liferay-ga4-rce-research

Liferay CE 7.0.3 GA4 — Investigación de Vulnerabilidades RAPTOR Loop-Hunt Una auditoría de seguridad de Liferay Portal CE 7.0.3 GA4 git tag 7.0.3-ga4, commit b2d7cc68a realizada con la metodología RAPTOR loop-hunt : reconocimiento determinista → 25 agentes generadores aislados leyendo el código...

Turvan6rkus-CVE-2024-3273

🛠️ Inyección de Comandos en Dispositivos de Almacenamiento en Red D-Link 🌟 Antecedentes D-Link Network Attached Storage NAS o almacenamiento en red es un dispositivo conectado a una red informática con uno o más discos duros para almacenar y compartir archivos. A diferencia de un disco duro extern...

android

cSploit 现已视为 EOL（生命周期结束），开发者不再进行更新。当前版本可能无法在较新的 Android 版本上正常运行。我们感谢所有多年来为 cSploit 做出贡献的人。 cSploit：Android 网络渗透测试套件 cSploit 是一个自由/开源（GPL 许可）的 Android 网络分析与渗透套件，旨在成为 最完整和先进的专业工具包 ，供 IT 安全专家/极客在移动设备上执行网络安全评估。 更多信息请访问 www.cSploit.org。 功能 绘制本地网络拓扑 识别主机操作系统和开放端口 添加本地网络之外的自有主机 集成 traceroute 集成Metasploi...

CVE-2026-82971

A command injection vulnerability in QVidium Opera11 3.3.2a26-Ax4x-opera11 affects the CGI script /cgi-bin/net_tr.cgi , where manipulation of the ipaddr argument allows remote, unauthenticated attackers to execute arbitrary commands. The vulnerability is rated CVSS 10.0 (Critical) with low attack...

BurpSuiteSharpener

Informazioni su questo repository e fine del ciclo di vita EOL Questo repository non verrà più aggiornato. Utilizza https://github.com/irsdl/BurpSuiteSharpenerEx. Burp Suite Sharpener Questa estensione aggiunge una serie di funzionalità UI e operative a Burp Suite per rendere il lavoro un po' più...

envizon

envizon – von evait security EOL https://github.com/evait-security/envizon/issues/130 Wir evait security sind für die interne Projektdokumentation zu https://gitlab.com/invuls/pentest-projects/pcf umgezogen. Netzwerkvisualisierung & Pentest-Berichterstattung Version 5.0 Dieses Tool wird von evait...

security-onion

Security Onion Security Onion 16.04 hat das Ende seiner Lebensdauer erreicht: https://blog.securityonion.net/2021/04/security-onion-1604-has-reached-end-of.html Sie finden das neue Security Onion 2 Repository unter: https://github.com/Security-Onion-Solutions/securityonion/...

scanner-cli

Deprecation Notice: Hawkeye hat sein Lebensende erreicht. Es gibt heutzutage modernere Optionen für dich und dein Projekt. Falls du die Wartung des Projekts übernehmen möchtest, kannst du mich gerne kontaktieren. Du findest Wege, mich zu erreichen, auf meiner persönlichen Homepage. . . . . . . De...

OpenPLC_v3

OpenPLC Runtime Version 3 ⚠️ Dieses Projekt hat das Ende seiner Lebensdauer erreicht und wird nicht mehr gewartet. Es wurde durch OpenPLC Runtime v4 ersetzt. Bitte besuchen Sie das neue Repository für Installationsanweisungen, Dokumentation und Support. OpenPLC ist eine...

Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

Ajax.NET Professional AjaxPro contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users are advised to discontinue use and/or transition to a...

EUVD-2026-64854

A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component Agent Execution Workflow. Such manipulation leads to infinite loop. The attack may be performed from remote. The exploit is publicly available and might be used. This...

Astra Linux – Vulnerability in Apache Log4j1.2

By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter, where the values to be inserted are converted using PatternLayout. The message converter %m is likely to always be included. This allows attackers to manipulate SQL statements by entering crafted...

CVE-2026-19841

A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes incorrect default permissions. The attack is possible to be carried out remotely. A high degree of complexity is needed for the...

CVE-2026-41939

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by using default credentials identical across all installations. Attackers can...

CVE-2026-41939 Care Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFly

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by using default credentials identical across all installations. Attackers can...

CVE-2026-41939

Summary: CVE-2026-41939 affects Care Everywhere Gateway 14.3.10, where a hard-coded credential flaw in the bundled WildFly 8.2.0.Final management interface enables unauthenticated remote access to the WildFly admin console (port 20990) with default credentials. This allows deployment of a malicio...

Wednesday, July 29, 2026 Security Releases

Wednesday, July 29, 2026 Security Releases Security releases available Updates are now available for the 26.x, 24.x, 22.x Node.js release lines for the following issues. This security release includes the following dependency updates to address public vulnerabilities: undici 8.9.0, 7.29.0, 6.28.0...

PT-2026-65863

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by using default credentials identical across all installations. Attackers can...

Cisco IOS 12.4 HTTP Server Cross-Site Request Forgery (CVE-2008-4128)

According to its self-reported version, Cisco IOS 12.4 is affected by multiple cross-site request forgery CSRF vulnerabilities in the HTTP administration component. An unauthenticated, remote attacker can exploit these by persuading an authenticated user to follow a malicious link, allowing...

CVE-2026-15487 TRENDnet TEW-821DAP Firmware Update system_ntp sub_41FBD0 os command injection

A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. This impacts the function sub41FBD0 of the file /goform/systemntp of the component Firmware Update Handler. Performing a manipulation of the argument Hostname results in os command injection. The attack may be initiated remotely. The vendo...