Cortex-XDR-Config-Extractor

Cortex XDR Config Extractor ⚠️ 자세한 내용은 https://laokoon-security.com/cortex-xdr-config-exctractor/ 현재 독일어로만 제공을 방문하십시오. 이 도구는 레드 팀 평가 중 및 XDR 설정을 감사하기 위해 사용됩니다. 이 도구를 사용하면 Palo Alto Networks의 Cortex XDR Agent의 Database Lock Files를 파싱하고 Agent Settings, Uninstall Password의 Hash and Salt, 그리고 가능한...

CVE-2026-63989 bridge: Fix sleep in atomic context in netlink path

In the Linux kernel, the following vulnerability has been resolved: bridge: Fix sleep in atomic context in netlink path Since the introduction of the netlink configuration path for bridge ports in commit 25c71c75ac87 "bridge: bridge port parameters over netlink", brsetport was always called with...

GHSA-FGMM-W5CX-VRFW Pterodactyl has a database resource limit bypass via race condition in Client API

Summary The Pterodactyl Client API has a logic flaw that lets users bypass their assigned limits for database allocations. This happens because the database locking mechanism used in the controllers is totally broken and doesn't actually lock anything. Details Inside DatabaseController.php, the...

Pterodactyl has a database resource limit bypass via race condition in Client API

Summary The Pterodactyl Client API has a logic flaw that lets users bypass their assigned limits for database allocations. This happens because the database locking mechanism used in the controllers is totally broken and doesn't actually lock anything. Details Inside DatabaseController.php, the...

CVE-2026-22819

Outray openSource ngrok alternative. Prior to 0.1.5, this vulnerability allows a user i.e a free plan user to get more than the desired subdomains due to lack of db transaction lock mechanisms in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts. This vulnerability is fixed in 0.1.5...

CVE-2026-22819 Outray has a Race Condition in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts

Outray openSource ngrok alternative. Prior to 0.1.5, this vulnerability allows a user i.e a free plan user to get more than the desired subdomains due to lack of db transaction lock mechanisms in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts. This vulnerability is fixed in 0.1.5...

CVE-2026-22819 Outray has a Race Condition in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts

Outray openSource ngrok alternative. Prior to 0.1.5, this vulnerability allows a user i.e a free plan user to get more than the desired subdomains due to lack of db transaction lock mechanisms in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts. This vulnerability is fixed in 0.1.5...

EUVD-2015-2847

Malware in sbrugna...

OPENSUSE-SU-2021:1366-1 Security update for rpm

This update for rpm fixes the following issues: Security issues fixed: - CVE-2021-3421, CVE-2021-20271, CVE-2021-20266: Multiple header check improvements bsc1183543, bsc1183545, bsc1183632 - PGP hardening changes bsc1185299 - Fixed potential access of freed mem in ndb's glue code bsc1179416...

SUSE-SU-2021:3445-1 Security update for rpm

This update for rpm fixes the following issues: Security issues fixed: - PGP hardening changes bsc1185299 Maintaince issues fixed: - Fixed zstd detection bsc1187670 - Added ndb rofs support bsc1188548 - Fixed deadlock when multiple rpm processes try tp acquire the database lock bsc1183659...

OPENSUSE-SU-2021:3445-1 Security update for rpm

This update for rpm fixes the following issues: Security issues fixed: - PGP hardening changes bsc1185299 Maintaince issues fixed: - Fixed zstd detection bsc1187670 - Added ndb rofs support bsc1188548 - Fixed deadlock when multiple rpm processes try tp acquire the database lock bsc1183659...

Security update for rpm (important)

openSUSE Security Update: Security update for rpm Announcement ID: openSUSE-SU-2021:3445-1 Rating: important References: 1183659 1185299 1187670 1188548 Affected Products: openSUSE Leap 15.3 An update that contains security fixes can now be installed. Description: This update for rpm fixes the...

McAfee Data Loss Prevention Endpoint EPO Extended Denial of Service Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from the U.S. company McAfee McAfee. A security vulnerability in the McAfee Data Loss Prevention Endpoint DLPe epo extension allows a remote attacker to submit a special request to lock a database or enab...

PT-2015-5873

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention Endpoint DLPe versions prior to 9.3 Patch 4 Hotfix 16 9.3.416.4 Description The issue allows remote authenticated users to cause a denial of service, potentially resulting in database lock or license corruption, via...

CVE-2015-2757: Undefined Security Weakness

The ePO extension in McAfee Data Loss Prevention Endpoint DLPe before 9.3 Patch 4 Hotfix 16 9.3.416.4 allows remote authenticated users to cause a denial of service database lock or license corruption via unspecified vectors...