GHSA-54P9-H82J-F925 Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

Description A reference leak in the items-view union and subtraction operators of aio-libs/multidict 6.7.0 through 6.9.0 C extension lets a remote client drive unbounded, unreclaimable memory growth by having each operand element leak one key-identity object and one value object. The...

impostor

Impostor 用于拦截 NTLMv2 哈希的 SMB1 服务器，使用 C 语言编写。 该项目旨在实现一个作为状态机的 SMB1 服务器，能够正确接受并响应客户端请求以欺骗客户端，使其完成 NTLM 身份验证，从而泄露自身的 NTLMv2 哈希（格式与 hashcat/john 兼容）。 该工具面向进攻性安全/红队活动及教育目的（研究 SMB1/NTLM 协议），仅限在您拥有或获得明确授权的环境中使用。 工作原理 该服务器伪装成一个合法的 SMB1 服务器，并引导客户端通过一个包含 3 个阶段的状态机： 状态| 转换 ---|--- 1. NEGOTIATE| 如果收到 SMB...

Enigma-

Enigma Ghidraの解析コア（SoftwareModeling + Utility）をJava/JVM依存なしで再実装したC++版。AI統合、パフォーマンス、組み込みやすさを目的として構築。Enigma Engineプロジェクトの一部。 Enigma Engine Ghidraの解析コアをC++で再実装 — JVMなし、Javaなし、完全な制御。 これは何か？ Ghidraは、NSAがJavaで構築した強力なリバースエンジニアリングフレームワークです。 Enigmaはその解析コア をモダンC++でゼロから書き直したもので、以下のように設計されています： 組み込み可能 —...

CVE-2026-105740

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any authenticated Langflow user can achieve Remote Code Execution RCE on the server by adding an MCP server with the "Stdio" transport. The user-supplied command field is passed directly to bash -c "exe...

CVE-2026-105740

Langflow versions prior to 1.9.0 are vulnerable to Remote Code Execution (RCE) via the MCP Stdio transport . An authenticated user can execute arbitrary OS commands because the user-supplied command field is passed directly to bash -c "exec {command}" without validation, allowlisting, or sandboxi...

CVE-2026-105740 Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any authenticated Langflow user can achieve Remote Code Execution RCE on the server by adding an MCP server with the "Stdio" transport. The user-supplied command field is passed directly to bash -c "exe...

EUVD-2026-92799

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any authenticated Langflow user can achieve Remote Code Execution RCE on the server by adding an MCP server with the "Stdio" transport. The user-supplied command field is passed directly to bash -c "exe...

CVE-2026-105740 Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any authenticated Langflow user can achieve Remote Code Execution RCE on the server by adding an MCP server with the "Stdio" transport. The user-supplied command field is passed directly to bash -c "exe...

CVE-2026-105740 Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any authenticated Langflow user can achieve Remote Code Execution RCE on the server by adding an MCP server with the "Stdio" transport. The user-supplied command field is passed directly to bash -c "exe...

Important: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

A flaw was found in Vim, an open-source command-line text editor. An attacker could craft a malicious tags file that, when processed by Vim's C omni-completion feature, leads to insufficient escaping of input. This vulnerability allows for the execution of arbitrary Ex commands and, subsequently,...

CVE-2017-8759

Exploit toolkit for CVE-2017-8759 嫌な奴になるな C で書かれたシンプルなツールで、.NET Framework 2.0、3.5、3.5.1、4.5.2、4.6、4.6.1、4.6.2、4.7 の RCE 脆弱性を処理します。 別名「.NET Framework リモートコード実行の脆弱性」。 ヘルプ C:\Users\Jonas Uliana\toolsCVE-2017-8759.exe /h INFO : Exploit toolkit for CVE-2017-8759 DEV : Uliana Tech SITE :...

CVE-2026-11105-Stack-Buffer-Overflow-in-Custom-Base64-Decoder

CVE-2026-11105 – カスタムBase64デコーダのスタックバッファオーバーフロー プログラムコード C // base64vuln.c - Vulnerable Base64 decoder include include include int base64decodeconst char in, sizet inlen, char out, sizet outlen static const char table = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; int outpo...

WebLogic_CNVD_C2019_48814

7kbscan-WebLogicCNVDC201948814 WebLogic CNVD-C-201948814 CVE-2017-10271 스캔 By 7kbstorm...

ZeroLogon

ZeroLogon CVE-2020-1472 C++ 버전, 이 도구는 머신 계정의 비밀번호를 직접 재설정하며, 복구 기능이 없습니다. 실제 공격 상황에서는 주의해서 사용하세요. BOF 버전 참조: ZeroLogon-BOF에서 변경된 단일 파일 EXE 버전, 컴파일 후 약 200KB로, 극한 환경에서 취약점을 이용하기에 적합합니다...

Astra Linux – Vulnerability in OpenVSwitch

It has been discovered that openvswitch 2.17.8 contains a memory leak due to the xmalloc function in openvswitch-2.17.8/lib/util.c...

Astra Linux – Vulnerability in squashfs-tools

The squashfsopendir function in unsquash-2.c within Squashfs-Tools 4.5 enables Directory Traversal, another vulnerability distinct from CVE-2021-40153. A squashfs filesystem that includes a symbolic link, along with files under the same filename, can cause unsquashfs to first create the symbolic...

Astra Linux – Vulnerability in glibc

The iconv feature in the GNU C Library also known as glibc or libc6, up to version 2.32, may have a buffer over-read issue when processing invalid multi-byte input sequences in the EUC-KR encoding...

Astra Linux – Vulnerability in cjson

In versions of cJSON 1.5.0 through 1.7.18, the decodearrayindexfrompointer function in cJSONUtils.c allows for out-of-bounds access. This enables remote attackers to bypass array bounds checking and access restricted data through malformed JSON pointer strings containing alphanumeric characters...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel before version 6.1.3, fs/ntfs3/record.c does not validate resident attribute names. This could lead to an out-of-bounds write vulnerability...