aapanel

aapanel aapanel 6.6.6 - CVE-2020-14950 Description : allows remote authenticated users to execute arbitrary commands via the setting menu of Sotfware Store. Affected version : All = 6.6.6 Information To make this PoC, I just installed the software using docker-compose Vulnerability Type : Remote...

slsa

SLSA（"salsa"）是软件工件供应链级别（Supply-chain Levels for Software Artifacts） SLSA（发音 “ salsa ”）是一个从源头到服务的安全框架，为所有使用软件的人提供了一种通用语言，用于提高软件安全和供应链完整性的各个级别。它让你从足够安全到在链条的任何环节都尽可能具有弹性。 了解 SLSA 参见 https://slsa.dev 了解 SLSA。 这个仓库里有什么？ 该仓库的主要内容是 spec/ 目录，该目录包含核心 SLSA 规范，以及 www/ 目录，该目录包含 slsa.dev 网站的源文件。在该目录的 README.m...

msxml4-remediation

MSXML 4.0 Remediation PowerShell PowerShell script to remediate security findings related to Microsoft XML Core Services MSXML 4.0 , which is unsupported and commonly flagged by vulnerability scanners. This script I made unregisters the .dll files for MSXML 4 and renames them. This remediates the...

threat-modeling-playbook

Intro We aim to improve product and software security with our new threat modeling playbook. We consider threat modeling as a foundational activity to improve your software assurance. We are convinced that a good threat modeling practice will measurably decrease security issues of delivered...

hackrf

HackRF Este repositorio contiene diseños de hardware y software para HackRF, una plataforma de radio definida por software SDR de bajo costo y código abierto. foto de fd0 de https://github.com/fd0/hackrf-one-pictures autor principal: Michael Ossmann [email protected] Información sobre HackRF...

CVE-2019-0708

This repository does not have a README...

GhostTrace

GhostTrace Find what software left behind on Windows, before it finds its way back. GhostTrace is a local Windows forensic trace hunter for incident responders, system administrators, and security-minded power users. It maps persistence, execution, activity, and leftover artifacts into a reviewab...

gitlab-profile

TEST STATUS : ↳ core-orchestrator tester ↳ documentation tester CREATION DATE: 2025-10-24 09:50 PM ↳ Alberto Marangelo - @theGlitched !WARNING ⚠️ This project is in beta! 🎉 yeah! We're happy to announce that the beta version will soon be complete! From the version 0.153 is currently started all...

CVE-2026-103102

Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a denial of service. Exploitation of this issue requires accessing a gateway call from a WebRTC/API client...

CVE-2026-103104

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation which allows a remote attacker to trigger a software abort resulting in a denial of service...

CVE-2026-103100

Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allows a malicious attacker to trigger a software abort resulting in a denial of service...

EUVD-2026-89585

Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media implementation that allows a remote attacker to trigger memory corruption or a software abort resulting in a denial of service. A crafted media stream may result in a controlled abort durin...

CVE-2026-103108

The software Pexip Infinity versions before 38.2, as well as 39.0, 39.1, and 40.0, is vulnerable to a denial of service condition. This is caused by improper input validation within the media implementation , which allows a remote attacker to trigger a software abort. No specific exploit details ...

CVE-2026-103102

Pexip Infinity before 41.0 is affected by improper input validation in the signaling implementation which allows a remote attacker to trigger a software abort resulting in a denial of service. Exploitation of this issue requires accessing a gateway call from a WebRTC/API client...

CVE-2026-103100

Pexip Infinity versions prior to 40.1 are vulnerable to a denial of service (DoS) condition. The root cause is improper input validation within the signaling implementation , which allows a malicious attacker to trigger a software abort . No specific exploit information or remediation details are...

EUVD-2026-89575

Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allows a malicious attacker to trigger a software abort resulting in a denial of service...

CVE-2026-103100

Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allows a malicious attacker to trigger a software abort resulting in a denial of service...

CVE-2026-103099

Pexip Infinity before 41.1 is affected by improper input validation in the media implementation that allows a remote attacker to trigger a software abort resulting in a denial of service...

Navidrome <=0.54.5 - Authentication Bypass in Subsonic API

Navidrome is an open source web-based music collection server and streamer. Starting in version 0.52.0 and prior to version 0.54.5, in certain Subsonic API endpoints, a flaw in the authentication check process allows an attacker to specify any arbitrary username that does not exist on the system,...

Blue Angel Software Suite (5V Technologies) - OS Command Injection

Blue Angel 5V Technologies Blue Angel Software Suite through 20230920, as used in Analog Telephone Adapter ATA and Voice over IP VoIP devices, allows remote authenticated attackers to execute arbitrary OS commands as root via shell metacharacters in the pingaddr parameter to...