BadKernel

BadKernel vollständiger Exploit für CVE-2016-6754BadKernel Folien für syscan2016 shanghai "BadKernel --- Exploit V8 mit einem Tippfehler"...

SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices

SNMPocalypse: il bug di Cisco consente agli hacker di mandare in crash o di controllare i dispositivi CVE-2023-20352 è una vulnerabilità critica di stack overflow nel motore SNMP di Cisco IOS/IOS XE. Con soli pacchetti SNMP appositamente costruiti, gli attaccanti remoti possono mandare in crash i...

Moderate: Red Hat Security Advisory: tftp security update

An update for tftp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

CVE-2025-13380

AI Engine for WordPress: ChatGPT, GPT Content Generator = 1.0.1 - Lettura Arbitraria di File per utenti autenticati Contributor+ Il plugin AI Engine for WordPress contiene una vulnerabilità nella funzionalità di inserimento immagini che consente a qualsiasi utente autenticato con capacità di...

CVE-2025-69599

CVE-2025-69599 author: Rafael José Núñez Gulías company: Iberian Var Group Prodotti affetti: RayVentory Scan Engine 12.6 Update 8 e versioni precedenti Avviso Raynet: RSEC200965 rvia in Raynet è vulnerabile a un problema di Elemento del Percorso di Ricerca Non Controllato Uncontrolled Search Path...

CVE-2023-27350

PaperCut NG/MG RCE CVE-2023-27350 Ein optimierter Bash-Exploit für CVE-2023-27350. Dieses Skript automatisiert die Authentifizierungsumgehung, die Umgebungsvorbereitung und die Befehlseinschleusung über die PaperCut-Druckerskript-Engine. Visueller Nachweis Basis-RCE: Auslösen einer Reverse Shell:...

cve-2025-66723

CVE-2025-66723: inMusic Brands Engine DJ =3.0.0 bis =3.0.0, 4.3.4, auf allen Plattformen macOS, Windows. Speziell getestete Versionen, die als betroffen/verwundbar befunden wurden, macOS und Windows: 3.0.0, 3.0.1, 3.1.0, 3.1.1, 3.2.0, 3.3.0, 3.4.0, 4.0.0, 4.0.1, 4.1.0, 4.2.0, 4.2.1, 4.3.0 Speziel...

google-chrome-emergency-update

Aggiornamento di Sicurezza Urgente di Chrome Questo repository contiene informazioni e strumenti relativi all'aggiornamento urgente di Chrome di Google per correggere vulnerabilità di sicurezza critiche. 🚨 Avviso di Aggiornamento Urgente Google ha rilasciato un aggiornamento urgente di Chrome per...

CVE-2026-87681

An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks...

CVE-2026-87681

An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1 . The flaw occurs because the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks while processing specific mana...

CVE-2026-87681

An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks...

CVE-2026-87681

An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks...

EUVD-2026-94655

An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks...

EUVD-2026-94641

Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME challenges do not validate when issuing certificates under the default directory policy. This may allow an ACME client to obtain a certificate containing unverified identity claims, potentially enabling...

sigint

SIGINT Dashboard OSINT in tempo reale con tracciamento live di aeromobili, imbarcazioni, attività sismica, incendi, meteo ed eventi su un globo interattivo. Realizzato con Bun, React 19 e un motore di rendering personalizzato Canvas 2D + Web Worker. Installabile come PWA. Screenshot Indice dei...

PT-2026-107726

An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks...

CVE-2026-92543

Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Becau...

Moderate: tftp security update

The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to...

Network-Detection-Engine

versione: 0.001 Motore di Rilevamento Rete Un leggero 'Motore di Rilevamento Intrusioni di Rete' cattura il traffico live e rileva attacchi live reali in tempo reale. Zig0.15.2. Caratteristiche - Cattura live dei pacchetti usando libpcap - Parsing personalizzato dei pacchetti: - Ethernet - IPv4 -...