73986 matches found
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Prevent lpfcdebugfslockstatwrite buffer overflow A static code analysis tool identified the possibility of buffer overflow when using copyfromuser for a debugfs entry. Currently, it is possible that copyfromuser copie...
Astra Linux – Vulnerability in python-ipaddress
The Lib/ipaddress.py module in Python up to version 3.8.3 incorrectly calculates hash values for the IPv4Interface and IPv6Interface classes. This may allow a remote attacker to cause a denial of service if an application relies on the performance of a dictionary containing IPv4Interface or...
Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: drm: bridge: adv7511: Unregistering the i2c device after unregistering the CEC adapter. The cecunregisteradapter function assumes that the underlying CEC adapter is callable. For example, if the CEC adapter currently has a valid...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer. Since the report buffer is used by various drivers in various ways, let’s initialize it to zero during allocation, so that it cannot ever be used to leak kernel memory through special...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect currxfer in tegraqspicombinedseqxfer The currxfer field is read by the IRQ handler without holding a lock. This allows the IRQ handler to check whether a transfer is in progress. When clearing the...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: octeontx2-af: fixed the issue where VF bring-up affected the promiscuous state of PF. The Mbox handling of nixsetrxmode for a VF with promiscuous and allmulti flags set to false causes the deletion of the PF’s promiscuous and...
CVE-2020-25078
CVE-2020-25078 Instructions instructions Place the attack URLs in the same directory as ip.txt The attack IP is placed in the same directory as ip.txt Terminal log root@localhost:/CVE-2020-25078ls CVE-2020-25078.py ip.txt root@localhost:/CVE-2020-25078cat ./ip.txt https://xxx.xxx.xxx.xxx:3128...
CVE-2019-17137
CVE-2019-17137 CVE信息：https://vulners.com/cve/CVE-2019-17137 POC GET /index.htm%00currentsetting.htm HTTP/1.1 Host: 192.168.1.1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78.0 Accept: / Accept-Language:...
CVE-2026-100102
Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, potentially leading to compromise of the connected P4 Server...
CVE-2026-31431_je_sappelle_RoOt
CVE-2026-31431 - Copy Fail - Je s'appelle ROOT ! 📌 Objetivo del repositorio Este repositorio documenta la vulnerabilidad CVE-2026-31431 , apodada Copy Fail , y propone un procedimiento de remediación defensiva para sistemas Linux potencialmente expuestos. ⚠️ Este repositorio está estrictamente...
EUVD-2026-92295
Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, potentially leading to compromise of the connected P4 Server...
CVE-2026-36436-Public-Reference-Pack
CVE-2026-36436-Public-Reference-Pack Summary A vulnerability in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface. An authenticated administrator can inspect the client-side code using standard browser developer tools to...
KUMO-Domain-Recon-Tool
Dale un dominio a Kumo y este mapea todo lo alcanzable sobre él en una sola pasada: DNS y seguridad de correo , certificados y subdominios de los registros CT, puertos abiertos , huellas de tecnologías , credenciales filtradas e infecciones por infostealer, buckets en la nube , y 358 comprobacion...
macchanger
GNU MAC Changer GNU MAC Changer es una utilidad que facilita la manipulación de direcciones MAC de interfaces de red. Sitio web: http://www.gnu.org/software/macchanger Repositorio: http://github.com/alobbs/macchanger Un saludo, Alvaro Lopez Ortega [email protected]...
CVE-2016-3962-Exploit
CVE-2016-3962, CVE-2016-3989 POC Exploit This is a proof of concept exploit for version V5.30p of the web configuration interface for Meinberg NTP Time Server. This exploit also utilitizes CVE-2016-3989 to escalate to the root user. More details about the vulnerabilities can be found at:...
CVE-2026-29519-Lucee-Reflected-XSS
CVE-2026-29519-Lucee-Reflected-XSS Proof of Concept for Reflected XSS in Lucee CFML CVE-2026-29519 Framework 0-Day: Reflected XSS in Lucee CFML URL Parsing Affects Enterprise Deployments Versions 5.3.1.95 to 7.x Discoverer: Fouad Milat lavado Date Discovered: December 6, 2025 CVE: CVE-2026-29519...
CVE-2025-14340
XSS to Admin account takeover CVE-2025-14340 A Cross-Site Scripting vulnerability in Payara’s Administration Rest Interface, allows execution of attacker-controlled JavaScript leading to admin account take over. Because of: 1. The panel uses HTTP Basic Auth credentials are sent automatically by t...
CVE-2025-24016
CVE-2025-24016 How does this detection method work? This Nuclei HTTP template checks a target URL and its /app/login page for the Wazuh web interface, extracts the wazuhVersion value with a regex, and confirms the page is accessible 200 status and actually a Wazuh UI via title and keyword match. ...
CVE-2020-17530-s2-061
CVE-2020-17530-s2-061 s2-061 graphical interface exploit, only for fun and practice Usage python CVE-2020-17530.py Fill in target address Fill in the system command to execute Click Execute PS: The exploit includes a reverse shell function, but I was too lazy to add the corresponding buttons and...
