Astra Linux – Vulnerability in Chromium

Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform out-of-bounds memory access via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: JNDI. The supported versions affected include Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3, and 22.2.0. This vulnerabili...

CVE-2026-50751---Check-Point-IKEv1-Authentication-Bypass-Exploit

markdown CVE-2026-50751 - Check Point IKEv1 Authentication Bypass Exploit ⚠️ ADVERTENCIA IMPORTANTE Este código es SOLO para fines educativos y pruebas de seguridad autorizadas. El uso no autorizado contra sistemas sin permiso explícito es ILEGAL. El autor no se hace responsable del uso indebido d...

Xworm RAT

XWorm-RAT V2.1 ⚠️注意：此工具专门为安全研究而发布。请勿将其用于非法活动 一款著名的免费XWorm RAT，包含所有热门RAT功能。如果喜欢，请给这个仓库点个星⭐️ 存档受密码保护，密码为：431423128 功能： ⭐️运行文件：🔹从磁盘 🔹从链接 🔹从内存 🔹RunPE ⭐️摄像头 ⭐️麦克风 ⭐️系统声音 ⭐️打开URL 🔹可见 🔹不可见 ⭐️选项 🔹禁用Windows Defender 🔹删除WD 🔹排除WD 🔹UAC绕过 🔹电源 🔹黑屏 🔹任务管理器 🔹注册表编辑器 🔹UAC 🔹防火墙 🔹安装.Net 3.5 🔹运行Shell 🔹禁用更新 🔹触发BSOD 🔹阻止睡眠...

CVE-2019-6447-ESfile-explorer-exploit

CVE-2019-6447-ES file Explorer exploit ES File Explorer v4.1.9.7.4 Open port vulnerability exploit. CVE-2019-6447 Credits to the one who found the actual vulnerability...

CVE-2026-50751

🚨 CVE-2026-50751 - Bypass de Autenticación en Check Point VPN IKEv1 📖 Resumen CVE-2026-50751 es una vulnerabilidad crítica de omisión de autenticación que afecta a las implementaciones de Check Point Quantum Security Gateway configuradas con el protocolo heredado IKEv1 Remote Access VPN. La falla...

Cisco ASA Missing Release of Resource after Effective Lifetime (CVE-2023-20095)

A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to imprope...

ROS-20261005-73-0091

The vulnerability in dotnet9.0 is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20261005-73-0100

The vulnerability in dotnet8.0 is related to a lack of source verification mechanism. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

CVE-2024-12356

Ejecución Remota de Código No Autenticada en BeyondTrust Remote Support y Privileged Remote Access mediante Inyección de Argumentos y una Omisión del Escape de Cadenas de PostgreSQL Advertencia Ética: Solo para fines de investigación, educativos y de pruebas autorizadas. No lo utilice contra...

SubSeven

SubSeven Legacy "SubSeven Legacy es un remake completo del infame SubSeven Backdoor también conocido como Sub7, un troyano de acceso remoto popular de finales de los 90. Se puede encontrar más información sobre el Sub7 Backdoor original en la página oficial de Wikipedia. Al igual que el programa...

CVE-2025-48384-main

PoC para CVE-2025-48384 Esto es un POC. No lo descargues en un entorno inseguro. Permitirá al atacante ejecutar código remoto en tu máquina Ver CVE-2025-48384 Para ejecutar: git clone --recurse-submodules [email protected]:zr0n/CVE-2025-48384-main.git El payload ejecutado está aquí...

FreePBX >= 17.0.2.36 && < 17.0.3 - Authenticated Command Injection

FreePBX Endpoint Manager 17.0.2.36 to = 17.0.2.36 && 17.0.3 - Authenticated Command Injection author: th3y severity: critical description: | FreePBX Endpoint Manager 17.0.2.36 to 17.0.3 contains a command injection caused by improper sanitization in filestore module's testconnection checksshconne...

Grafana Snapshot - Authentication Bypass

Grafana instances up to 7.5.11 and 8.1.5 allow remote unauthenticated users to view the snapshot associated with the lowest database key by accessing the literal paths /api/snapshot/:key or /dashboard/snapshot/:key. If the snapshot is in public mode, unauthenticated users can delete snapshots by...

PRTG Network Monitor - Local File Inclusion

PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges including administrator. A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in /public/login.htm and perform a Local...

ROS-20261002-73-0114

The vulnerability of the PostgreSQL database management system is related to incorrect session duration. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read and modify data...

ROS-20261002-73-0112

The vulnerability of the PostgreSQL database management system is related to incorrect session duration. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read and modify data...

ROS-20261002-73-0115

The vulnerability of the PostgreSQL database management system is related to incorrect session duration. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read and modify data...

PT-2026-104444

Name of the Vulnerable Software and Affected Versions UTMStack versions prior to 11.2.16 Description An authentication bypass exists that allows remote attackers to obtain full administrative API access. This occurs because the InternalApiKeyFilter accepts a valid Utm-Internal-Key header matching...

MAL-2026-17453 Malicious code in gocommunity.io/orderedbtree (Go)

Part of the Graphalgo campaign. The module, first published around 2026-08-11, contains a second-stage remote access trojan in plaintext that runs automatically. The RAT collects system information, executes decrypted Go or JavaScript payloads, and polls two command-and-control channels every 3-1...