CVE-2026-79097

A flaw was found in Chromium. A remote attacker could exploit a use-after-free vulnerability in the V8 JavaScript engine by crafting a malicious HTML page. This could allow the attacker to execute arbitrary code within the sandbox environment, potentially leading to a compromise of the affected...

CVE-2026-79111

A flaw was found in Dawn in Google Chrome. A remote attacker could exploit improper input validation by crafting a malicious HTML page. This could potentially lead to arbitrary code execution outside of the browser's security sandbox...

open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder

A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable...

kas Persistently Disables SSH Host Key Checking

Summary kas persistently disables SSH host key checking for the invoking user when internal SSH key setup is triggered via SSHPRIVATEKEY or SSHPRIVATEKEYFILE and no user-specific SSH configuration file exists so far. When this path is used, kas creates /.ssh/config with a global Host rule...

Malicious code in hydration-vli-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44daff58b8bb4bd4dfad78141323781dc5972c3b5e5a4506834c2e69ff7d0480 The package's main entry dist/index.mjs locates dist/internal/math.mjs, chmods it to 0755, and spawns it as a detached child process every time the...

LeitWacht

GitLab Runner Leitwacht Applicazione dell'egress di rete per i container CI/CD di GitLab Runner. Leitwacht previene gli attacchi alla supply chain impedendo l'esfiltrazione di segreti, controllando a cosa ogni container job può accedere sulla rete. Come Funziona Leitwacht è un agente standalone c...

Moderate: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

pam security update

An update is available for pam. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Pluggable Authentication Modules PAM provide a system to set up authentication...

CVE-2026-59683 OpenRGB: local and remote system compromise via arbitrary file write using attacker controlled strings

The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full system compromise from local or remote if the daemon is running as root or a full account takeover if the daemon is running in user...

EUVD-2026-66381

A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user...

open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder

A flaw was found in open-iscsi. An unauthenticated man-in-the-middle MITM attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service DoS condition, making the affected system unavailable...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by improper SSL/TLS certificate validation vulnerability in JWT service component

Summary IBM Integrated Analytics System includes JWT service as an internal component responsible for JSON Web Token authentication. A security issue was detected in the apjwtservice.py module where SSL/TLS server certificate validation is not enabled on an SSL/TLS connection. The absence of...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component

Summary IBM Integrated Analytics System includes Magneto as an internal resource manager component. CVE-2025-36271 affects the resmgr.py module in Magneto, where a predictable salt value is used in cryptographic operations. The use of a predictable salt weakens the effectiveness of hashing and...

CVE-2024-7928

FastAdmin - Exploit della vulnerabilità di Path Traversal Una vulnerabilità, classificata come problematica, è stata trovata in FastAdmin fino alla versione 1.3.3.20220121. Questo problema riguarda una funzionalità sconosciuta del file /index/ajax/lang. La manipolazione dell'argomento lang porta ...

CVE-2025-32463

Vulnerability Overview CVE-2025-32463 interessa Sudo versioni 1.9.14 fino a 1.9.16 corretto in 1.9.17p1. Quando Sudo viene invocato con l'opzione --chroot, potrebbe caricare la configurazione da un percorso controllato dall'attaccante, portando all'esecuzione arbitraria di codice e all'escalation...

FTPBuster

FTPBuster FTPBuster è un potente strumento da riga di comando progettato per attacchi di forza bruta a server FTP, SFTP e FTPS esplicito tramite attacchi basati su dizionario. È pensato per hacking etico e penetration testing Caratteristiche Supporto per forza bruta su FTP , SFTP e FTPS esplicito...

CVE-2020-0665

CVE-2020-0665 - Bypass del Filtro SID Proof of Concept per CVE-2020-0665, che permette di bypassare il filtraggio SID nelle foreste di Active Directory Attacco Cross Forest. Requisiti per l'attacco La macchina del Domain Controller di destinazione non deve essere stata aggiornata dopo febbraio...

CVE-2025-38001

CVE-2025-38001 Dramma della Famiglia RBTree Linux HFSC Eltree Use-After-Free - Proof of Concept per Debian 12 Questo PoC sfrutta un attacco a livello di pagina basato solo sui dati, utilizzando trasformazioni RBTree per compromettere il sistema. L'exploit è portabile e funziona su tutte le istanz...

CVE-2018-19788

CVE-2018-19788 Semplice exploit per CVE-2018-19788 Per usarlo, devi creare un utente con UID INTMAX in Policy Kit oppure avere già un utente a bassi privilegi con tale UID. L'UID può essere specificato nella creazione dell'utente come segue, e utilizzato prima dell'esecuzione dello script:...

whale-sentinel-services

🐋 Servizi Whale Sentinel 🔧 Panoramica Whale Sentinel Services è il backend centralizzato dell'ecosistema di rilevamento delle minacce Whale Sentinel. Questi microservizi eseguono il rilevamento in tempo reale delle minacce, il coordinamento degli agenti, l'analisi DGA e l'ispezione degli attacchi...