CVE-2026-77991

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-77991 CVE-2026-77991 JEM - Joomla Event Manager 5.0.0 - joomlaeventmanager.net I am @abraxasnull. Loopback lab. The client is CVE-2026-77991-Abraxas-Labs.py. The advisory named a model. Privileged RCE:...

[SECURITY] Fedora 45 Update: zypper-1.14.94-3.fc45

Zypper is a command line package manager tool using libzypp, which can be used to manage software for RPM based systems...

[SECURITY] Fedora 45 Update: pragha-1.3.3-36.fc45

Pragha is is a lightweight GTK+ music manager that aims to be fast, bloat-fre e, and light on memory consumption. It is written completely in C and GTK+. Pragha is a fork of Consonance Music Manager, discontinued by the original author...

[SECURITY] Fedora 45 Update: pacemaker-3.0.3-2.fc45

Pacemaker is an advanced, scalable High-Availability cluster resource manager. It supports more than 16 node clusters with significant capabilities for managing resources and dependencies. It will run scripts at initialization, when machines go up or down, when related resources fail and can be...

[SECURITY] Fedora 45 Update: openbox-3.6.1-32.fc45

Openbox is a window manager designed explicity for standards-compliance and speed. It is fast, lightweight, and heavily configurable using XML for its configuration data. It has many features that make it unique among window managers: window resistance, chainable key bindings, customizable mouse...

[SECURITY] Fedora 45 Update: compiz-0.8.18-22.fc45

Compiz is one of the first OpenGL-accelerated compositing window managers for the X Window System. The integration allows it to perform compositing effects in window management, such as a minimization effect and a cube work space. Compiz is an OpenGL compositing manager that use Compiz use...

[SECURITY] Fedora 45 Update: caja-1.28.0-13.fc45

Caja mate-file-manager is the file manager and graphical shell for the MATE desktop, that makes it easy to manage your files and the rest of your system. It allows to browse directories on local and remote file systems, preview files and launch applications associated with them. It is also...

Security Bulletin: Multiple vulnerabilities in IBM Cloud Pak System

Summary Multiple vulnerabilities were found in linux kernel, libssh expat, libssh, openSSL in Platform System Manager PSM OS Image for Red Hat Enterprise Linux v8 shipped with IBM Cloud Pak System. Those vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details...

PT-2026-104542

Name of the Vulnerable Software and Affected Versions The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management versions prior to 8.97.1 Description An issue exists where authenticated attackers with subscriber-level access and above can perform a generic SQL Injection. This occur...

CVE-2026-18443: Improper Neutralization of Special Elements used in an SQL Command

The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is vulnerable to generic SQL Injection via the 'accessprivileges' parameter in all versions up to, and including, 8.97.0 due to insufficient escaping on the user supplied parameter and lack of sufficien...

FreePBX-CVE-2025-57819-CVE-2025-61678

FreePBX-CVE-2025-57819-CVE-2025-61678 利用 CVE-2025-57819（堆叠查询 SQL 注入）和 CVE-2025-61678（FreePBX Endpoint Manager 中的认证文件上传）实现远程代码执行 RCE。仅用于教育目的。 参考： https://www.picussecurity.com/resource/blog/critical-freepbx-vulnerabilities-cve-2025-66039-cve-2025-61675-cve-2025-61675...

Pwdb-Public

PWDB - New generation of Password Mass-Analysis Goal Leaving the 20 year old stuff of red team behind. Stuff works fine, and no one bothers to check/replace it through decades. Included dumps You can check the status.txt in this repository to keep track of included dumps. Mystery List of 40k high...

CVE-2026-37070

CVE-2026-37070 位于 Veno File Manager Project 4.4.9 中的 /vfm-admin/ajax/streamvid.php 存在不正确的访问控制，允许已认证的攻击者通过向受影响端点发送特制的 GET 请求，在知道路径和文件名的情况下读取其他用户上传的任何文件。 https://github.com/user-attachments/assets/f5d44ead-af30-4c88-8e90-ad1e1e4913b5...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: tigera-operator, helm-set-status, k9s, cluster-api-helm-controller, gitness, kargo, helm-mapkubeapis, manifest-tool, rancher-helm, helm-push, opentofu, xeol, kyverno-notation-aws, flux-helm-controller, maru, k8sgpt, kube-arangodb, cert-manager-cmctl...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: tigera-operator, helm-set-status, k9s, cluster-api-helm-controller, gitness, kargo, helm-mapkubeapis, manifest-tool, rancher-helm, helm-push, opentofu, xeol, kyverno-notation-aws, flux-helm-controller, maru, k8sgpt, kube-arangodb, cert-manager-cmctl...

freepbx-endpoint-sqli-rce

CVE-2025-57819 — FreePBX 端点模块 SQL注入 → 远程代码执行 摘要 FreePBX 是 Asterisk PBX 的开源 Web 图形用户界面，广泛应用于企业电话环境。端点管理器 模块在 /admin/ajax.php 处暴露了一个 AJAX 处理程序，该程序接收一个 brand 参数，并在未经过滤的情况下直接将其插入 SQL 查询中。未经身份验证的远程攻击者可以注入任意 SQL，在 cronjobs 表中插入一行，并让 FreePBX 的 cron 守护进程将一个可执行的 PHP 网页木马写入 Web 根目录——从而在大约一分钟内实现未经身份验证的远程代码执...

CVE-2026-37072

CVE-2026-37072 Veno File Manager Project Veno File Manager Project 4.4.9 在 admin-head-updates.php 中存在不正确的访问控制漏洞 未认证的攻击者可以利用 'lang' GET 参数中的本地文件包含漏洞。通过向 'lang' URL 参数发送特制的 POST 请求并包含正确的文件，攻击者可以破坏配置文件。然后，通过向 setup 端点发送 GET 请求，可以强制部分重新生成配置文件，并将超级管理员密码重置为默认值，从而获得完全的管理员访问权限。无需用户交互。...

CVE-2026-37068

CVE-2026-37068 Veno File Manager Project 4.4.9 中的 /vfm-admin/index.php?section=translations&action=update 存在任意文件写入漏洞，允许具有超级管理员角色的已认证用户通过向受影响端点发送特制 POST 请求来覆盖应用程序中的任意 PHP 文件。...

screenscrub

screenscrub 在截图中查找凭据，将其提取到密钥管理器，并不可逆转地将它们从图像中隐去——这样秘密就不会在你的笔记、截图和 /Desktop 中腐烂。 本地。离线。静默。默认无网络、无遥测。 screenscrub 连接了两个现有的工具类别：GUI 隐去工具（Xnapper、Shhshot、macshot）手动模糊 PII，但无法区分秘密与地址，也无法捕捉它们隐藏的内容；秘密扫描器（gitleaks、TruffleHog）能发现真实的凭据，但仅限于文本，从未出现在 PNG 中。screenscrub 将 gitleaks...

CVE-2026-37073

CVE-2026-37073 Control de acceso incorrecto en /vfm-admin/ajax/sendfiles.php en Veno File Manager Project 4.4.9 permite a un atacante no autenticado enviar correos electrónicos desde el servidor SMPT configurado en la aplicación mediante una solicitud POST al endpoint con los parámetros y...