EUVD-2026-108740

In the Linux kernel, the following vulnerability has been resolved: ipv4: stop PMTU walk when nexthop group shrinks Commit 7d3f3b4367f3 "net: ipv4: Cache pmtu for all packet paths if multipath enabled" made iprtupdatepmtu update every path. For nexthop objects, fibinfonumpath and fibinfonhc...

EUVD-2026-108771

In the Linux kernel, the following vulnerability has been resolved: namespace: handle mount locking for automounts correctly If mounts are propagated across user namespaces, attachrecursivemnt locks every copy of the source mount to protect overmounts from vanishing and revealing the underlying...

CVE-2026-98795

A flaw was found in the Linux kernel's Microchip Sparx5 network driver. When operating on devices where Precision Time Protocol PTP initialization is skipped, the driver does not check if PTP was initialized before executing its deinitialization routines. A local privileged user could trigger thi...

CVE-2026-49442

Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a User Enumeration vulnerability allows an attacker to identify valid usernames on the Cacti service. When a user attempts to log in, the application returns slightly different error messages depending on...

cve-2018-15473

CVE-2018-15473 OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. Install You may need t...

CVE-2023-20198

CVE-2023-20198 CVE-2023-20198 PoC ! Description perform actions on a target web server. The script demonstrates how to create a local user account, install an implant, restart the web server, check for the presence of the implant, and finally, clean up by deleting the created user account...

CVE-2023-33829

CVE-2023-33829: Stored-XSS-on-SCM-Manager-1.60 Summary A vulnerability is discovered in the SCM Manager 1.2 = 1.60 version that allows an attackers previously authenticated with write permissions execute javascript code in specific fields. This Proof of Concept is maded in a local environment...

ssh_user_enum

sshenumv0.3.py Usage: sshenumv0.3.py options Options: -h, --help Show this help message and exit -u --userlist Specify a new line delimited username file -i --ip Specify the target -m --multiplier Specify the multiplier for the password used to cause the delay -t --threshold Adjust the threshold...

WebView2-Cookie-Stealer

Blog Post Please read this blog post to get more information. Source Code This code is a modified version of Microsoft's WebView2 Code. The current code can be cleaned up and made much better. Demo Launch Example Usage Example Usage Tested on Windows 10 & 11. When the binary is executed...

TeamsUserEnum

UserEnumTeams Description Sometimes user enumeration could be sometimes useful during the reconnaissance of an assessment. This tool will determine if an email is registered on teams or not. More details on the immunIT's blog Usage .\UserEnumTeams userenum --help Users can be enumerated on...

CVE-2024-22274

CVE-2024-22274 Run and input host ip, port, username and password. Exploit will create user NinhPwn with password "NinhPwn123" then spawn ssh with root shell. Fix python3 install packages: pip install pwinput, pip install paramiko, pip install time,pip install base64...

EUVD-2026-109089

Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a User Enumeration vulnerability allows an attacker to identify valid usernames on the Cacti service. When a user attempts to log in, the application returns slightly different error messages depending on...

CVE-2026-49442

The open source performance and fault management framework Cacti is vulnerable to User Enumeration in versions prior to 1.2.31 . The root cause is an Observable Response Discrepancy (CWE-204) where the application returns different error messages based on the existence of a username. Specifically...

CVE-2026-49442 Cacti: User Enumeration via Error Messages

Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a User Enumeration vulnerability allows an attacker to identify valid usernames on the Cacti service. When a user attempts to log in, the application returns slightly different error messages depending on...

CVE-2026-102971

CVE-2026-102971: hidden revision author ID disclosure Reporter: Marco Paciaroni BomboBombone. MediaWiki's RESTBase-compatible revision response could include the numeric user ID of an author whose name had been hidden. The response still set usertext to null and marked the author as hidden, but t...

auth

Auth - Authentication and User Management by Supabase Auth is a user management and authentication server written in Go that powers Supabase's features such as: Issuing JWTs Row Level Security with PostgREST User management Sign in with email, password, magic link, phone number Sign in with...

OVSwrap

OVSwrap CVE-2026-64531 Writeup !WARNING The PoC is provided solely to help defenders, maintainers, and authorized security teams validate patches, mitigations, detections, and exposure on systems they own or are explicitly authorized to test. You are solely responsible for ensuring that your use ...

CVE-2026-55222

The Isar root filesystem generation system (versions 0.11 and newer ) contains a flaw where the /etc/apt/trusted.gpg.d directory is manually created during bootstrap setup with ownership assigned to the calling user instead of root . If an unprivileged user shares the same ID as the calling user,...

authproof-sdk

AuthProof SDK AuthProof is an audit and attribution layer for AI agents. It lets you prove what a user authorized before the agent acted, and it records what the agent actually did against that authorization. The mechanism is simple. The user signs a delegation receipt with their own private key...

sysbox

Introduction Sysbox is an open-source and free container runtime a specialized "runc", originally developed by Nestybox acquired by Dockerdocker-acquisition on 05/2022, that enhances containers in two key ways: Improves container isolation: Linux user-namespace on all containers i.e., root user i...