Security Bulletin: IBM Planning Analytics Local is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by security vulnerabilities. These vulnerabilities have been addressed in IBM Planning Analytics Local v2.0 - IBM Planning Analytics Workspace version 2.1.24. Vulnerability Details CVEID:CVE-2026-75063...

CVE-2026-87980 Security vulnerability affects the UNIX S-TAP component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs...

CVE-2026-107782

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

GTFOBLookup

GTFOBLookup GTFOBins、LOLBAS、WADComs、HijackLibsのためのオフラインコマンドライン検索ユーティリティです。 Files .gitignore : Gitignore ファイル gtfoblookup.1 : GTFOBLookup の Linux man ページ gtfoblookup.py : GTFOBLookup ユーティリティ LICENSE.md : ライセンスファイル README.md : このファイル requirements.txt : 必要な Python パッケージの一覧 Dependencies GTFOBLookup は...

GOATCasino

GOAT Casinoへようこそ！ カジノのさまざまなゲームで運（またはスキル）を試して、素晴らしいトークンと賞品を勝ち取りましょう！ これは開発中のため、現時点ではがっかりするほどゲーム数が少ないかもしれません。しかし、今後さらに追加される予定で、それまでの間にも悪用できるものがたくさんあります。 始めるには: 1. 依存関係をインストールする 1. 最新版の node 2. sudo apt install npm 3. sudo npm install -g truffle ganache-cli 2. ./startchallenge.sh を実行して、testrpc...

CVE-2026-11936

The local management interface of IBM Security Verify Access (versions 10.0 through 10.0.9.2) and IBM Verify Identity Access (versions 11.0 through 11.0.3) is vulnerable to cross-site scripting (XSS) in certain configurations. This flaw, associated with CWE-79 , allows an authenticated user to em...

CVE-2026-12109 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative privileges and access to the local management interface to execute arbitrary code due to an unbounded write to a fixed-size stack buffer...

EUVD-2026-95265

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative privileges and access to the local management interface to execute arbitrary code due to an unbounded write to a fixed-size stack buffer...

CVE-2026-12109 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative privileges and access to the local management interface to execute arbitrary code due to an unbounded write to a fixed-size stack buffer...

CVE-2026-12109

IBM Security Verify Access (10.0 through 10.0.9.2) and IBM Verify Identity Access (11.0 through 11.0.3) are vulnerable to an unbounded write to a fixed-size stack buffer (CWE-787). This flaw could allow an attacker with administrative privileges and access to the local management interface to exe...

CVE-2023-32629

CVE-2023-32629 — OverlayFS Local Full Privilege Escalation OverlayFS Local Privilege Escalation - Full write-up to full escalation For educational and authorized security research purposes only. Severity: High Type: Local Privilege Escalation LPE Affected: Ubuntu kernels prior to May/June 2023...

glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

A flaw was found in the GNU C Library glibc. This vulnerability could allow an attacker with local access to trigger a heap buffer overflow by manipulating how the fopen function handles certain input. This could lead to minor disruptions in system operations or limited access to sensitive...

neko-master

Neko Master ネットワークトラフィックを明確に可視化。 リアルタイム監視 · トラフィック監査 · マルチゲートウェイ対応 English | 中文 !IMPORTANT 免責事項 本プロジェクトは、ローカルゲートウェイ環境向けの トラフィック分析・可視化ツールです。 ネットワークアクセスサービス、プロキシ購読、 クロスネットワーク接続機能は一切提供しません。 すべてのデータはユーザー自身のネットワーク環境から収集されます。 本プロジェクトは MIT License...

tomcatfileread

CVE-2020-1938 Tomcat ファイル読み取り / ファイルインクルード Ghostcat — python3 CVE-2020-1938 CNVD-2020-10487 Tomcat AJP プロトコルファイル読み取り / ファイルインクルード脆弱性エクスプロイト POC の python3 変換版 。 オリジナル python2 作者: ydhcui — https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi 使用方法 python3...

FHEM-6.0-Local-File-Inclusion-LFI-Vulnerability

FHEM-6.0-Local-File-Inclusion-LFI-Vulnerability FHEM 6.0의 LFI 취약점으로 인해 공격자가 파일을 포함시킬 수 있으며, 이는 민감한 정보 노출로 이어질 수 있습니다. CVE-2020-19360 https://vulners.com/cve/CVE-2020-19360 PoC 취약점을 악용하기 위해, 공격자는 'http://HOST/fhem/FileLoglogWrapper?dev=Logfile &file=%2fetc%2fpasswd&type=text' 요청을 사용하고 "file" 매개변수를...

local-llm-ctf

本地大语言模型 CTF 与实验室 本仓库旨在配合 https://bishopfox.com/blog/large-language-models-llm-ctf-lab 上的内容使用，该内容涵盖了研究的目标、实现说明以及 CTF 的一些结果。...

opensuse-leap-privesc-exploit

CVE-2025-6018 + CVE-2025-6019 익스플로잇 체인 이 익스플로잇은 openSUSE Leap 15.6을 대상으로 한 HackTheBox 챌린지를 해결하기 위해 개발되었습니다. 크레딧 이 익스플로잇은 Qualys 보안 팀의 원본 연구를 기반으로 합니다: 권고: https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt CVE-2025-6018: openSUSE 15의 PAM에서 권한 없는 사용자에서 allowactive로의 LPE CVE-2025-6019:...

CVE-2025-15368-Exploit

CVE-2025-15368 Exploit Tool SportsPress Plugin for WordPress = 2.7.26 - LFI & RCE Author: kazehere4you Date: 2026-02-11 Description This tool exploits a Local File Inclusion LFI vulnerability in the SportsPress plugin for WordPress versions up to and including 2.7.26. By leveraging the eventlist...

CTT-Vsyslog-Vortex-CVE-2023-6246

CTT-Vsyslog-Vortex-CVE-2023-6246 CVE-2023-6246 glibc vsysloginternal heap buffer overflow exploitation using Convergent Time Theory α = 0.0302011. 33-layer temporal heap spray + phase-locked trigger for reliable local privilege escalation. README.md CTT-Vsyslog-Vortex Temporal Resonance Exploit f...

CVE-2025-32463

CVE-2025-32463: Sudo Privilege Escalation chroot This repository contains information and/or a proof of concept PoC about the vulnerability CVE-2025-32463 , a critical local privilege escalation flaw in the sudo utility. 📌 Description The vulnerability allows a local user to gain root access by...