DVWA

DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Application DVWA is a PHP/MariaDB web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of...

gardyn

Summary In February 2025 I conducted security research on a Gardyn Home 4.0 device. During my research, I discovered multiple vulnerabilities and poor security practices. By leveraging these vulnerabilities an attacker may be able to gain system level access to a Gardyn device and use it to stage...

nf-tables-lpe

nf-tables-lpe Exploits of Team Orca from Sea Security and Qrious Secure for multiple vulnerabilities in Netfilter's nftable module...

cisco-security-research

Cisco Security Research Researcher: 0xReadingSteiner Contact: [email protected] Vendor: Cisco Systems, Inc. Vendor Notified: 2026-08-04 Cisco PSIRT, ZDI, SSD Vendor Response: None Why This Exists Independent security research on commercially available Cisco products has identified critical...

Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed IBM WebSphere Application Server and is vulnerable to multiple vulnerabilities

Summary IBM WebSphere Application Server is shipped with IBM Tivoli Composite Application Manager for Application Diagnostics. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- Tivoli...

GO-2026-6809 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-pubsub, jaeger, ko, kubernetes-csi-driver-nfs, goreleaser, consul-k8s, nuclei, tetragon, buildah, spegel, rancher-telemetry, k8sgateway, nfpm, descheduler, apisix-ingress-controller, cass-operator, actions-runner-controller, nri-apache, crossplane,...

nbox-pwnage

nbox-pwnage Here comes the paintrain! . lol . lol . lol o o ==== OO|nn. || | nbox | oo oo oo 'oo OOOO-| oo\ | +--+--+--+--+--+--+--+--+--+-$1-+--+--+--+--+--+--+ 1. Create your own nbox appliance: vagrant up 2. SSH into the appliance with vagrant ssh 3. Check for some of the nbox vulnerabilities...

CVE-2026-114113

Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242 in its GIF, TIFF and VIPS image decoders. Attackers can supply crafted GIF, TIFF or VIPS files to applications using sharp to...

EUVD-2026-106916

Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242 in its GIF, TIFF and VIPS image decoders. Attackers can supply crafted GIF, TIFF or VIPS files to applications using sharp to...

CVE-2026-114113

Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242 in its GIF, TIFF and VIPS image decoders. Attackers can supply crafted GIF, TIFF or VIPS files to applications using sharp to...

PT-2026-120239

Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242 in its GIF, TIFF and VIPS image decoders. Attackers can supply crafted GIF, TIFF or VIPS files to applications using sharp to...

Rocky Linux 9.2 [CIQ] Security Update: openjpeg2 / openjpeg2-devel / openjpeg2-tools Multiple Vulnerabilities (ciqsa-2026_1652)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261652 advisory. This advisory aggregates security fixes for the openjpeg2 SRPM in CIQ LTS 9.2. It addresses 30 CVEs: CVE-2016-9580, CVE-2016-3182, CVE-2016-9573,...

Oracle Linux 9 : .NET / 9.0 (ELSA-2026-86171)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-86171 advisory. 9.0.122-1.0.1 - Add support for Oracle Linux 9.0.122-1 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277800 Tenable has extracted t...

Oracle Linux 10 : .NET / 10.0 (ELSA-2026-86195)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-86195 advisory. 10.0.113-1.0.1 - Add support for Oracle Linux 10.0.113-1 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277809 Tenable has...

Oracle Linux 8 : .NET / 9.0 (ELSA-2026-86170)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-86170 advisory. 9.0.122-1.0.1 - Add support for Oracle Linux 9.0.122-1 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277797 Tenable has extracted t...

Oracle Linux 9 : .NET / 10.0 (ELSA-2026-86193)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-86193 advisory. 10.0.113-1.0.1 - Add support for Oracle Linux 10.0.113-1 - Update to .NET SDK 10.0.113 and Runtime 10.0.13 - Resolves: RHEL-277808 Tenable has extract...

Oracle Linux 10 : .NET / 9.0 (ELSA-2026-86172)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-86172 advisory. 9.0.122-1.0.1 - Add support for Oracle Linux 9.0.122-1 - Update to .NET SDK 9.0.122 and Runtime 9.0.21 - Resolves: RHEL-277801 Tenable has extracted...

Oracle Linux 9 : .NET / 8.0 (ELSA-2026-86169)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-86169 advisory. 8.0.132-1.0.1 - Add support for Oracle Linux 8.0.132-1 - Update to .NET SDK 8.0.132 and Runtime 8.0.32 - Resolves: RHEL-277793 Tenable has extracted t...

Oracle Linux 8 : .NET / 8.0 (ELSA-2026-86594)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-86594 advisory. 8.0.132-2.0.1 - Add support for Oracle Linux 8.0.132-2 - Fix apphost hash duplication under compiler optimizations on ppc64le - Resolves: RHEL-277790...

Oracle Linux 10 : golang (ELSA-2026-86093)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-86093 advisory. 1.26.10-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.10-1 - Update to Go 1.26.10 fips-1 Tenable has extracted the preceding...