CVE-2026-108925

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Cohesity NetBackup Administration Console web interface. This issue affects NetBackup Administration Console web interface: versions before 11.2...

CVE-2026-108925

The Cohesity NetBackup Administration Console web interface is vulnerable to a Basic XSS (CWE-80) flaw due to the improper neutralization of script-related HTML tags. This vulnerability affects versions before 11.2 . An attacker could potentially execute malicious scripts in a user's browser, tho...

EUVD-2026-97121

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Cohesity NetBackup Administration Console web interface. This issue affects NetBackup Administration Console web interface: versions before 11.2...

CVE-2026-108925 Cohesity - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Cohesity NetBackup Administration Console web interface. This issue affects NetBackup Administration Console web interface: versions before 11.2...

kubebox

= Kubebox small^⎈❏^ Antonin Stefanutti https://github.com/astefanutti@astefanutti // Meta :description: Terminal y consola web para Kubernetes // Settings :idprefix: :idseparator: - :experimental: // Aliases ifdef::env-github :note-caption: ℹ️ :icon-check: ✔️ :icon-edit: ✏️ endif::...

Mr.SIP

Marco de seguridad, ataque y auditoría SIP Mr.SIP...

CVE-2026-108682

A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the component Web Console. This manipulation causes denial of service. It is possible to initiate the attack remotely. The exploit has been made available to the publi...

CVE-2026-108681

A security flaw has been discovered in zhayujie CowAgent up to 2.1.7. Impacted is an unknown function of the file channel/web/webchannel.py of the component Web Console. The manipulation of the argument sessionid results in denial of service. The attack may be performed from remote. The exploit h...

CVE-2026-108682

A denial of service vulnerability exists in zhayujie CowAgent versions up to 2.1.6 . The flaw is located in the Web Console component, specifically within the read function of the /upload file. This weakness allows for remote attack initiation. While an exploit has been made available to the publ...

EUVD-2026-97038

A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the component Web Console. This manipulation causes denial of service. It is possible to initiate the attack remotely. The exploit has been made available to the publi...

CVE-2026-108682 zhayujie CowAgent Web Console upload read denial of service

A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the component Web Console. This manipulation causes denial of service. It is possible to initiate the attack remotely. The exploit has been made available to the publi...

EUVD-2026-96996

A security flaw has been discovered in zhayujie CowAgent up to 2.1.7. Impacted is an unknown function of the file channel/web/webchannel.py of the component Web Console. The manipulation of the argument sessionid results in denial of service. The attack may be performed from remote. The exploit h...

CVE-2026-108681

A security flaw in the zhayujie CowAgent Web Console (up to version 2.1.7 ) allows for a remote denial of service (DoS). The vulnerability exists within an unknown function in the file channel/web/web_channel.py where manipulation of the session_id argument triggers the DoS. Public exploit code i...

CVE-2026-108681 zhayujie CowAgent Web Console web_channel.py denial of service

A security flaw has been discovered in zhayujie CowAgent up to 2.1.7. Impacted is an unknown function of the file channel/web/webchannel.py of the component Web Console. The manipulation of the argument sessionid results in denial of service. The attack may be performed from remote. The exploit h...

CVE-2026-108717 Combodo iTop 3.1.0 through 3.3.0 Missing Authorization via LinkSetController

Combodo iTop 3.1.0 through 3.3.0 contains a missing authorization vulnerability in LinkSetController.php that allows authenticated console users to bypass profile grants by supplying arbitrary class and key parameters. Attackers can invoke the linkset delete, detach and get-remote-object routes t...

killchain

killchain “Kill Chain” es una consola unificada con un anonimizador que realizará estas etapas de ataques: Reconnaissance Weaponization Delivery Exploit Installation Command & Control And Actions Los conjuntos de herramientas dependientes son: 1. Tor -- Para el Anonimizador integrado en la consol...

shimit

shimit shimit es una herramienta Python que implementa el ataque Golden SAML. Más información sobre esto se puede encontrar en el siguiente artículo en nuestro blog. python .\shimit.py -h usage: shimit.py -h -pk KEY -c CERT -sp SP -idp IDP -u USER -reg REGION --SessionValidity SESSIONVALIDITY...

CVE-2026-108682: Improper Resource Shutdown or Release

A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the component Web Console. This manipulation causes denial of service. It is possible to initiate the attack remotely. The exploit has been made available to the publi...

PT-2026-110164

🚨 CVE-2026-108681 A security flaw has been discovered in zhayujie CowAgent up to 2.1.7. Impacted is an unknown function of the file channel/web/web channel.py of the component Web Console. The manipulation of the argument session id results in denial of service. The attack may be performed from...

CVE-2026-108681: Improper Resource Shutdown or Release

A security flaw has been discovered in zhayujie CowAgent up to 2.1.7. Impacted is an unknown function of the file channel/web/webchannel.py of the component Web Console. The manipulation of the argument sessionid results in denial of service. The attack may be performed from remote. The exploit h...