9602 matches found
packj
Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...
misp-objects
misp-objects MISP objects used in MISP system and can be used by other information sharing tools. MISP objects are in addition to MISP attributes to allow advanced combinations of attributes. The creation of these objects and their associated attributes are based on real cyber security use-cases...
galer
galer /' '/'' | | /'' ' | || | | | '\ ','\ | /' @dwisiswant0 A fast tool to fetch URLs from HTML attributes by crawl-in. Inspired by the @omespino Tweet, which is possible to extract src, href, url and action values by evaluating JavaScript through Chrome DevTools Protocol. Resources...
galer
galer /' '/'' | | /'' ' | || | | | '\ ','\ | /' @dwisiswant0 Una herramienta rápida para obtener URLs de atributos HTML mediante rastreo. Inspirada en el tweet de @omespino, que permite extraer valores src, href, url y action evaluando JavaScript a través del Protocolo Chrome DevTools. Recursos...
automato
automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...
CVE-2024-30088
CVE-2024-30088 Bug: Bug is inside function AuthzBasepCopyoutInternalSecurityAttributes when kernel copies the AUTHZBASEPSECURITYATTRIBUTESINFORMATION of current token object to user mode, which has structure like this: //0x30 bytes sizeof struct AUTHZBASEPSECURITYATTRIBUTESINFORMATION ULONG...
CVE-2026-94114 Apache Commons BCEL: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser
Symbolic name not mapping to correct object vulnerability in Apache Commons. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue...
CVE-2026-51772
A flaw was found in OpenStack Glance. When the multiple locations configuration option is enabled, an authenticated attacker can perform Server-Side Request Forgery SSRF by submitting a crafted HTTP request to modify an image's location attributes. This vulnerability allows the attacker to induce...
CVE-2021-3493-Exploit
CVE-2021-3493-Exploit A proof-of-concept local privilege escalation exploit for CVE-2021-3493, written in C. 📌 Description This repository contains a C implementation of the exploit for CVE-2021-3493. This is a Local Privilege Escalation LPE vulnerability in the OverlayFS implementation in the...
CVE-2023-2640-32629
Escalada de privilegios en Ubuntu: CVE-2023-2640 y CVE-2023-32629 Esta es una vulnerabilidad de escalada local de privilegios que afecta a ciertos kernels de Ubuntu. Permite a usuarios sin privilegios establecer atributos extendidos privilegiados en archivos montados, omitiendo las comprobaciones...
CVE-2017-6913
CVE-2017-6913 Esta es una vulnerabilidad que encontré en el webmail de open-xchange OX App Suite https://www.open-xchange.com/ hace un tiempo. Detalles de la vulnerabilidad El webmail era vulnerable a un XSS almacenado al abrir un correo electrónico, debido a que los atributos de evento de la...
Magento 2 Amasty Order Attributes < 4.0.0 - Unauthenticated Arbitrary File Upload
Amasty Order Attributes for Magento 2 4.0.0 contains an unrestricted file upload vulnerability caused by lack of authentication and validation in the upload endpoint, letting unauthenticated attackers upload arbitrary files including PHP, enabling remote code execution or malware hosting. id:...
CVE-2026-104033
A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...
EUVD-2026-92890
A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...
CVE-2026-104033
A vulnerability exists in SSSD where the software fails to correctly treat an LDAP shadow expiration value of zero as an expired account. When configured to enforce account expiration via LDAP, this access control bypass allows a user with valid credentials for a deactivated account to authentica...
CVE-2026-104033 Sssd: sssd: access control bypass via improper ldap shadow expiration check
A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...
CVE-2026-105749
A flaw was found in docling. A remote attacker could cause a Denial of Service DoS by supplying a specially crafted document with excessively large table span attributes, such as rowspan or colspan. When processing the document, the parser attempts to allocate memory or execute processing loops...
An authorization logic vulnerability in the Brocade Fabric OS AAA interface (CVE-2026-94578)
: Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA Authentication, Authorization, and Accounting integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific...
Linux Distros Unpatched Vulnerability : CVE-2026-104033
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat ...