CVE-2026-92745

A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management RHSM offline token. The token is exposed when it is passed as a command-line argument to a helper script during the...

CVE-2026-77339

Process Compose is a scheduler and orchestrator for non-containerized applications. Prior to 1.120.0, the MCP SSE listener in src/mcp/server.go accepts browser-origin requests to /sse and the returned message endpoint without validating the Host header, validating the Origin header, or...

EUVD-2026-83193

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, AnyIO starts process-pool workers with standard error connected to a pipe that the parent never drains, even though the documented behavior redirects all three...

CVE-2026-64847

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, AnyIO starts process-pool workers with standard error connected to a pipe that the parent never drains, even though the documented behavior redirects all three...

CVE-2026-64847 AnyIO process-pool workers can block indefinitely on undrained stderr

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, AnyIO starts process-pool workers with standard error connected to a pipe that the parent never drains, even though the documented behavior redirects all three...

CVE-2026-55556

Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parseauthheader function in contrib/imhttp/imhttp.c allocates a zero-byte heap buffer with calloc0, len when an HTTP Basic Authorization value exceeds its fixed work buffer, then passes...

CVE-2026-55556 Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handling

Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parseauthheader function in contrib/imhttp/imhttp.c allocates a zero-byte heap buffer with calloc0, len when an HTTP Basic Authorization value exceeds its fixed work buffer, then passes...

CVE-2026-77339 Process Compose: Browser DNS rebinding lets websites control local process-compose MCP tools

Process Compose is a scheduler and orchestrator for non-containerized applications. Prior to 1.120.0, the MCP SSE listener in src/mcp/server.go accepts browser-origin requests to /sse and the returned message endpoint without validating the Host header, validating the Origin header, or...

CVE-2026-77339

Process Compose (a scheduler and orchestrator for non-containerized applications) had a vulnerability in its MCP SSE listener (src/mcp/server.go) prior to version 1.120.0 . The listener accepted browser-origin requests to /sse and the returned message endpoint without validating the Host or Origi...

CVE-2026-77339 Process Compose: Browser DNS rebinding lets websites control local process-compose MCP tools

Process Compose is a scheduler and orchestrator for non-containerized applications. Prior to 1.120.0, the MCP SSE listener in src/mcp/server.go accepts browser-origin requests to /sse and the returned message endpoint without validating the Host header, validating the Origin header, or...

EUVD-2026-83168

Process Compose is a scheduler and orchestrator for non-containerized applications. Prior to 1.120.0, the MCP SSE listener in src/mcp/server.go accepts browser-origin requests to /sse and the returned message endpoint without validating the Host header, validating the Origin header, or...

CVE-2026-63420

OpenImageIO is a toolset for reading, writing, and manipulating image files relevant to VFX/animation. This vulnerability affects the PSD input plugin (src/psd.imageio/psdinput.cpp). An indexed PSD with transparency metadata creates fewer channel_buffers than spec.nchannels advertises; when oiio:...

EUVD-2026-82983

braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...

vm2

vm2 vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Installation root@kitploit: npm install vm2 Quick Examples root@kitploit: import VM from 'vm2'; const vm = new VM; vm.runprocess.exit; // TypeError: process.exit is not a function root@kitploit: import Node...

aegis

Aegis Controlador de protección de procesos en modo kernel que utiliza ObRegisterCallbacks para eliminar permisos de acceso a memoria de los handles. Implementación básica que intercepta la creación de handles y elimina PROCESSVMREAD/WRITE/OPERATION de intentos de acceso no autorizados. Nota: Si ...

pe-sieve

Introducción PE-sieve es una herramienta que ayuda a detectar malware en ejecución en el sistema, así como a recolectar el material potencialmente malicioso para su posterior análisis. Reconoce y vuelca una variedad de implantes dentro del proceso escaneado: PE reemplazados/inyectados, shellcodes...

fake-sandbox

Procesos Falsos de Sandbox FSP Este pequeño script simulará procesos falsos de software de análisis, sandbox y máquinas virtuales que algunos malware intentarán evitar. Puedes descargar el script original creado por @x0rz aquí gracias, por cierto. También puedes descargar mi script ligeramente...

CVE-2021-31760

..| CVE-2021-31760 |.. Descripción : Explotando un ataque de Cross-site request forgery CSRF para obtener una ejecución remota de comandos RCE a través de la función de procesos en ejecución de Webmin Versión probada : Webmin 1.973 versión más reciente de GitHub 07/03/2021 Tipo de ataque: Remoto...

xpid

xpid Es nmap pero para pids. 🤓 Por favor, ayúdame a convertirme en un programador independiente donando directamente a continuación. xpid le da a un usuario la capacidad de "investigar" detalles de procesos en un sistema Linux. Por ejemplo, un hilo en reposo tendrá un directorio /proc/pid al que ...

mortar

Mortar Loader Técnica de evasión de red teaming para derrotar y desviar la detección y prevención de productos de seguridad. Mortar Loader realiza el cifrado y descifrado de PE/Shellcode dentro de los flujos de memoria y lo ejecuta aprovechando varias técnicas de inyección. Mortar es capaz de...