45012 matches found
CVE-2026-75870 Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret
Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret. The session keyword freezes its options onto the application as given: it does not require a secret, warn, or refuse to start when one is absent. The cookie...
c2-framework
E1A Malware Lab Final Project - Command & Control Framework...
SUSE CVE-2026-55893
Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and opFSUB call setreg and setregn using shinfo.op.opcount without checking the fixed-size operands array. Repeated crafted instructions process...
Linux Distros Unpatched Vulnerability : CVE-2026-55893
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and...
PT-2026-79556
Name of the Vulnerable Software and Affected Versions Punk versions prior to 0.18 Description Punk for Perl allows session cookie forgery when a session is declared without a secret. The session keyword does not require a secret or issue a warning when one is absent, causing the cookie read and...
[SECURITY] [DSA 6458-1] gst-plugins-bad1.0 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6458-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 21, 2026 https://www.debian.org/security/faq -...
CVE-2026-59989
Phalcon is a high-performance, full-stack PHP framework. In 5.15.0 and earlier, resolveFilter in phalcon/Mvc/View/Engine/Volt/Compiler.zep builds the join filter by inserting the raw separator and array token values into generated PHP without passing them through expression. An attacker who can...
HaE HaEFile-1.0.3
Empower ethical hacker for efficient operations. Network version: overspace-labs/HaENet File version: overspace-labs/HaEFile README Version: English | 简体中文 Project Introduction HaE is a framework-style project in the field of cybersecurity data security , adopting a Lego brick-style modular desig...
CVE-2026-59989 Phalcon Volt compiler `join` filter compile-time PHP code injection (SSTI lead to RCE)
Phalcon is a high-performance, full-stack PHP framework. In 5.15.0 and earlier, resolveFilter in phalcon/Mvc/View/Engine/Volt/Compiler.zep builds the join filter by inserting the raw separator and array token values into generated PHP without passing them through expression. An attacker who can...
EUVD-2026-64140
Phalcon is a high-performance, full-stack PHP framework. In 5.15.0 and earlier, resolveFilter in phalcon/Mvc/View/Engine/Volt/Compiler.zep builds the join filter by inserting the raw separator and array token values into generated PHP without passing them through expression. An attacker who can...
emp3r0r v4.11.0
emp3r0r Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents. What is emp3r0r? emp3r0r is an advanced, zero-trust post-exploitation framework and command & control C2 system designed for Linux and Windows target environments. Built from the...
CVE-2026-62674 Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE
Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, PUT /sessions/sessionid/agent checks LEVELEDIT permission for a session but does not reject a bound shared or template agent whose agent.sessionid is None. An authenticated user with ed...
CLSA-2026-1787317970 TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 5 CVEs. Fixed in 5.3.31-tuxcare.11...
CLSA-2026-1787317539 TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 6 CVEs. Fixed in 4.1.7.RELEASE-tuxcare.6...
CLSA-2026-1787313469 TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 7 CVEs. Fixed in 4.3.4.RELEASE-tuxcare.3...
CLSA-2026-1787313161 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 5.3.30-tuxcare.7...
CVE-2026-74463
A flaw was found in the Linux kernel's i2c: jz4780 driver. A severe deadlock can occur between the Common Clock Framework CCF and the I2C adapter lock. This happens when an I2C-controlled clock generator client is registered or modified, and a concurrent I2C transfer attempts to acquire a lock...
CLSA-2026-1787311912 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 2 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.7...
