PloitKit

PloitKit The Hacker's ToolBox PloitKit is a Python based GUI tool designed as one-stop for all other softwares. I was facing these kinds of problem, when I need to switch to different system, or I lost my pen-drive. I have to go to google, and search every tool and download every tool and so on. ...

CVE-2020-3153

CVE-2020-3153 Cisco AnyConnect 4.8.02042 privilege escalation through path traversal Description The auto-update feature of Cisco AnyConnect is affected by a path traversal vulnerability. An attacker can exploit this vulnerability to gain system level privileges. For more details, please refer to...

CVE-2026-25961-SumatraPDF-3.5.0---3.5.2-RCE

SumatraPDF Insecure Update PoC CVE-2026-25961 – Remote Code Execution via Malicious Update Server Author: Mohammed Idrees Banyamer Date: February 2026 CVE: CVE-2026-25961 GHSA: GHSA-xpm2-rr5m-x96q CVSS v3.1: 7.5 High AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected versions: SumatraPDF 3.5.0 – 3.5.2...

CVE-2025-31702

CVE-2025-31702 — Research tools & DFIR material Repository with tools, exploits and research artefacts related to the analysis and discovery of CVE-2025-31702 and related issues. More info and deep-dive: https://labs.itresit.es/2025/10/15/dahua-cve-2025-31702-p2p-auto-update-eop/ Overview This...

toolkit

English | English Indetectables Toolkit Diseñado como una navaja suiza, este conjunto de herramientas es invaluable para analistas de malware, crackers y expertos en ciberseguridad. Está meticulosamente elaborado para apoyar tanto a usuarios novatos como experimentados. Es el complemento perfecto...

CVE-2025-56513-NiceHash-Update-Chain-Compromise

CVE-2025-56513 Critical Supply-Chain Vulnerability in NiceHash QuickMiner Update Mechanism Author: Prince T Philip Role: Independent Security Researcher Severity: CRITICAL — CVSS 9.8 Impact: Remote Code Execution / Supply-Chain Compromise Status: Publicly Disclosed & Assigned CVE-2025-56513...

CVE-2026-108160

AstronRPA through 1.1.6 contains a download of code without integrity check vulnerability that allows network attackers to deliver malicious updates by abusing the desktop client's auto-update mechanism. Attackers positioned between the client and server can serve a malicious update manifest and...

CVE-2026-108160

The AstronRPA desktop client (versions through 1.1.6 ) is vulnerable to a download of code without integrity check (CWE-494). The electron-updater component fails to perform signature verification when fetching updates via a plain-HTTP feed . A network attacker positioned between the client and t...

CVE-2026-108160 AstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP Feed

AstronRPA through 1.1.6 contains a download of code without integrity check vulnerability that allows network attackers to deliver malicious updates by abusing the desktop client's auto-update mechanism. Attackers positioned between the client and server can serve a malicious update manifest and...

EUVD-2026-95908

AstronRPA through 1.1.6 contains a download of code without integrity check vulnerability that allows network attackers to deliver malicious updates by abusing the desktop client's auto-update mechanism. Attackers positioned between the client and server can serve a malicious update manifest and...

CVE-2026-108160 AstronRPA through 1.1.6 Unsigned Update Installation via Plain-HTTP Feed

AstronRPA through 1.1.6 contains a download of code without integrity check vulnerability that allows network attackers to deliver malicious updates by abusing the desktop client's auto-update mechanism. Attackers positioned between the client and server can serve a malicious update manifest and...

Astra Linux – Vulnerability in Firefox and Thunderbird

If a user installed an extension of a particular type, the extension might automatically update itself. During this process, it could bypass the prompt that grants the new version the newly requested permissions. This vulnerability affects Firefox 97, Thunderbird 91.6, and Firefox ESR 91.6...

JetBrains Rider < 2026.2.1 Unverified Skill Auto-Update

The version of JetBrains Rider installed on the remote host is prior to 2026.2.1. It is, therefore, affected by a vulnerability: - In JetBrains Rider before 2026.2.1 AI Assistant could auto-update third-party skills without user confirmation. CVE-2026-100265 Note that Nessus has not tested for th...

CVE-2026-100265

In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation...

CVE-2026-100265

In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation...

CVE-2026-100265

JetBrains Rider versions prior to 2026.2.1 are affected by a vulnerability where the AI Assistant could automatically update third-party skills without requiring explicit user confirmation. The provided documents do not specify the underlying root cause, the specific impact beyond unauthorized up...

EUVD-2026-90009

In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation...

CVE-2026-100265: Download of Code Without Integrity Check

In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation...

PT-2026-103312

🚨 CVE-2026-100265 In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation 🎖@cveNotify...

How to Disable the Automatic Installation of Security Updates When Adding a Veeam Infrastructure Appliance to Veeam Backup & Replication

Purpose By default, when a new Veeam Infrastructure Appliance is added to the Veeam Backup & Replication infrastructure, all available security updates are installed on that appliance automatically by the Veeam Updater running on it. The installation of updates can take a significant amount of...