CVE-2026-76281

Improper Access Control. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration CWE, with one Common Vulnerabilities and Exposures CVE identifier assigned to...

CVE-2026-76282

Improper Control of a Resource Through its Lifetime. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration CWE, with one Common Vulnerabilities and Exposures...

freeipa

FreeIPA Server FreeIPA allows Linux administrators to centrally manage identity, authentication and access control aspects of Linux and UNIX systems by providing simple to install and use command line and web based management tools. FreeIPA is built on top of well known Open Source components and...

Backdooring-ZMM100-FingerPrint-Devices

Hacking Embedded Devices : Hardware platform ZMM100 : The fingerprint access control device Made by ZKSoftware. Default User/Password : root:solokey Protocol : Telnet 23. Scripts : pwnit.py : Automated tool for hacking devices. hell : second backdoor. leak-data.sh : third backdoor. YouTube Video ...

covert-tube

covert-tube A program to control systems remotely by uploading videos to Youtube using Python to create the videos and the listener, emulating some malware I was reading about. It allows to create videos with frames formed of simple text, QR codes with cleartext or QR codes using AES encryption...

CVE-2025-25347

CVE-2025-25347 Overview This tool is used to test the vulnerability CVE-2025-25347 in QingLong Panel, an open-source platform for task automation management. This vulnerability allows Remote Code Execution RCE because the panel does not implement adequate input validation and access control on...

SimpleRemoter

SimpleRemoter 简体中文 | 繁體中文 | English !WARNING Important Legal Notice This software is intended solely for educational purposes and authorized use cases such as: Remote IT administration within your own organization Authorized penetration testing and security research Personal device management and...

Manipulating-Web-Agents

Manipulating Autonomous LLM-based Web Agents with Indirect Prompt Injection Attacks With the ubiquity of LLM-integrated applications, investigating potential security risks is crucial. One of the most significant vulnerabilities in these systems is their susceptibility to adversarial attack via...

awesome-censys-queries

Awesome Censys Queries A collection of fascinating and bizarre Censys Search queries. Contributing Found an awesome query? Submit it here Interested in contributing in another way? See the contributing guidelines Resources Censys Search CensysGPT Beta - AI Generated Queries Legacy Search Queries ...

CVE-2026-76282 Improper Control of a Resource Through its Lifetime in Splunk Enterprise

Improper Control of a Resource Through its Lifetime. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration CWE, with one Common Vulnerabilities and Exposures...

CVE-2026-76282

Splunk addressed an Improper Control of a Resource Through its Lifetime vulnerability in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 . The issue is categorized under CWE-664 . The provided documents do not specify the exact component, root cause, or practical consequences beyon...

EUVD-2026-94634

Improper Control of a Resource Through its Lifetime. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration CWE, with one Common Vulnerabilities and Exposures...

CVE-2026-76281 Improper Access Control in Splunk Enterprise

Improper Access Control. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration CWE, with one Common Vulnerabilities and Exposures CVE identifier assigned to...

EUVD-2026-94633

Improper Access Control. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration CWE, with one Common Vulnerabilities and Exposures CVE identifier assigned to...

CVE-2026-76281

Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are affected by an improper access control vulnerability (CWE-284). Splunk internally identified these issues and addressed them in the mentioned versions. Specific technical details regarding the root cause or component are not provi...

CVE-2026-76272

Splunk Enterprise and Splunk Secure Gateway are vulnerable to an access control flaw via the REST API. In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 , users without "admin" or "power" roles can trigger the gateway to sign attacker-controlled payloads because the system f...

CVE-2026-76272 Missing Access Control through the REST API in Splunk Secure Gateway

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could cause Splunk Secure Gateway to sign attacker-controlled payloads. The vulnerability is possible because Splunk Secure Gateway does not verify that the user i...

CVE-2026-76269 Improper Access Control in Search Job Retrieval through the REST API in Splunk Enterprise

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could use a user-controlled job identifier to access substantially all search job information from jobs that belong to other users, including search query text, jo...

CVE-2026-76269

Splunk Enterprise versions prior to 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable to an improper access control flaw in its REST API . The vulnerability occurs because the API fails to fully validate job ownership when processing a user-controlled job identifier. Consequently, a user without...

CVE-2026-76265 Improper Access Control through REST API Endpoints in Splunk Secure Gateway

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, a user who does not hold the "admin" or "power" Splunk roles could access privileged Splunk Secure Gateway functionality. With this access, the user could...