Lucene search
+L

1610 matches found

Packet Storm News
Packet Storm News
added 2026/03/03 12:0 a.m.5 views

Regenerator 2000

Regenerator 2000 is an interactive disassembler for the CPU 6502, focused mostly on Commodore 8-bit computers. Features a TUI with modern features like x-ref, undo/redo, arrows, keyboard-driven, mcp server, VICE debugger and more! This is the coolest thing we have added to the archive today...

6AI score
SaveExploits0
OSV
OSV
added 2026/02/19 11:16 p.m.8 views

CVE-2026-26959 ADB Explorer Vulnerable to RCE via Insufficient Input Validation

ADB Explorer is a fluent UI for ADB on Windows. Versions 0.9.26020 and below fail to validate the integrity or authenticity of the ADB binary path specified in the ManualAdbPath setting before executing it, allowing arbitrary code execution with the privileges of the current user. An attacker can...

7.8CVSS6.5AI score
SaveExploits0References5
Fedora
Fedora
added 2026/02/11 12:59 a.m.6 views

[SECURITY] Fedora 42 Update: rust-btrd-0.5.3-12.fc42

The btrfs debugger...

7.5CVSS5.4AI score0.00443EPSS
SaveExploits1
ATTACKERKB
ATTACKERKB
added 2026/02/06 4:43 p.m.5 views

CVE-2026-23740

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when astcoredumper writes its gdb init and output files to a directory that is world-writable for example /tmp, an attacker with write permissionwhich is a...

7.8CVSS5.8AI score0.00112EPSS
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2026/01/29 3:32 p.m.26 views

Unfurl's debug mode cannot be disabled due to string config parsing (Werkzeug debugger exposure)

Summary The Unfurl web app enables Flask debug mode even when configuration sets debug = False. The config value is read as a string and passed directly to app.rundebug=..., so any non-empty string evaluates truthy. This leaves the Werkzeug debugger active by default. Details - unfurl/app.py:weba...

6.3AI score
SaveExploits0References3Affected Software1
Snyk
Snyk
added 2026/01/29 3:32 p.m.7 views

Active Debug Code

Overview dfir-unfurl is an Unfurl takes a URL and expands "unfurls" it into a directed graph Affected versions of this package are vulnerable to Active Debug Code due to improper parsing of the debug configuration value, which is always interpreted as truthy and enables the Werkzeug debugger...

9.3CVSS6.3AI score0.00557EPSS
SaveExploits1References2
OSV
OSV
added 2026/01/29 3:32 p.m.7 views

GHSA-VG9H-JX4V-CWX2 Unfurl's debug mode cannot be disabled due to string config parsing (Werkzeug debugger exposure)

Summary The Unfurl web app enables Flask debug mode even when configuration sets debug = False. The config value is read as a string and passed directly to app.rundebug=..., so any non-empty string evaluates truthy. This leaves the Werkzeug debugger active by default. Details - unfurl/app.py:weba...

9.3CVSS6.3AI score0.00557EPSS
SaveExploits1References3
Redos
Redos
added 2026/01/29 12:0 a.m.10 views

ROS-20260129-73-0007

Vulnerability in gdb related to writing outside buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to execute arbitrary code...

5.5CVSS6.4AI score0.00245EPSS
SaveExploits0
Snyk
Snyk
added 2026/01/28 7:37 a.m.8 views

Malicious Package

Overview pino-debugger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/28 7:37 a.m.15 views

Malicious code in pino-debugger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7133bd631bca4144933e87ca536afdde9683d259d48d0214ed53581cf41584ee The package pino-debugger was found to contain malicious code. Source: ghsa-malware 94f20503a24b5da686e72147cd518873a372a8fe87f409e470e7b5c7ffbec055...

5.8AI score
SaveExploits0References1
OSV
OSV
added 2026/01/28 7:37 a.m.6 views

MAL-2026-572 Malicious code in pino-debugger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7133bd631bca4144933e87ca536afdde9683d259d48d0214ed53581cf41584ee The package pino-debugger was found to contain malicious code. Source: ghsa-malware 94f20503a24b5da686e72147cd518873a372a8fe87f409e470e7b5c7ffbec055...

5.8AI score
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/27 12:0 a.m.13 views

REFramework security vulnerabilities

REFramework is a scripting platform developed by PrayDog, the individual developer of the game. Versions of REFramework prior to 1.5.5 contained security vulnerabilities. These vulnerabilities stemmed from a heap buffer overflow in the Lua debugging component ldebug.c, which could allow arbitrary...

6.9CVSS6.2AI score0.00139EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/19 12:0 a.m.5 views

MiracleLinux 7 : mercurial-2.6.2-7.el7 (AXEA:2017-1725:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXEA:2017-1725:01 advisory. - In Mercurial before 4.1.3, hg serve --stdio allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by...

9CVSS7.9AI score0.21685EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/01/16 4:20 p.m.6 views

CVE-2021-47762

HTTPDebuggerPro 9.11 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to inject malicious executables and gain elevated...

8.5CVSS7.6AI score0.00114EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.5 views

MiracleLinux 4 : mercurial-1.4-5.AXS4 (AXSA:2017-1710:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2017-1710:01 advisory. Mercurial is a fast, lightweight source control management system designed for efficient handling of very large distributed projects. Quick start:...

9CVSS7.9AI score0.21685EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.7 views

MiracleLinux 4 : gdb-7.2-60.AXS4 (AXSA:2013-121:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-121:01 advisory. GDB, the GNU debugger, allows you to debug programs written in C, C++, Java, and other languages, by executing them in a controlled fashion and printing their...

6.9CVSS7.2AI score0.0036EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/01/15 3:52 p.m.4 views

CVE-2021-47762

HTTPDebuggerPro 9.11 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to inject malicious executables and gain elevated...

8.5CVSS6AI score0.00114EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/01/15 3:52 p.m.8 views

EUVD-2026-2774

HTTPDebuggerPro 9.11 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to inject malicious executables and gain elevated...

8.5CVSS7.1AI score0.00114EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/01/15 12:0 a.m.11 views

MadeForNet HTTP Debugger Pro code issues and vulnerabilities

MadeForNet HTTP Debugger Pro is an HTTP/HTTPS protocol packet capture and analysis tool developed by the American company MadeForNet. Version 9.11 of MadeForNet HTTP Debugger Pro contains a code vulnerability. This vulnerability stems from binary paths in service configurations that lack quotatio...

8.5CVSS6.2AI score0.00114EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.10 views

PT-2026-3038

HTTPDebuggerPro 9.11 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to inject malicious executables and gain elevated...

8.5CVSS7.6AI score0.00114EPSS
SaveExploits0References3
Rows per page
Query Builder