RHEL 9 : grafana-pcp (RHSA-2026:67132)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67132 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and...

cve-2023-42413

cve-2023-42413 ecology9sql...

spring-shell-vuln

spring-shell-vuln Spring4Shell: vulnerabilidad RCE en Spring core Spring ha confirmado la RCE en Spring Framework. El equipo acaba de publicar la declaración junto con las guías de mitigación para el problema. Ahora, esta vulnerabilidad puede rastrearse como CVE-2022-22965. Se ha compartido...

CVE-2019-5736

Uso Edita HOST dentro de payload.c, compila con make. Inicia nc y ejecuta pwn.sh dentro del contenedor. Notas Este exploit es destructivo: sobrescribirá el binario /usr/bin/docker-runc en el host con el payload. También sobrescribirá /bin/sh dentro del contenedor. Probado solo en Debian 9. No se...

spring-RCE-CVE-2022-22965

漏洞简介 最近spring爆出重磅级CVE漏洞，cve信息显示"A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution RCE via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot...

Cartero

Cartero URL http://section9labs.github.io/Cartero/ Description Un robusto framework de phishing con una interfaz CLI completa. El proyecto nació de la necesidad a lo largo de años de trabajo con herramientas que simplemente no hacían su trabajo. Aunque hay muchos proyectos disponibles, no pudimos...

linux_screenshot_xwindows

Intro The goal of this volatility plugin is to extract a screenshot of all open X windows from a memory dump. Previous work The volatility plugin linuxxwindows realised by Adam Bridge https://github.com/bridgeythegeek/linuxxwindows extracts various metadata from the window objects registered to X...

StickyExim

StickyExim Un HoneyPot de Correo Electrónico Características Fácil de implementar. Los scripts de instalación hacen todo el trabajo. Los informes de abuso se crean automáticamente y se envían al propietario de la IP atacante. Los informes de abuso se almacenan con un hash en el momento de la...

coreutils security update

An update is available for coreutils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The coreutils packages contain the GNU Core Utilities and represent a...

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

git-lfs security update

An update is available for git-lfs. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Git Large File Storage LFS replaces large files such as audio samples, videos...

perl-DBI security update

An update is available for perl-DBI. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list DBI is a database access Application Programming Interface API for the Perl...

nginx security update

An update is available for nginx. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other protocols, with a foc...

vim security update

An update is available for vim. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Vim Vi IMproved is an updated and improved version of the vi editor. Security...

cve-2026-5950-bind9-resolver-dos

CVE-2026-5950 - DoS del Resolvedor de BIND 9 Notas de investigación y guía defensiva para CVE-2026-5950, una vulnerabilidad de bucle de reenvío ilimitado en la máquina de estados del resolvedor de BIND 9. Descripción general CVE-2026-5950 afecta a resolvedores recursivos de BIND 9. Bajo condicion...

Important: Red Hat Security Advisory: nginx security update

An update for nginx is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2022-22965

CVE-2022-22965 aka "Spring4Shell" Vulnerabilidad RCE en Spring Framework vía Data Binding on JDK 9+ El objetivo es centralizar la mayor cantidad de información de público conocimiento hasta el momento de la vulnerabilidad y poder saber qué acciones tomar en tal caso. ¿Mi aplicación es vulnerable?...

Oracle Linux 9 : ELSA-2026-65153-0: / osbuild-composer (ELSA-2026-651530)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-651530 advisory. 175-1.0.2 - Rebuild to fix CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499, CVE-2026-42504, CVE-2026-56853, CVE-2026-56858,...

OPENSUSE-SU-2026:11759-1 tomcat-9.0.121-1.1 on GA media

These are all security issues fixed in the tomcat-9.0.121-1.1 package on the GA media of openSUSE Tumbleweed...

RHEL 9 : nginx (RHSA-2026:66542)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:66542 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security...