 6, 7, 10, 11, 15 are valid for “enhanced” mode / if 1 options1 & 0x8cec However, it-optionsi is ...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: i40e: Fixed the call trace in setuptxdescriptors. After a PF reset and the use of ethtool -t, there was a call trace in dmesg. Sometimes this led to a panic. After some time, approximately 5 seconds, between a reset and a test...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ath9khtc: fixed potential out-of-bounds access due to an invalid rxstatus-rskeyix parameter. The rxstatus-rskeyix parameter is eventually passed to testbit, so we need to ensure that it is within the allowed range of the bitmap...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: Tracing: Build event generation tests are now performed only as modules. The kprobes and synth event generation test modules add events and lock them get a reference to those event files in the module initialization function,...