MAL-015

MAL-015: Escape de Aislamiento 2 en Ansible Tower Las instalaciones de Ansible Tower en ciertas configuraciones de Rhel 7/8 son potencialmente vulnerables a los escapes de “Job Isolation” que permiten a un atacante escalar al usuario “awx” desde fuera del entorno aislado. Los siguientes...

kernel-rt security, bug fix, and enhancement update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

snuffleupagus

Snuffleupagus Módulo de seguridad para php7 y php8: eliminando clases de bugs y aplicando parches virtuales al resto...

super-xray

Super Xray 如果本项目有帮助到你，可以点个Star支持作者 介绍 xray 是一款优秀的漏洞扫描工具，但目前只有命令行版本，通过 config.yaml 配置文件启动，很多情况下不好上手，需要一款 GUI 工具来帮助新人更快使用。本工具仅是简单的命令行包装，并不是直接调用方法。在 xray 的规划中，未来会有一款真正的完善的 GUI 版 XrayPro 工具，敬请期待。 使用前提： 本地有 JRE/JDK 8+ 环境（如果使用内置JRE的exe版本无需Java环境） 使用 java -jar SuperXray.jar 启动（在Windows中双击启动会有权限问题） 前往...

Drupal-cve-2019-6340

研究 CVE 2019-6340 root@kitploit: 当Drupal 8核心RESTful API服务模块被启用时，允许用户向服务器发送GET、PATCH或POST请求。 即使PATCH方法被禁用，GET请求也足以触发代码执行漏洞。 如果站点启用了其他Web服务模块，如Drupal 8中的JSON-API或Drupal 7中的REST服务，也受影响。 POC 要求 DOCKER.IO DRUPAL 8.6.9 SQL 5.7 docker run -d --name mysqldb -e MYSQLROOTPASSWORD=password mysql:5.7 docker r...

RHEL 8 : glib2 (RHSA-2026:66451)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:66451 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, th...

Oracle Linux 8 : ELSA-2026-66348-0: / vim (ELSA-2026-663480)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-663480 advisory. - RHEL-253666 CVE-2026-28420 buffer overflow in terminal emulator - RHEL-215662 CVE-2026-55892 vim: stack out-of-bounds write in dumpprefixes -...

Microsoft .NET Core SDK Information Disclosure Vulnerability

The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by an information disclosure vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

RockyLinux 8 : glib2 (RLSA-2026:66451)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66451 advisory. xdgmime: heap-based buffer overflow in xdgmimemagicparsemagicline in xdgmimemagic.c CVE-2026-16118 Tenable has extracted the preceding description block directly...

CVE-2025-13780

CVE-2025-13780：pgAdmin 4 = 8.14 RCE 扫描器 针对 CVE-2025-13780 的全面漏洞扫描器，该漏洞是 pgAdmin 4 版本 ≤ 8.14 中的一个远程代码执行 RCE 漏洞。 🔍 漏洞详情 该漏洞存在于 pgAdmin 4 的 恢复 功能中。应用程序尝试使用正则表达式阻止危险 shell 命令（以 \ 开头）。但是，此检查可以被绕过。 易受攻击的正则表达式 ：^|\n \t\ 绕过方法 ： 1. UTF-8 BOM ：预置 \xef\xbb\xbf 可使正则表达式匹配失败 2. CRLF 注入 ：在反斜杠前使用 \n\r 而不是 \n 📦 安...

CVE-2019-2215

CVE-2019-2215 通过 CVE-2019-2215 为 Bravia 电视获取临时 Root。 概述 演示一种仅利用内核内存读/写权限提升的攻击，最终获得临时 Root shell。 该工具适用于运行 Android 8（PKG6.0724）固件、内核版本为 4.9.51 的 Sony Bravia 电视设备。 要使该工具在其他受相同漏洞影响的设备和/或内核上运行，需要查找并更改某些偏移量。正如 Project Zero 错误跟踪器 上所述，这并不十分困难。 免责声明 本工具及其源代码仅供文档和教育目的使用。 使用此工具可能导致您的设备变砖。除非您清楚自己在做什么，否则请勿尝试...

Security Bulletin: Updating Java in Identity Insight 9.0.0.1 for security update

Summary Identity Insight customers are advised to update OpenJDK 8 to version 8.0.504 for the security update in Java. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM InfoSphere...

CVE-2023-6241

Exploit para CVE-2023-6241 El análisis completo se puede encontrar aquí. Este es un error en el controlador del kernel Arm Mali que reporté en noviembre de 2023. El error puede utilizarse para obtener ejecución arbitraria de código en el kernel desde el dominio de aplicaciones no confiables, que...

CVE-2026-15417

In the silabser.sys Windows 8 driver for CP210x devices, a local unprivileged user can use incorrect driver settings to cause a kernel crash...

CVE-2026-15417

CVE-2026-15417 affects the silabser.sys Windows 8 driver for Silicon Labs CP210x USB-to-serial devices. A local unprivileged user can trigger a kernel crash (denial of service) by applying incorrect driver settings, with no user interaction required and low attack complexity. The CVSS 4.0 score i...

EUVD-2026-75624

In the silabser.sys Windows 8 driver for CP210x devices, a local unprivileged user can use incorrect driver settings to cause a kernel crash...

Important: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

CVE-2026-53613-poc

PoC CVE-2026-53613 Vulnerabilidad TOCTOU en mount8 que permite escalada local de privilegios a root. Versiones Vulnerables util-linux 2.41.0 hasta 2.41.4 util-linux 2.42.0 hasta 2.42.1 Exploits Archivo| Método| Objetivo ---|---|--- exploitshell.sh| Extracción de clave SSH| /root...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...