MINI-CCWX-Q6GR-2XJ7

Bulletin has no description...

MINI-M3XH-G23F-QJ2Q

Bulletin has no description...

MINI-R477-6FPH-WVQ5

Bulletin has no description...

MINI-V3HJ-JCGC-8652

Bulletin has no description...

MINI-C93R-GC49-VFWP

Bulletin has no description...

MINI-JWVJ-GH43-CV73

Bulletin has no description...

Jenkins - Remote Command Injection

Jenkins 2.153 and earlier and LTS 2.138.3 and earlier are susceptible to a remote command injection via stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this wa...

PT-2026-86469

Name of the Vulnerable Software and Affected Versions Tenda HG10 affected versions not specified Description A buffer overflow exists in the Boa Web Server component within the formWanRedirect function of the /boaform/formWanRedirect endpoint. A remote attacker can trigger this issue by...

Linux Distros Unpatched Vulnerability : CVE-2026-49275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to unsupported mapping details. This specific CVE designation is currently marked as reserved or has not yet been populated with a...

Linux Distros Unpatched Vulnerability : CVE-2026-78221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - Unknown description CVE-2026-78221 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenabl...

Linux Distros Unpatched Vulnerability : CVE-2026-81738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - Unknown description CVE-2026-81738 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenabl...

PT-2026-86468

Name of the Vulnerable Software and Affected Versions Tenda HG10 affected versions not specified Description A remote buffer overflow exists in the formURL function within the /boaform/admin/formURL endpoint. This issue occurs when the Keywd/urlFQDN argument is manipulated, potentially allowing a...

Slackware Linux 15.0 / current libxml2 Vulnerability (SSA:2026-247-01)

The version of libxml2 installed on the remote host is prior to 2.11.9 / 2.15.4. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-247-01 advisory. New libxml2 packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...

Linux Distros Unpatched Vulnerability : CVE-2026-18313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rpcapd can allocate up to 65536 bytes per each RPCAPMSGUPDATEFILTERREQ or RPCAPMSGSTARTCAPREQ message received from the client, but it never frees the memory, s...

Linux Distros Unpatched Vulnerability : CVE-2026-80729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugememory: initialise workingset state before folio split xastrysplit adds GFPACCOUNT for page-cache xanodes, but foliosplit leaves the xastate's xalru unse...

DVIA-v2

DVIA-v2 由 8ksec.io 提供支持 DVIA-v2 使用 Swift 编写，并包含额外的漏洞 Damn Vulnerable iOS App DVIA 是一个存在大量漏洞的 iOS 应用。其主要目标是为移动安全爱好者/专业人士或学生提供一个合法环境来测试他们的 iOS 渗透测试技能。该项目由 @prateekg147 开发和维护。此应用涵盖的漏洞和解决方案已测试至 iOS 11。当前版本使用 Swift 编写，并具有以下漏洞。 1. 本地数据存储 2. 越狱检测 3. 过度权限 4. 运行时操纵 5. 反反 Hook/调试 6. 二进制保护 7. Touch/Face ID ...

AppSecEzine

AppSec Ezine 提高对安全风险防范的意识是一项挑战。大多数人不知道或无法获得正确的信息。在科技领域跟上步伐是黄金法则。如果你没有准备好应对安全问题，你就走错了方向。 AppSec Ezine 的诞生源于对信息安全相关内容进行精选的需求，否则这些内容可能会零散地分布在网络上。每一期都涵盖广泛的主题。AppSec Ezine 专注于提供你应该了解的问题（无论新旧）的信息，并让你概览最新的热门话题——那些能帮你度过日常工作或点燃你对这一主题热情的有趣事物。 阅读 AppSec Ezine...

CVE-2026-52810

cve-id Donar...

CVE-2026-66384

cve-id 捐赠 帮助维护此项目 如果您觉得此项目有用，请考虑通过 PayPal 或 ABA Mobile 支持其持续维护。 ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ 每笔捐赠的百分之十将捐献给坤塔宝花儿童医院。 | 选择支付方式 使用 ABA Mobile 扫描 · 点击放大 ---|--- ⚡ 简单用法 直接从 GitHub 运行最新版本的外部下载脚本： root@kitploit: bash 此命令需要 Bash 和 curl。如果您不信任来源，请在运行前查看远程脚本。...

BinAIVulHunter

BinAIVulHunter 一个用于帮助在二进制文件中查找漏洞的 IDA PRO 插件。 使用 IDA PRO HexRays 反编译器结合 OpenAI（ChatGPT）在二进制文件中查找可能的漏洞。 免责声明：使用 AI 在二进制文件中查找漏洞时，返回的结果可能会产生误报，但该工具在我参与过的许多 CTF 比赛中都表现良好（简单/中等……部分困难）。 灵感来源于 Gepetto：https://github.com/JusticeRage/Gepetto 安装： 将 Python 脚本放入 IDA Pro 插件目录。 使用方法： 右键单击反编译代码，选择“在函数中查找可能的漏洞”...