617 matches found
dirtyCow
Dirtycow, noto anche come CVE-2016-5195, è una vulnerabilità molto popolare del passato. Per prima cosa scegli la versione di Linux adatta a questa vulnerabilità. Poi installala o eseguila su VBOX o VMWare. Dopo averla installata, segui queste istruzioni: 1. Crea un utente senza accesso root. 2...
rapid7-CVE-2026-15409
CVE-2026-15409 Questa repository contiene una proof-of-concept per CVE-2026-15409. Stabilisce l'esecuzione remota di codice senza privilegi di root su SonicWall SMA 1000 implementando il protocollo Erlang atteso da localhost:1050 e instradandolo tramite websocket per la lettura/scrittura di file ...
lamda
FIRERPA Android ｜ Automazione Alimentata dall'IA Un framework di automazione Android tutto-in-uno che combina servizi on-device, agenti pronti per l'IA e invocazione di strumenti estensibile. Documentazione | 使用文档 | TELEGRAM | QQ Group | SKILLS | llms-full.txt | 中文版本 FIRERPA è una piattaforma di...
sadcloud
Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...
EUVD-2026-51988
ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP transport, causing all engine permission checks to silently pass as no-ops. Non-root MCP-allowed users can perform arbitrary database writes, DDL, schema mutations, and execute arbitrary JavaScript code via t...
CVE-2026-68578 ArcadeDB before 26.7.3 Authentication Bypass via MCP Transport
ArcadeDB versions before 26.7.3 fail to bind the authenticated principal in the MCP HTTP transport, causing all engine permission checks to silently pass as no-ops. Non-root MCP-allowed users can perform arbitrary database writes, DDL, schema mutations, and execute arbitrary JavaScript code via t...
CVE-2026-68578
ArcadeDB before 26.7.3 is affected by an authentication bypass in the MCP HTTP transport: the server does not bind the authenticated principal, causing engine permission checks to pass as no-ops. As a result, non-root MCP-allowed users can perform arbitrary writes, DDL, schema mutations, and run ...
CVE-2026-68563
A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the leappoldpostgresqldata option is selected, a PostgreSQL data backup archive is created with insecure permissions. This allows a local non-root user on the managed node to read...
CVE-2026-68563
A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the leappoldpostgresqldata option is selected, a PostgreSQL data backup archive is created with insecure permissions. This allows a local non-root user on the managed node to read...
Linux Distros Unpatched Vulnerability : CVE-2026-68563
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the leappoldpostgresqldata option is...
GHSA-P279-2CQP-84JG OpenDJ SASL PLAIN authzid bypassing the proxy ACI scope check
Summary When a SASL PLAIN bind supplies an authorization identity authzid that resolves to a different user, PlainSASLMechanismHandler verified only the PROXIEDAUTH privilege and never evaluated the "proxy" access-control right the mayProxy ACI scope check. As a result, any account holding the...
SUSE CVE-2026-63892
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject dirlen length u16 widened to sizet. Two distinct OOB conditions follow when entry-length uuid, ... which always reads 4 dwords from diroffset. tbpropertyentryvalid only enforces diroffset +...
SUSE-SU-2026:3124-1 Security update for microcode_ctl
This update for microcodectl fixes the following issue: - CVE-2025-35979: shared microarchitectural predictor state in VMX non-root operation could lead to data leaks bsc1265189. Changes for microcodectl: - Intel CPU Microcode was updated to the 20260512 release bsc1265189: Update for various...
Linux Distros Unpatched Vulnerability : CVE-2026-63892
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: property: Reject dirlen length u16 widened to sizet. Two distinct OOB conditions follow when entry-length uuid, ... which always reads 4 dwords fro...
CVE-2026-63892
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject dirlen length u16 widened to sizet. Two distinct OOB conditions follow when entry-length uuid, ... which always reads 4 dwords from diroffset. tbpropertyentryvalid only enforces diroffset +...
CVE-2026-63892 thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject dirlen length u16 widened to sizet. Two distinct OOB conditions follow when entry-length uuid, ... which always reads 4 dwords from diroffset. tbpropertyentryvalid only enforces diroffset +...
EUVD-2026-45665
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject dirlen length u16 widened to sizet. Two distinct OOB conditions follow when entry-length uuid, ... which always reads 4 dwords from diroffset. tbpropertyentryvalid only enforces diroffset +...
CVE-2026-63892
CVE-2026-63892 affects the Linux kernel thunderbolt property parsing. The non-root path in __tb_property_parse_dir() may read beyond the end of a property block when entry->length length and the code copies 4 dwords from dir_offset regardless of dir_len. This creates two OOB conditions: (1) a ...
CVE-2026-63892 thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject dirlen length u16 widened to sizet. Two distinct OOB conditions follow when entry-length uuid, ... which always reads 4 dwords from diroffset. tbpropertyentryvalid only enforces diroffset +...
PT-2026-61209
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the thunderbolt property handling where the tb property parse dir function fails to properly validate the dir len value derived from entry-length. When dir len is less...