CVE-2026-34009

An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following...

CVE-2026-34014

An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the...

ProHunter

📋 Overview This project is a core module of the ProHunter system, primarily designed to perform malicious judgment on threat graphs sampled from the PPG module. The main idea of this methods is that uses inexact graph vector matching to calculate vector similarity between threat graphs and attack...

CVE-2025-58434-AND-59528-POC

Flowise Dual CVE PoC — CVE-2025-58434 + CVE-2025-59528 ⚠️ For educational and authorized security research only. Running this tool against systems you do not own or lack written permission to test is illegal. Table of Contents Overview Vulnerability Details CVE-2025-58434 — Account Takeover...

EUVD-2026-101991

A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsirch 7.0.3.0 and later...

EUVD-2026-101989

An OS command injection vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.23 and later HybridDesk Statio...

soc-automation-lab

SOC Automation Lab This repository documents the design, detection logic, automation workflows, and lessons learned from building an automated SOC demo using open-source tools. The project focuses on how alerts move from detection to investigation and notification , and what breaks along the way...

CVE-2026-34009 **Container Escape** Host user home directory mounted with write access into application container

An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following...

CVE-2026-34008 **Privilege Escalation** World-writable crontab path monitored and executed by root-owned process

An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If a local attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following...

CVE-2026-98404

A flaw was found in the Linux kernel's VirtIO GPU driver. A local user could exploit this flaw to cause a Denial of Service DoS by triggering a system crash. When user framebuffer creation encounters an error, the driver improperly returns a null value instead of an error code, resulting in a nul...

EUVD-2026-101980

An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: Video Station 5.8.8 and later...

CVE-2026-44084

The Video Station application is affected by an authorization bypass vulnerability caused by a user-controlled key. This flaw could allow remote attackers to obtain sensitive data . The vulnerability has been remediated in Video Station version 5.8.8 and later . No specific exploits or scanner so...

CVE-2026-44084 Access Code Forgery in Video Station leading to unauthorized media access

An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: Video Station 5.8.8 and later...

CVE-2026-34014

A vulnerability exists in Download Station due to an incorrect permission assignment for the critical resource ds-move-files.sh, which is both writable and executed as root . A local attacker who has gained an administrator account can exploit this to compromise the security of the system. The vu...

CVE-2026-34014 ds-move-files.sh is writable and executed as root

An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the...

CVE-2026-26245

A SQL injection vulnerability (CWE-89) exists in the Video Station application within the class_videos.php file's getSmartVideosByOffset function. If a remote attacker obtains a valid user account, they can exploit this flaw to execute unauthorized code or commands . The vulnerability is addresse...

CVE-2026-16437

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI...

CVE-2023-32198

A vulnerability has been identified in Steve where by default it was using an insecure option that did not validate the certificate presented by the remote server while performing a TLS connection. This could allow the execution of a man-in-the-middle MitM attack against services using Steve...

AirStrike

/ \ / | | | | | / \ | || '|\ \ | || '|| || |/ / / \ / \ | || | || | | | | || | / // \|||| |/ ||| ||||\ | AirStrike is a Flask + Socket.IO web interface for orchestrating Wi-Fi assessment tools from a browser. This build intentionally focuses on the three most stable attacks in the suite:...

fortios-ldap-mitm-poc-CVE-2019-5591

CVE-2019-5591 This Proof of Concept PoC demonstrates a MITM Man-In-The-Middle Attack: impersonation of an LDAP server on the local subnet of a FortiGate device running a vulnerable version of FortiOS. Affected Versions These versions are vulnerable: Version| Affected| Solution ---|---|--- FortiOS...