16023 matches found
Responder
⛔ DEPRECATED Active at https://github.com/lgandx/Responder Responder.py LLMNR/NBT-NS/mDNS Poisoner Author: Laurent Gaffie http://www.spiderlabs.com Intro Responder an LLMNR, NBT-NS and MDNS poisoner. It will answer to specific NBT-NS NetBIOS Name Service queries based on their name suffix see:...
Farmer
Farmer Author: @domchell Overview I wanted to be a farmer, so I started harvesting hashes Farmer is a project for collecting NetNTLM hashes in a Windows domain. Farmer achieves this by creating a local WebDAV server that causes the WebDAV Mini Redirector to authenticate from any connecting client...
pth-toolkit
pth-toolkit A modified version of the passing-the-hash tool collection https://code.google.com/p/passing-the-hash/ designed to be portable and work straight out of the box even on the most 'bare bones' systems The master branch is compiled for amd64, the final goal will be to cross compile these...
Get-NetNTLM
Get-NetNTLM Powershell module to get the NetNTLMv2 hash of the current user Example Usage: PS C: Get-NetNTLM-Hash Administrator::desktop:1122334455667788:4FFFB35....F18337AB10:0101000000000000BD526...4006F0072006D000000000000000000...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142727)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142727 advisory. In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inetfragcreate arms the fragment queue timer befo...
Anthropic Claude Code < 2.1.179 Plugin Hash Pinning Bypass (CVE-2026-86063)
The version of Anthropic Claude Code installed on the remote host is prior to 2.1.179. It is, therefore, affected by a hash pinning bypass vulnerability: - The plugin install flow in Claude Code checked out a marketplace's pinned commit SHA using git checkout without verifying that the resulting...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143077)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143077 advisory. In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inetfragcreate arms the fragment queue timer befo...
CVE-2026-98644
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. A local user could cause a Denial of Service DoS by executing batch lookup or deletion operations on large hash maps. Due to a missing rescheduling check when traversing consecutive empty hash table entries, the kernel c...
CVE-2026-98629
A flaw was found in the Linux kernel's u32 traffic control classifier clsu32. A local user with network administration privileges can trigger this flaw by creating and removing filter hash tables with manually assigned handles. Due to an identifier mismatch between table creation and deletion...
CLSA-2026-1772815097 Fix of 104 CVEs
CVE-2025-38699 - scsi: bfa: Double-free fix CVE-2025-38699 CVE-2025-38697 - jfs: upper bound check of tree index in dbAllocAG CVE-2025-38697 CVE-2025-39823 - KVM: x86: use arrayindexnospec with indices that come from guest CVE-2025-39823 CVE-2025-39689 - ftrace: Also allocate and copy hash for...
CVE-2026-82819
A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can execute authentication coercion against the underlying server, resulting in the leakage of the Cerberu...
EUVD-2026-107041
A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can execute authentication coercion against the underlying server, resulting in the leakage of the Cerberu...
CVE-2026-82819 Universal Naming Convention (UNC) Path Injection in Cerberus FTP Server
A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can execute authentication coercion against the underlying server, resulting in the leakage of the Cerberu...
CVE-2026-82819
A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By providing a malicious SMB share path, an attacker can trigger authentication coercion against the underlying server, leading to the leakage of the Cerberus ...
Use of Weak Hash
Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Use of Weak Hash via MultiModalHasher.serializeitem and iteritemtobytes in vllm/multimodal/hasher.py, where the hash digest input stream is not fram...
Linux Distros Unpatched Vulnerability : CVE-2026-112026
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected is the...
PT-2026-120442
A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can execute authentication coercion against the underlying server, resulting in the leakage of the Cerberu...
.NET 8.0 security, bug fix, and enhancement update
8.0.132-2.0.1 - Add support for Oracle Linux 8.0.132-2 - Fix apphost hash duplication under compiler optimizations on ppc64le - Resolves: RHEL-277790 8.0.132-1 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277790...
AZL-110211 CVE-2026-87866 affecting package rust 1.96.1-2
When built with wolfSSL, curl can successfully validate a pinned public key hash against a key the TLS peer does not possess. During the TLS handshake, wolfSSL validates the connection, but curl's subsequent re-parsing of the same certificate - tricked by a manipulated validity length field -...
EUVD-2026-105314
When built with wolfSSL, curl can successfully validate a pinned public key hash against a key the TLS peer does not possess. During the TLS handshake, wolfSSL validates the connection, but curl's subsequent re-parsing of the same certificate - tricked by a manipulated validity length field -...