EUVD-2026-67181

Unless the application explicitly raises smbMinVersion, the jCIFS client will negotiate down to SMB1/CIFS, which lacks mandatory signing/encryption and is vulnerable to NTLM relay and content-tampering MITM. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5....

CVE-2026-81697

opensslencrypt pip package openssl-encrypt versions = 1.4.8 contain a CWD-relative configuration file resolution flaw in cryptsettings.py, where CONFIGFILE originally the absolute per-user path /.cryptsettings.json is reassigned at line 84 to the bare relative name 'cryptsettings.json'. As a...

CVE-2026-81697

The openssl-encrypt PyPI package (versions ≤ 1.4.8) contains a CWD-relative configuration file resolution flaw in crypt_settings.py, where CONFIG_FILE—originally set to the absolute per-user path ~/.crypt_settings.json—is reassigned at line 84 to the bare relative name crypt_settings.json. The le...

EUVD-2026-67053

opensslencrypt pip package openssl-encrypt versions = 1.4.8 contain a CWD-relative configuration file resolution flaw in cryptsettings.py, where CONFIGFILE originally the absolute per-user path /.cryptsettings.json is reassigned at line 84 to the bare relative name 'cryptsettings.json'. As a...

http-request-smuggler

HTTP Request Smuggler Questa estensione di Burp Suite rileva e sfrutta automaticamente le vulnerabilità di HTTP Request Smuggling utilizzando tecniche avanzate di desincronizzazione sviluppate dal ricercatore di PortSwigger James Kettle. Supporta la scansione completa per vulnerabilità desync...

Advanced-Loader-Reverse-Engineering

Da Shellhost a 3 DLL: Analisi di un Loader Avanzato con Iniezione di Payload, Bypass di CFG e Attacchi di Downgrade Panoramica Questa analisi copre un loader sofisticato multi-fase che prende di mira Shellhost.exe, amsi.dll, mstscax.dll e clbcatq.dll. Il loader utilizza module stomping, bypass di...

BitUnlocker

BitUnlocker Downgrade-Angriff Ein Proof of Concept für den Zugriff auf BitLocker-verschlüsselte Laufwerke in unter 5 Minuten auf vollständig gepatchten Windows 11-Rechnern durch einen Boot-Manager-Downgrade-Angriff, der die ursprünglich als CVE-2025-48804 dokumentierte SDI-Schwachstelle ausnutzt...

cve-2024-3094-detect

CVE-2024-3094-detect Script de Verificação de Vulnerabilidade e Downgrade do XZ Utils Este script foi projetado para verificar a versão do XZ Utils instalada em seu sistema Linux e fazer o downgrade para uma versão segura, se necessário. Ele também detecta a distribuição Linux e o gerenciador de...

CVE-2024-3094

CVE-2024-3094 Betroffene Version : xz-5.6.0 oder xz-5.6.1 Lösung : xz von 5.6.0 auf 5.4.6 herabstufen. xz-backdoor.md CVE-2024-3094 Checker...

Seth

Seth Seth è uno strumento scritto in Python e Bash per eseguire MitM su connessioni RDP tentando di declassare la connessione al fine di estrarre le credenziali in chiaro. È stato sviluppato per aumentare la consapevolezza e informare sull'importanza di connessioni RDP configurate correttamente n...

smugglex

Scanner di HTTP Request Smuggling basato su Rust. Panoramica Smugglex è uno strumento di test di sicurezza che rileva vulnerabilità di HTTP Request Smuggling nelle applicazioni web. Testa gli attacchi di smuggling CL.TE, TE.CL, TE.TE, H2C e H2 e — su target HTTPS — parla HTTP/2 reale ALPN h2 per...

Linux Distros Unpatched Vulnerability : CVE-2026-79779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing Basic authorization and Cookie headers to be replayed over...

CVE-2026-79782

rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers...

CVE-2026-79779

rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing Basic authorization and Cookie headers to be replayed over plaintext HTTP after same-host HTTPS-to-HTTP redirects. An on-path attacker observing the plaintext hop can capture and reuse credentials to...

CVE-2026-79780

rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host changes. Attackers observing network traffic from a trusted endpoint can capture reusable IBM IAM tokens on same-host...

CVE-2026-79782

rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers...

EUVD-2026-65540

rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers...

CVE-2026-79779 rclone before v1.75.0 WebDAV Credential Exposure via HTTPS-to-HTTP Redirect

rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing Basic authorization and Cookie headers to be replayed over plaintext HTTP after same-host HTTPS-to-HTTP redirects. An on-path attacker observing the plaintext hop can capture and reuse credentials to...

EUVD-2026-65538

rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host changes. Attackers observing network traffic from a trusted endpoint can capture reusable IBM IAM tokens on same-host...

CVE-2026-79779

rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing Basic authorization and Cookie headers to be replayed over plaintext HTTP after same-host HTTPS-to-HTTP redirects. An on-path attacker observing the plaintext hop can capture and reuse credentials to...