1274 matches found
mallory
mallory HTTP/HTTPS proxy over SSH. Installation Local machine: go install github.com/justmao945/mallory/cmd/mallory@latest Remote server: need our old friend sshd Configuration Config file Default path is $HOME/.config/mallory.json, can be set when start program mallory -config path/to/config.jso...
CVE-2025-24011-PoC
Proof of concept for CVE-2025-24011 based on https://github.com/advisories/GHSA-hmg4-wwm5-p999 This toool has been tested on Umbraco version 15.1.1 and 13.7.2 on Ubuntu 24.04.2 LTS Usernames in Umbraco are as I understand it e-mails. This tools accepts a list of "usernames" -f and a url -u eg...
Exploit for CVE-2024-55090
CVE-2024-55090 Security Advisory — SMADAV Antivirus · Scan Bypas...
EUVD-2026-43537
OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs...
CVE-2026-114491 pdfmake 0.3.8 before 0.3.12 Local File Policy Bypass via SVG Images
pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy restriction to images referenced inside SVG content, allowing attackers to read blocked local files. Attackers supplying a document definition can add an SVG image href pointing to a local path, embedding restricted file contents...
CVE-2026-114491
The pdfmake library (versions 0.3.8 before 0.3.12 ) contains a vulnerability where it fails to apply the setLocalAccessPolicy() restriction to images referenced within SVG content. This flaw allows an attacker providing a document definition to include an SVG image with an href pointing to a loca...
CVE-2026-114491 pdfmake 0.3.8 before 0.3.12 Local File Policy Bypass via SVG Images
pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy restriction to images referenced inside SVG content, allowing attackers to read blocked local files. Attackers supplying a document definition can add an SVG image href pointing to a local path, embedding restricted file contents...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.14 contains a security vulnerability. This vulnerability arises from the thunderbolt driver failing to release the domain reference acquired by tbtunnelonedp when DP RX reading is canceled. When the operation is cancelled, the reference leaks, potentially leading to a...
Astra Linux – Vulnerability in sudo
In Sudo version 1.8.29, the fact that a user has been blocked for example, by using the “!” character in the shadow file instead of a password hash was not taken into consideration. This allows an attacker who has access to a Runas ALL sudoer account to impersonate any blocked user. NOTE: The...
Astra Linux – Vulnerability in python-tornado
Tornado is a Python web framework and asynchronous networking library. The algorithm used for parsing HTTP cookies in Tornado versions prior to 6.4.2 sometimes has quadratic complexity, leading to excessive CPU consumption when parsing maliciously-crafted cookie headers. This parsing occurs in th...
Astra Linux – Vulnerability in Firefox, Thunderbird
If a PAC URL was set, and the server hosting the PAC was unreachable, OCSP requests would be blocked, resulting in incorrect error pages being displayed. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...
Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`
SummaryThe local web-fetch tool webfetchtool, also used as the WebFetch capability's local fallback processed responses with several steps whose running time grows quadratically with the size of certain server-controlled inputs, and ran them on the event loop: decoding the body with whichever...
kernel: NFSD: Prevent client use-after-free during blocked-lock reaping
A flaw was found in the Linux kernel's Network File System Daemon NFSD. A use-after-free vulnerability can occur during the blocked-lock reaping process. This happens when a client's lock owner, without a proper reference to keep the client alive, leads to the client being prematurely freed. This...
Deadlock
Overview Microsoft.AspNetCore.App.Runtime.win-x86 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Deadlock via the Kestrel connection handling process. A...
CVE-2026-79611 VMX: VMentry failure with branch tracing and blocked states
For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when DB in intercepted, Single Stepping is active, and blocked by STI/MovSS is active, despite this being a legitimate state to be in. The resulting VMEntry failure is fatal to the gues...
CVE-2026-79611
The Xen hypervisor is vulnerable to a VMEntry failure caused by logic introduced in XSA-308 . The issue occurs when a specific combination of states is met: #DB is intercepted, Single Stepping is active, and it is blocked by STI/MovSS . Additionally, a special sub-case exists when branch tracing ...
CVE-2026-79611 VMX: VMentry failure with branch tracing and blocked states
For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when DB in intercepted, Single Stepping is active, and blocked by STI/MovSS is active, despite this being a legitimate state to be in. The resulting VMEntry failure is fatal to the gues...
VMX: VMentry failure with branch tracing and blocked states
ISSUE DESCRIPTION For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when DB in intercepted, Single Stepping is active, and blocked by STI/MovSS is active, despite this being a legitimate state to be in. The resulting VMEntry failure is...
Amazon Linux 2 : containerd (ALASECS-2026-141)
The version of containerd installed on the remote host is prior to 2.3.5-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-141 advisory. containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI...