IIS-Backdoor

IIS-Backdoor В этой статье я объясню, как я разработал руткит для Microsoft Internet Information Services IIS. Вопрос: зачем нужен бэкдор в веб-сервере? Первый очевидный, но бесполезный ответ: потому что можем. Ладно, дадим более разумный ответ. Цель внедрения бэкдора в веб-сервер двойная: Он...

xz-utils-vuln-checker

root@kitploit: / / / / | |/// / / / / / / / / / / / / / / //// // / / / / / / / //|| // ,/ / // // // Hare Krishna Rai 0xblurr3d / / / / / / | | / / / / / / / / / \ / / / \ / \ / / / /// / \ / / | |/ / / // / / / / / / //// / / / / // // / / , / / / / |/ ,/ // // // / // // / / //|| / //...

-CVE-2024-3094-Vulnerability-Checker-Fixer-Public

지원 표시하기 이 스크립트가 유용하다고 생각하시고 CVE-2024-3094로부터 시스템을 보호하는 데 도움이 되었다면, 별표⭐를 눌러 주시기 바랍니다. 이 저장소에 별표를 표시하면 여러분의 지지를 보여줄 뿐만 아니라 더 많은 사람들이 이 프로젝트를 발견하고 사이버 보안을 개선하기 위한 우리의 공동 노력의 혜택을 누릴 수 있습니다. 저장소에 별표를 표시하려면 이 페이지 상단의 "Star" 버튼을 클릭하기만 하면 됩니다. 여러분의 지지에 진심으로 감사드립니다! 디지털 세상을 더 안전하게 만드는 데 도움을 주셔서 감사합니다!...

Sicurezza-Informatica-Presentazione

Que contient ce dépôt ? Ce dépôt contient une brève recherche et une présentation de la faille de sécurité concernant XZ Utils pour le cours de sécurité informatique UNIPR CVE-2024-3094 Description de la faille par Ubuntu : Du code malveillant a été découvert dans les tarballs en amont de xz, à...

CVE-2024-3094

CVE-2024-3094 악성 코드가 xz의 업스트림 tarball에서 5.6.0 버전부터 발견되었습니다. 일련의 복잡한 난독화를 통해 liblzma 빌드 프로세스는 소스 코드에 존재하는 위장된 테스트 파일에서 사전 빌드된 객체 파일을 추출하며, 이를 사용하여 liblzma 코드의 특정 함수들을 수정합니다. 그 결과, 이 라이브러리에 링크된 모든 소프트웨어에서 사용될 수 있는 수정된 liblzma 라이브러리가 생성되며, 이 라이브러리와의 데이터 상호 작용을 가로채고 수정합니다. 이 저장소에는 취약한 최신 버전의...

CVE-2024-3094

CVE-2024-3094 Código malicioso foi descoberto nos tarballs upstream do xz, a partir da versão 5.6.0. Através de uma série de ofuscações complexas, o processo de compilação do liblzma extrai um arquivo de objeto pré-construído de um arquivo de teste disfarçado existente no código-fonte, que é entã...

EUVD-2025-210763

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...

CVE-2026-76403

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol HTTP Event Collector in Splunk Enterprise. The vulnerability...

CVE-2026-21079

Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data...

CVE-2026-66410

Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be retrieved and/or altered...

CVE-2026-66410

CVE-2026-66410 affects the Android and iOS ECOVACS PRO App, with improper server certificate validation in the smartphone app. The vulnerability can allow a man-in-the-middle to retrieve and/or alter communications between the app and servers. Connected documents confirm the issue and reference r...

CVE-2026-21079

Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data...

EUVD-2026-55104

Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data...

CVE-2026-21079

CVE-2026-21079 concerns Samsung Smart Switch prior to version 3.7.72.6, where missing encryption of sensitive data allows adjacent attackers to intercept transmitted data. The affected component is the Smart Switch data transmission flow; the root cause is lack of encryption for sensitive data in...

CVE-2025-9291 Improper Certificate Validation in TP-Link Omada Cloud Communications

A certification validation weakness exists in communication between affected Omada devices and cloud controllers. Certificate identity verification does not adequately validate that a presented certificate corresponds to the expected cloud controller hostname, which may allow certificate validati...

EUVD-2026-46279

HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data...

CVE-2026-15925 Improper TLS Hostname Verification in Snowflake Connector for Python

Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positioned attacker to bypass certificate hostname validation on HTTPS connections made by the connector. An attacker with on-path network access could exploit this b...

PayRange Android app version 7.0.7 contains multiple vulnerabilities

Overview PayRange is a mobile payment app that allows users to pay for vending machines, laundromats, and other unattended machines using a smartphone with Bluetooth. Two vulnerabilities were discovered in version 7.0.7 of the PayRange app that is available in the Google Play store. Description A...

nodejs: Node.js: Certification validation bypass in TLS host verification

A flaw was found in Node.js. An attacker can exploit a vulnerability in the Transport Layer Security TLS host verification process to bypass certification validation. This bypass could allow an attacker to intercept or alter communications, potentially leading to information disclosure or integri...

gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier URI or Service SRV Subject Alternative Names SANs. This could cause the certificate validation process to incorrectly fall back to...