vault

Vault Please note : We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault, please responsibly disclose by contacting us at [email protected]. Website: developer.hashicorp.com/vault Announcement list: Google Groups Discussion...

Reaper

「💀」 关于 Reaper Reaper 是一个概念验证工具，旨在利用 BYOVD（自带易受攻击驱动程序）漏洞。这种恶意技术涉及将一个合法的、易受攻击的驱动程序插入目标系统，从而使攻击者能够利用该驱动程序执行恶意操作。 Reaper 专门设计用于利用 kprocesshacker.sys 驱动程序 2.8.0.0 版本中存在的漏洞，利用其弱点来获取对目标系统的特权访问和控制。 注意： Reaper 不会杀死 Windows Defender 进程，因为它有保护机制，Reaper 只是一个简单的概念验证。 功能 终止进程 挂起进程 帮助 / \ / // / / / / / / / ,...

CVE-2021-44967

CVE-2021-44967 - Authenticatedprivileged RCE Authenticated privileged remote command execution in LimeSurvey Version 5.2.4 via upload and install plugins allows a remote user to upload arbitrary PHP code file. Usage python3 exploit.py --url --user --password --lhost --lport A superadmin user is...

MAL-015

MAL-015: Escape de Aislamiento 2 en Ansible Tower Las instalaciones de Ansible Tower en ciertas configuraciones de Rhel 7/8 son potencialmente vulnerables a los escapes de “Job Isolation” que permiten a un atacante escalar al usuario “awx” desde fuera del entorno aislado. Los siguientes...

Gorsair

Gorsair Gorsair 是一款渗透测试工具，用于发现并远程访问易受攻击 Docker 容器中的 Docker API。一旦获取对 Docker 守护进程的访问权限，即可使用 Gorsair 直接在远程容器上执行命令。 将 Docker API 暴露在互联网上存在巨大风险，因为恶意攻击者可能由此获取所有其他容器、镜像及系统的信息，甚至在使用 root 用户的镜像中获得对整个系统的特权访问。 安装 从发布版本安装 设置： GORSAIRVERSION 为你感兴趣的发布版本号 OS 为你的操作系统（linux、windows 或 darwin） ARCH 为你的架构（amd64、arm...

CVE-2025-27840-WIP

CVE-2025-27840-WIP Un trabajo en curso para CVE-2025-27840 Resumen de CVE-2025-27840 CVE-2025-27840 es una vulnerabilidad de severidad media CVSS 6.8 que afecta a los chips Bluetooth ESP32 de Espressif, integrados en más de mil millones de dispositivos IoT a nivel mundial. La falla involucra 29...

CVE-2026-12627

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...

CVE-2026-12627 Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...

CVE-2026-12627 Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...

CVE-2026-12627

Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in the boks_autoregisterd component. A remote attacker with network access to the autoregistration service may trigger memory corruption during client response processing. The vulnerability is asso...

EUVD-2026-90882

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...

PT-2026-103905

Name of the Vulnerable Software and Affected Versions Fortra Core Privileged Access Manager BoKS versions prior to 8.1.0.24 Fortra Core Privileged Access Manager BoKS versions prior to 9.0.0.7 Description A stack-based buffer overflow exists in the boks autoregisterd service. A remote attacker wi...

CVE-2026-54160

A flaw was found in Network UPS Tools NUT. The project's automated workflow improperly runs untrusted code submitted in pull requests within an environment that holds elevated write privileges. A remote attacker can exploit this flaw by submitting a malicious pull request to achieve arbitrary cod...

CVE-2021-20253

CVE-2021-20253: Escalada de Privilegios mediante Escape de Aislamiento de Trabajos en Ansible Tower Se encontró una falla en ansible-tower. La instalación predeterminada es vulnerable a un escape de aislamiento de trabajos que permite a un atacante elevar sus privilegios desde un usuario con poco...

CVE-2026-87720

Incorrect Authorization CWE-863 in project name normalization ProjectUtil.stripGitSuffix and ProjectCache eviction logic ProjectCacheImpl in Gerrit Code Review versions 2.16.0 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 allows an authenticated user or an unauthenticated user ...

CVE-2026-77967

The Botslab G980H dash camera firmware accepts a reusable authentication value without adequately verifying its freshness or association with the requesting client. An unauthenticated attacker with adjacent network access who captures a valid authentication value could replay it from another clie...

PT-2026-98276

Name of the Vulnerable Software and Affected Versions Botslab G980H affected versions not specified Description The firmware fails to properly verify the freshness or client association of authentication values. An unauthenticated attacker with adjacent network access can capture a valid...

CVE-2026-93952 Security Advisory 0183

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

CVE-2026-93952 Security Advisory 0183

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

CVE-2026-93952: Improper Input Validation

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...