CVE-2026-104076

TVU Networks Receiver/Transceiver devices running firmware before version 7.9 are vulnerable to a missing authentication flaw in their REST API endpoints on port 8288 . Remote unauthenticated attackers can exploit this to read sensitive device information, including network configurations and fir...

CVE-2026-104075

TVU Networks Receiver/Transceiver devices running firmware before version 7.9 are susceptible to an authentication bypass vulnerability in the web management login endpoint (POST /tvu/Login ). By submitting a crafted HTTP request with an empty or absent UserName parameter, remote unauthenticated ...

EUVD-2026-95250

TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain an authentication bypass vulnerability in the web management login endpoint POST /tvu/Login that allows remote unauthenticated attackers to obtain an administrative session by submitting an empty or absent...

Kaonashi

Projet Kaonashi : RootedCON 2019 Ce dépôt contient plusieurs répertoires : Masks triés pour hashcat Rules avancées pour hashcat Liens pour télécharger les Wordlists de Kaonishi Slides utilisées lors de notre présentation I know your p4$$w0rd and if I don't, I will guess it... à RootedCON 2019 Un...

Sandman

ساندمان ساندمان هو باب خلفي مصمم للعمل على الشبكات المحصنة أثناء عمليات الفريق الأحمر. يعمل ساندمان كمرحّل ويستفيد من NTP بروتوكول مزامنة الوقت والتاريخ لجلب وتنفيذ شيلكود عشوائي من خادم مُحدد مسبقًا. بما أن NTP هو بروتوكول يتم تجاهله من قبل العديد من المدافعين، مما يؤدي إلى سهولة الوصول إلى...

cs50-cyber-paloalto-oauth

مشروع CS50 النهائي في الأمن السيبراني العنوان: اختراق OAuth في Salesloft وCVE-2024-3400 تأثير Palo Alto المؤلف: Yafiya Darwesh GitHub: Yafiah-Darwesh فيديو يوتيوب: https://youtu.be/CxQNj9qWoZ0?si=cHCwuTIY26YHJ8aw CVE: CVE-2024-3400 الملفات presentation.pdf — الشرائح script.txt — ملاحظات المتحدث...

CVE-2020-16152

CVE-2020-16152 ملخص | ---|--- بائع المنتج| Aerohive Networks / Extreme Networks اسم المنتج| HiveOS / IQ Engine إصدار المنتج| تم اختباره على 10.0r8a build-242466 والإصدارات الأقدم واجهة الإدارة على الويب لنظام HiveOS من Aerohive/Extreme Networks NetConfig معرضة لثغرة LFI لأنها تستخدم إصدارًا قديمً...

CVE-2024-3400-

ثغرة حقن الأوامر في جدار الحماية PAN-OS يحتوي هذا المستودع على سكربت بلغة Go يستغل ثغرة حقن أوامر Command Injection في جدران الحماية التي تعمل بنظام التشغيل PAN-OS من Palo Alto Networks. تسمح هذه الثغرة، المعرّفة برقم CVE-2024-3400، لمهاجم غير مصادَق بتنفيذ أكواد عشوائية بصلاحيات الجذر root على...

CVE-2025-0133

ماسح ثغرة CVE-2025-0133 أداة ماسح آلية مبنية على Bash للكشف عن ثغرة CVE-2025-0133 XSS المنعكسة في Palo Alto GlobalProtect Gateway & Portal باستخدام nuclei و shodanx. المؤلف : التاريخ : 2025-06-23 الخطورة : متوسطة معرف CVE : CVE-2025-0133 نوع الثغرة : Cross-Site Scripting XSS المنعكسة تم الاختبار...

netattack

NETATTACK The netattack.py is a python script that allows you to scan your local area for WiFi Networks and perform deauthentification attacks. The effectiveness and power of this script highly depends on your wireless card. NETATTACK 2 RELEASED https://github.com/chrizator/netattack2/ USAGE EASY...

CVE-2017-15944-POC

CVE-2017-15944-POC إثبات المفهوم لـ CVE-2017-15944 تنفيذ الكود عن بعد بصلاحية الجذر في جدران الحماية من Palo Alto Networks الاستخدام python panos-poc.py https://panip...

Mitel MiCollab - Arbitary File Read

The Mitel Collab Arbitrary File Read vulnerability allows an unauthenticated attacker to read arbitrary files from the underlying file system on a Mitel Collab server. Exploiting this flaw involves sending specially crafted requests to the server, bypassing access controls and allowing the attack...

DCBI-Netlog-LAB v1.0 - Command Injection

An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request. id: CVE-2023-26802 info: name: DCBI-Netlog-LAB v1.0 - Command Injection author: pussycat0x...

PAN-OS Management Interface - Path Confusion to Authentication Bypass

A vulnerability in PAN-OS management interface allows authentication bypass through path confusion between Nginx and Apache handlers.The issue occurs due to differences in path processing between Nginx and Apache, where double URL encoding combined with directory traversal can bypass authenticati...

CVE-2026-92542

A flaw was found in Moby. Firewall rules for encrypted Swarm overlay networks fail to distinguish between authentic kernel traffic and packets crafted by user processes. A local attacker can exploit this flaw by sending forged Virtual Extensible LAN VXLAN datagrams matching the overlay network...

CVE-2026-92542 Blind VXLAN injection into encrypted overlay networks from cluster peer

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

CVE-2026-92542 Blind VXLAN injection into encrypted overlay networks from cluster peer

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

Palo Alto Networks Expedition - OS Command Injection

An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls...

Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean, Docling)

Summary Before Langflow 1.10.3, several built-in components sent server-side HTTP requests to URLs the flow author controls, with no SSRF enforcement. An authenticated user who can build or run flows could make the Langflow server reach loopback, RFC 1918 / private networks, link-local addresses...

CLEANSTART-2026-TF89729 security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node

Security vulnerability affects the nfs-subdir-external-provisioner package. A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node...