9490 matches found
Vulnerability-Disclosures
Mandiant 脆弱性開示 このリポジトリには、Mandiant が開示した脆弱性が詳述されています。これらの脆弱性は、内部調査、レッドチーム評価、または実環境での使用を通じて発見されました。概念実証 PoC が提供される場合とされない場合があります。 この Mandiant リポジトリには、以下の ライセンス が適用されます: 1. CC BY-SA 4.0 - ソースコードを含まない CVE 関連情報 PoC など 向け 2. MIT - 提供された CVE 情報に含まれるソースコード向け Mandiant は、Google の脆弱性開示ポリシー...
cobaltstrike-headless
Headless Strike ヘッドレス aggressor クライアントを（ほぼ）実用的な cobalt strike クライアントに変える Aggressorscript です。 使い方 組み込みのヘッドレス aggressor ユーティリティ（./agscript）で teamserver に接続します root@kitploit: ./agscript host port user password .cna ファイルを読み込みます root@kitploit: aggressor load headless-strike.cna + Load...
Aggressor-Aggregator
Aggressor 聚合器 描述 这是一个辅助脚本，用于将 Aggressor Script 和 Beacon 对象文件（BOF）仓库整合为单个 CNA 文件，供 Cobalt Strike 使用。专为红队 CTF 环境中频繁搭建/销毁操作员客户端的自动化而设计。该脚本本质上是 @am0nsec 所著 Cobalt Strike Aggressor Scripts-Ception 博客文章的一个封装。已在 Windows 10、Linux 和 macOS 上测试通过。 使用方法 1. 克隆此仓库 2. 创建一个文本文件，写入你常用的 BOF/Aggressor 仓库 URL（或单个 .c...
OPENSUSE-SU-2026:21812-1 Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260902T191204 2026-09-02T19:12:04Z jscPED-11136. Go CVE Numbering Authority IDs added or updated with aliases: GO-2026-6305 CVE-2026-55834 GHSA-2wvm-8mvp-22qv GO-2026-6306 CVE-2026-55064 GHSA-44v6-7fxq-vgf4...
MINI-8H2P-C74F-HPFP
Bulletin has no description...
CGA-HPJH-GQW6-R3RM
Bulletin has no description...
MINI-6P5F-WVW6-WCFF
Bulletin has no description...
MINI-MGVW-3PM5-6MMC
Bulletin has no description...
MINI-5Q59-9V2C-J79H
Bulletin has no description...
MINI-FJ4W-8HWR-4W5M
Bulletin has no description...
MINI-9CPG-QF2R-WCXR
Bulletin has no description...
MINI-4R4P-2V5H-FRGV
Bulletin has no description...
MINI-H7RG-WV6V-MJFP
Bulletin has no description...
CVE-2026-71164
Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...
CVE-2026-71111
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Installer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity Manager...
CVE-2026-70814
Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Call...
SUSE CVE-2026-72585
Red Hat CNA-LR concluded that this CVE is not valid...
The vulnerability of the ath12k_ce_free_pipes() function in the drivers/net/wireless/ath/ath12k/ce.c driver for Atheros/Qualcomm wireless communication adapters in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ath12kcefreepipes function in the drivers/net/wireless/ath/ath12k/ce.c driver for Atheros/Qualcomm wireless communication adapters in the Linux operating system is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability...
GO-2024-2718 vulnerabilities
Vulnerabilities for packages: goreleaser, ko-fips, flux-source-controller, slsa-verifier, kubescape, chainctl, wolfictl, zarf, tekton-chains, falcoctl-fips, policy-controller-fips, zot, policy-controller, aactl, neuvector-sigstore-interface, melange, vexctl, ko, tekton-chains-fips, gitsign, tkn,...