CVE-2021-26084

CVE-2021-26084 confluence удаленное выполнение кода RCE Code By:Junsheng @Лаборатория кибербезопасности Orange Лаборатория кибербезопасности Orange https://0range.team/ 0x00 Обзор рисков Данный инструмент предназначен только для авторизованного тестирования безопасности. Запрещается...

CVE-2025-66024

CVE-2025-66024: домашняя страница XWiki Blog Application уязвима к хранимому XSS через заголовок записи Обзор Поле| Детали ---|--- CVE ID| CVE-2025-66024 Серьёзность| HIGH Уведомление| Просмотреть уведомление Обнаружено| Lukasz Rybak Затронутые продукты org.xwiki.contrib.blog:application-blog-ui...

CVE-2018-10949

Script d'énumération des utilisateurs Zimbra Collaboration CVE-2018-10949 Utilisation L'argument --host doit être le nom d'hôte ou l'adresse IP de la page racine de l'application Web Zimbra Collaboration, et --userlist une liste de noms d'utilisateurs à vérifier. root@kali...

CVE-2020-14295

CVE-2020-14295 취약점 세부 정보 - https://github.com/Cacti/cacti/issues/3622 설치 pip3 install -r requirements.txt 사용법 $ ./gimme-a-shell.py --help usage: gimme-a-shell.py -h -t Target -U Username -P Password -i Shell-IP -p Shell-Port optional arguments: -h, --help show this help message and exit required...

CVE-2025-55182_RCE_Exploit

CVE-2025-55182RCEExploit REC Exploit — это инструмент для тестирования безопасности на Python, который автоматизирует обнаружение потенциальных условий RCE в веб-приложениях в авторизованных средах. Он отправляет сформированные POST-запросы к целям, анализирует ответы сервера на признаки выполнен...

DutchOven

DutchOven Application-scoped Windows network brownouts for deterministic red-team validation. Native C • Windows Filtering Platform • IPv4 + IPv6 • Dynamic cleanup Read the accompanying blog post → Quick start • Profiles • CLI • How it works • Build • BOF • Validation !CAUTION Controlled...

UserLAnd

Bienvenue sur UserLAnd Le moyen le plus simple d'exécuter une distribution Linux ou une application sur Android. Fonctionnalités : Exécutez des distributions Linux complètes ou des applications spécifiques par-dessus Android. Installez et désinstallez comme une application classique. Aucun accès...

jdvrif

jdvrif jdvrif JPG Data Vehicle , v9.0 is a fast, easy-to-use steganography command-line tool for concealing and extracting any file type via a JPG image. Linux only. Your data file is compressed with libdeflate/zlib , then encrypted with XChaCha20-Poly1305 libsodium secretstream under a key deriv...

MOVEit Transfer - SQL Injection

In Progress MOVEit Transfer before 2020.1.11 12.1.11, 2021.0.9 13.0.9, 2021.1.7 13.1.7, 2022.0.7 14.0.7, 2022.1.8 14.1.8, and 2023.0.4 15.0.4, a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized...

[SECURITY] Fedora 45 Update: budgie-desktop-view-10.10.3-2.fc45

Official Budgie desktop icons application / implementation...

Security Bulletin: IBM Maximo Application Suite is vulnerable to a sensitive information disclosure

Summary IBM Maximo Application Suite login service could allow an unauthenticated user to access sensitive system information. This bulletin contains information regarding the vulnerabilities and their fix. Vulnerability Details CVEID:CVE-2026-105052 DESCRIPTION: Maximo Application Suite could...

[SECURITY] Fedora 45 Update: vfrnav-20230429-38.fc45

This is a navigation application for VFR and IFR flying...

[SECURITY] Fedora 45 Update: labwc-tweaks-0.1.0-3.fc45

labwc-tweaks is a GUI configuration application for the labwc wayland compositor...

[SECURITY] Fedora 45 Update: gnote-51~beta-2.fc45

Gnote is a desktop note-taking application which is simple and easy to use. It lets you organize your notes intelligently by allowing you to easily link ideas together with Wiki style interconnects. It is a port of Tomboy to C++ and consumes fewer resources...

CVE-2026-103956

Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role...

CVE-2026-103956 Missing authentication for critical function in Loom for AWS

Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role...

EUVD-2026-91770

Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role...

CVE-2026-103956 Missing authentication for critical function in Loom for AWS

Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role...

CVE-2026-103956 Missing authentication for critical function in Loom for AWS

Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role...

CVE-2026-103956

Loom for AWS versions before 1.6.1 are vulnerable to a critical flaw due to missing authentication for a critical function within the authentication dependency. In deployments where no identity provider is configured, remote actors can exploit this via any request to the application API to obtain...