CVE-2017-7269-Echo-PoC

CVE-2017-7269 दूरस्थ कोड निष्पादन इको सत्यापन हमारी टीम द्वारा इस CVE-2017-7269 भेद्यता का विश्लेषण रिपोर्ट: https://ht-sec.org/cve-2017-7269-vulnerabilities/ डिफ़ॉल्ट PoC केवल calc.exe चला सकता है, अब इसे अनुरोधों का जवाब देने के लिए संशोधित किया गया है, कमांड प्रारूप: CVE-2017-7269remoteecho.py...

CVE-2025-31324

CVE-2025-31324 यह डिटेक्शन विधि कैसे काम करती है? टेम्पलेट लक्ष्य के आधार URL पर एक HTTP GET अनुरोध करता है और SAP NetWeaver Application Server इंस्टेंस की पहचान करने के लिए प्रतिक्रिया हेडर की जाँच करता है। यह जानकारी यह आकलन करने में मदद करती है कि सिस्टम CVE-2025-31324 के प्रति संवेदनशील हो सक...

K000163569: Multiple Apache Tomcat vulnerabilities

Security Advisory Description CVE-2026-75973 Improper Authentication vulnerability in Apache Tomcat. When Jakarta Authentication was configured with SimpleAuthConfigProvider as the default provider and multiple web application used that provider, the realm for the first web application to...

CVE-2026-66746-HTTP-Response-Splitting-via-Unvalidated-Response-Header-Values-rouille-

सुरक्षा सलाह: अमान्य प्रतिक्रिया हेडर मानों के माध्यम से HTTP रिस्पांस स्प्लिटिंग rouille निर्धारित CVE ID: CVE-2026-66746 सारांश rouille प्रतिक्रिया हेडर मानों को कैरिज रिटर्न या लाइन फीड के लिए जाँचे बिना क्लाइंट को लिखता है। एक एप्लिकेशन जो हमलावर-प्रभावित टेक्स्ट को हेडर मान में रखता है, इसलि...

CVE-2026-41096

CVE-2026-41096 - क्रैश PoC DnsRawTruncateMessageForUdp dnsapi.dll में हीप ओवरफ़्लो। एक निर्मित DNS प्रतिक्रिया जिसमें QDCOUNT=0 और एक बड़ा OPT रिकॉर्ड है, जब ट्रंकेशन तर्क गंतव्य पॉइंटर की गलत गणना करता है तो 604-बाइट का हीप ओवरफ़्लो होता है। MSRC सलाह:...

CVE-2026-98348

In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short association responses libipwhandleassocresp reads the capability, status and aid fields of the 30-byte association response prefix and then computes the information element length as stats-len -...

DEBIAN-CVE-2026-98340

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: only group hidden BSSes with beacon entries When a probe response for an unknown BSS comes in, cfg80211bssupdate looks for an existing entry with the same BSSID and a hidden zero-length or NUL-filled SSID, and if ...

DEBIAN-CVE-2026-98186

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...

AZL-106134 CVE-2026-98186 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...

CVE-2026-98185

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: validate scan response extents mwifiexret80211scan subtracts the fixed response fields and the firmware-provided BSS length from resp-size without first proving that either extent fits. A short response or oversize...

CVE-2026-98186

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...

UBUNTU-CVE-2026-98186

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...

CVE-2026-98186

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...

CVE-2026-98349

In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short beacon and probe responses libipwprocessproberesponse and the libipwnetworkinit call it makes assume the frame contains the full 36-byte beacon and probe response prefix, but the ipw2100 and ipw2200...

CVE-2026-98349 wifi: libipw: reject too-short beacon and probe responses

In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short beacon and probe responses libipwprocessproberesponse and the libipwnetworkinit call it makes assume the frame contains the full 36-byte beacon and probe response prefix, but the ipw2100 and ipw2200...

CVE-2026-98340 wifi: cfg80211: only group hidden BSSes with beacon entries

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: only group hidden BSSes with beacon entries When a probe response for an unknown BSS comes in, cfg80211bssupdate looks for an existing entry with the same BSSID and a hidden zero-length or NUL-filled SSID, and if ...

CVE-2026-98340

The Linux kernel contains a vulnerability in the cfg80211 WiFi stack where the __cfg80211_bss_update() function incorrectly groups hidden BSSes**. Specifically, it may group a probe response for an unknown BSS with an existing entry that lacks beacon elements, creating a group withou...

CVE-2026-98186 wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...

CVE-2026-98185

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: validate scan response extents mwifiexret80211scan subtracts the fixed response fields and the firmware-provided BSS length from resp-size without first proving that either extent fits. A short response or oversize...

douglas-042-HQ

مقر Douglas-042 اصطياد التهديدات والاستجابة للحوادث القائمة على الوكلاء، للبيئات التي لا تمتلك EDR. امسح أسطولاً من مضيفات Windows وLinux بحثاً عن علامات الاختراق، وحدّد ما يهم فعلاً، وتصرّف بناءً عليه — من وحدة تحكم واحدة، بأمر واحد لكل مضيف. ما الذي يفعله عملية الاصطياد ليست مجرد فحص. يجمع...