directus-security

directus-security Audita cualquier instancia de Directus para detectar las configuraciones incorrectas que realmente filtran datos: exposición de lectura del rol público, enumeración de usuarios, fugas de versión/esquema sin autenticación, introspección de GraphQL y el oráculo de enumeración de...

sunsetscan

SunsetScan Network security auditing for humans — powered by nmap, built for everyone. Website: sunsetscan.com SunsetScan is a local-network security auditing tool for home network owners and IT staff who want the depth of nmap without learning nmap syntax. Point it at your network and it finds...

CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-Crash

Security Disclosure: Out-of-Bounds Read in facil.io MIME Parser leads to Server crash Assigned CVE ID CVE-2026-66729 Product: facil.io Affected versions: facil.io = 0.6.0 all 0.6.x, all 0.7.x, master; introduced when the MIME parser was added in 0.6.0 Component:...

CVE-2019-6447-ES-File-Explorer

CVE-2019-6447: Servicio HTTP sin autenticación de ES File Explorer Un harness de investigación y análisis técnico implementado de forma independiente, consciente de la seguridad, para CVE-2019-6447 , un servicio HTTP sin autenticación expuesto por versiones vulnerables de ES File Explorer para...

Grafana-Plugin-Enumerator-CVE-2021-43798

Grafana CVE-2021-43798 Plugin Enumerator A small Bash-based tool for testing Grafana instances for CVE-2021-43798 , a directory traversal vulnerability affecting vulnerable Grafana versions. The tool enumerates Grafana plugin IDs and uses curl --path-as-is to test whether directory traversal can...

EUVD-2026-95539

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of skprotocol in bpfsockdestroy skprotocol lives in struct sock, not in struct sockcommon. A timewait or request sock handed to bpfsockdestroy by the tcp iterator is neither, so reading sk-skprotocol...

CVE-2026-98384 bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of skprotocol in bpfsockdestroy skprotocol lives in struct sock, not in struct sockcommon. A timewait or request sock handed to bpfsockdestroy by the tcp iterator is neither, so reading sk-skprotocol...

CVE-2026-98384

The Linux kernel contains an out-of-bounds read vulnerability in the bpf subsystem within the bpf_sock_destroy() function. The issue arises because the code attempts to read sk_protocol from a sock structure; however, for timewait or request sockets handed to the function by the tcp iterator, thi...

CVE-2026-98384 bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of skprotocol in bpfsockdestroy skprotocol lives in struct sock, not in struct sockcommon. A timewait or request sock handed to bpfsockdestroy by the tcp iterator is neither, so reading sk-skprotocol...

CVE-2026-98377

The Linux kernel contains a vulnerability in the vlan component where the __vlan_insert_inner_tag() helper function fails to verify the presence of a MAC header before rewriting the first 16 bytes. Specifically, on IFF_TUN devices with hard_header_len == 0, the system may accept a one-byte AF_PAC...

CVE-2026-98377 vlan: require the MAC header to be present in __vlan_insert_inner_tag()

In the Linux kernel, the following vulnerability has been resolved: vlan: require the MAC header to be present in vlaninsertinnertag vlaninsertinnertag only guarantees head room via skbcowhead, never that maclen bytes of MAC header are present. Its ETHHLEN wrappers - vlaninserttag under...

CVE-2026-19571 Race condition in ITE IT8xxx2 SHI host-command backend lets a second SPI request write an unvalidated length into the in-flight request buffer

The ITE IT8xxx2 SHI host-command backend subsys/mgmt/echostcmd/backends/echostcmdbackendshiite.c copied the 8-byte host-command request header from the SPI Rx FIFO directly into the shared receive buffer data-inmsg and only afterwards checked the protocol version and the derived packet length. Th...

EUVD-2026-95527

The ITE IT8xxx2 SHI host-command backend subsys/mgmt/echostcmd/backends/echostcmdbackendshiite.c copied the 8-byte host-command request header from the SPI Rx FIFO directly into the shared receive buffer data-inmsg and only afterwards checked the protocol version and the derived packet length. Th...

CVE-2026-19571 Race condition in ITE IT8xxx2 SHI host-command backend lets a second SPI request write an unvalidated length into the in-flight request buffer

The ITE IT8xxx2 SHI host-command backend subsys/mgmt/echostcmd/backends/echostcmdbackendshiite.c copied the 8-byte host-command request header from the SPI Rx FIFO directly into the shared receive buffer data-inmsg and only afterwards checked the protocol version and the derived packet length. Th...

CVE-2026-19571

A race condition exists in the ITE IT8xxx2 SHI host-command backend (specifically in ec_host_cmd_backend_shi_ite.c) within the Zephyr RTOS. The vulnerability occurs because the driver copies the 8-byte host-command request header from the SPI Rx FIFO into the shared receive buffer (data->in_ms...

EUVD-2026-95525

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

CVE-2026-98375 xen/netfront: drop RX packets with a short Ethernet header

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

pwn_jenkins

Remote Code Execution Jenkins CLI arbitrary read CVE-2024-23897 applies to versions below 2.442 and LTS 2.426.3 Jenkins Advisory, Credits Authenticated, can retrieve a complete file: java -jar jenkins-cli.jar -noCertificateCheck -s https://xxx.yyy/jenkins -auth abc:abc connect-node "@/etc/passwd"...

EchoDrv

EchoDrv Strumento che permette di sfruttare la vulnerabilità di lettura/scrittura del kernel nel driver anti-cheat ECHOAC echodriver.sys Uso Esempio Sponsor Lavoro presso POST Luxembourg e li ringrazio per aver dedicato del tempo allo sviluppo e al mantenimento di questo progetto! Visita il sito ...

Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in recent security patch releases. Vulnerability Details CVEID:CVE-2026-13757 DESCRIPTION: A flaw was found in p11-kit. The RPC message attribute parsing functions p11rpcmessagegetattribute and...