9947 matches found
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: can: bcm: bcmtxsetup: fixed KMSAN uninit-value in vfswrite Syzkaller reported the following issues: ===================================================== BUG: KMSAN: uninit-value in aiorwdone fs/aio.c:1520 inline BUG: KMSAN:...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-scheme: Cleanup of subdirectories under the accesspattern directory during directory setup fails. When the setup of the DAMOS-scheme DAMON sysfs directory fails after setting up the accesspattern/ directory, the...
Astra Linux - Vulnerability in linux-5.10, linux-5.15, linux
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: fix potential memory leak in setupbasectxt setupbasectxt allocates a memory chunk for uctxt-groups using hfi1allocctxtrcvgroups. When inituserctxt fails, uctxt-groups is not released, which leads to a memory leak. We...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Skip Recompute DSC Params if no Stream on Link Why A NULL pointer dereference occurred during MST and DSC setup. BUG: NULL pointer dereference in the kernel, address: 0000000000000008 PGD 0 P4D 0 Oops: 0000 1...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: brcmfmac: pcie: Firmware is released in the brmflpciesetup error path. This prevents memory leaks if the brmflchipgetraminfo function fails. Note that the CLM blob is released in the device removal path...
Astra Linux – Vulnerability in liblivemedia
Live555 version 1.08 does not handle Matroska and Ogg files properly. Sending two consecutive RTSP SETUP commands for the same track causes a Use-After-Free error and results in a crash of the daemon...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackh323: fix OOB read in decodechoice In decodechoice, the boundary check before getlen uses the variable len, which remains 0 after initialization at the beginning of the function: unsigned int type, ext, len ...
Red-Team-GOAD-Lab-Proxmox
Red-Team-GOAD-Lab-Proxmox अवसंरचना आरेख इस क्रम में बनाएँ: pfSense VLANs और फ़ायरवॉल नीति। Operator और Redirector VMs। Proxmox में GOAD लैब सेटअप। सत्यापन, स्नैपशॉट और समस्या निवारण। Packer, Terraform और GOAD के लिए कमांड सिंटैक्स को बिल्ड के समय अपने नए क्लोन किए गए GOAD रेपो के विरुद्ध जाँचना...
CVE-2026-18577
cve-id दान करें इस परियोजना के रखरखाव का समर्थन PayPal के माध्यम से या नीचे दिए गए QR कोड को स्कैन करके करें। ⚡ सरल उपयोग इस परियोजना का उपयोग केवल सुरक्षित और अधिकृत वातावरण में करें, जैसे: स्थानीय वर्चुअल मशीनें डॉकर कंटेनर पृथक लैब सेटअप अधिकृत पैठ परीक्षण वातावरण उदाहरण सेटअप: git clone cd...
The vulnerability of the Setup Wizard component in Android operating systems allows a hacker to gain increased privileges.
The vulnerability of the Setup Wizard component in Android operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker who operates remotely to enhance their privileges...
PT-2026-106239
Name of the Vulnerable Software and Affected Versions Camunda versions 7.24.0 through 7.24.14 Description An incorrect authorization issue exists in the Admin web application's first-run setup endpoint. The SetupResource incorrectly determines if the setup process is available by counting only...
The vulnerability of the Setup Wizard component in Android operating systems allows attackers to escalate their privileges.
The vulnerability of the Setup Wizard component in Android operating systems relates to the possibility of bypassing access control mechanisms. Exploiting this vulnerability allows a remote attacker to enhance their privileges...
Metabase-Pre-Auth-RCE-POC
CVE-2023-38646 — Metabase Execução Remota de Código RCE Prova de Conceito Visão Geral Este repositório documenta um projeto de pesquisa de segurança Prova de Conceito PoC analisando CVE-2023-38646 , uma vulnerabilidade crítica de Execução Remota de Código RCE sem autenticação que afeta versões...
CVE-2023-32315
CVE-2023-32315 - Vulnerabilidade de Path Traversal no Ignite Realtime Openfire ⚠️ Apenas para fins educacionais e de pesquisa de segurança autorizada Autores Originais do Exploit Muito grato ao autor original do PoC phith0n e K3ysTr0K3R Descrição O Openfire é um servidor XMPP licenciado sob a...
MetabaseRCE_CVE-2023-38646
Metabase Pré-Auth RCE CVE-2023-38646 PoC Uma prova de conceito da CVE-2023-38646, um exploit do Metabase que permite ao usuário executar código remotamente utilizando o token de configuração setup token encontrado em /api/session/properties para enviar um payload codificado em base64. Uso...
dnspython
dnspython INTRODUCTION dnspython is a DNS toolkit for Python. It supports almost all record types. It can be used for queries, zone transfers, and dynamic updates. It supports TSIG-authenticated messages and EDNS0. dnspython provides both high- and low-level access to DNS. The high-level classes...
kernel-debug-lab-for-virtual-box
विंडबग के साथ कर्नेल ड्राइवर डीबग करने के लिए VirtualBox लैब कैसे सेट करें हम यहाँ मानते हैं कि कंप्यूटर A पर windbg पहले से इंस्टॉल है और कंप्यूटर B पर Visual Studio, SDK और WDK इंस्टॉल हैं। 1. Host network Manager खोलें ताकि एक नया Virtual Box Host-Only Ethernet adapter बनाया या सेट किया जा सके...
Heartbleed
Heartbleed-POC Este repositório visa servir como uma prova de conceito válida para a CVE Heartbleed, bem como conter instruções para configurar seu próprio desafio Heartbleed sem usar um Dockerfile pré-construído. Como construir o laboratório 1. Navegue até o diretório source/service usando cd...
CVE-2024-4577
Arquivos de configuração do ambiente CVE-2024-4577 e arquivos PHP --poc-- Invoke-WebRequest -Method POST -Headers @"Content-Type" = "application/x-www-form-urlencoded" -Body "" -Uri "http://localhost/test.php?%ADd+allowurlinclude%3D1+%ADd+autoprepend file%3Dphp://input"...