Lucene search
+L

1066 matches found

Kitploit
Kitploit
•added 2026/10/16 4:49 a.m.•21 views

CVE-2020-7200

CVE-2020-7200 Download HPE SIM 7.6: https://support.hpe.com/hpesc/public/docDisplay?docId=emrna-c05350303N10011 Details: https://support.hpe.com/hpesc/public/docDisplay?docLocale=enUS&docId=hpesbgn04068enus 🎞 Video: https://www.youtube.com/watch?v=QNhcNJtjKyw HPE does not provide a patch but only...

9.8CVSS8.4AI score0.8189EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/10/16 4:32 a.m.•12 views

CVE-2026-11108-Integer-Overflow-in-Memory-Allocator-kmalloc-Sim-

CVE-2026-11108 – Integer Overflow in Memory Allocator kmalloc Sim Program Code C // allocsim.c - Vulnerable memory allocator include include include define MAXBLOCK 1024 void mymallocsizet size sizet total = size + sizeofsizet; // header if total MAXBLOCK return NULL; void ptr = malloctotal; if...

8.8CVSS6.4AI score0.00225EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/13 3:51 p.m.•20 views

CVE-2026-35330

CVE-2026-35330 strongSwan EAP-SIM / EAP-AKA attribute parser pre-auth heap buffer overflow via integer underflow. Description parseattributes in src/libsimaka/simakamessage.c:419 reads TLV headers whose length byte counts 4-byte words. For the ATRAND / ATENCRDATA branch: if hdr-length 4 in.len ||...

6.3AI score
SaveExploits3References1
Kitploit
Kitploit
•added 2026/10/11 5:01 p.m.•21 views

ossec-hids

Información sobre OSSEC OSSEC es una plataforma completa para monitorear y controlar tus sistemas. Combina todos los aspectos de HIDS detección de intrusiones basada en host, monitoreo de registros y SIM/SIEM en una solución simple, potente y de código abierto. Visita nuestro sitio web para obten...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/10 1:17 p.m.•20 views

bladeGPS

bladeGPS Very crude experimental implementation of gps-sdr-sim for real-time signal generation. The code works with bladeRF and has been tested on Windows 10 and Ubuntu 20.04. Usage: bladegps options Options: -e RINEX navigation file for GPS ephemerides required -y YUMA almanac file for GPS...

6.2AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/09 9:55 a.m.•17 views

swsim

swSIM Il progetto deve essere clonato in modo ricorsivo. Scaricare il file ZIP non è sufficiente. swSIM è una scheda SIM completamente software. È il primo simulatore di scheda SIM disponibile pubblicamente per quanto ne so che non dipende da alcun hardware SIM per funzionare. Ambito Un simulator...

6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/09 9:55 a.m.•14 views

swsim

swSIM Project needs to be cloned recursively. Downloading the ZIP is not enough. swSIM is an all-software SIM card. It's the first publicly available to the best of my knowledge SIM card simulator which does not rely on any SIM hardware to work. Scope A software-only SIM card simulator. It does N...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/09 4:08 a.m.•26 views

gps-sdr-sim

GPS-SDR-SIM GPS-SDR-SIM genera flujos de datos de señal de banda base GPS, que pueden convertirse a RF utilizando plataformas de radio definida por software SDR, como ADALM-Pluto, bladeRF, HackRF, y USRP. Instrucciones de compilación en Windows 1. Inicie Visual Studio. 2. Cree un proyecto vacío...

6.3AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/30 6:31 a.m.•14 views

Malicious Package

Overview contoso-login-sim-loader is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
osv-mal
osv-mal
•added 2026/09/30 4:40 a.m.•20 views

MAL-2026-17322 Malicious code in contoso-login-sim-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062ce76699c91a883d24e3ad609bb04faa3f52cbeaecfb24c1c3bcde8b496a5c Package ships a single 138 KB browser script whose entire body is an RC4-encrypted base64 blob decoded at runtime by an inline RC4 routine zc with a...

5.7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/30 4:40 a.m.•37 views

Malicious code in contoso-login-sim-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062ce76699c91a883d24e3ad609bb04faa3f52cbeaecfb24c1c3bcde8b496a5c Package ships a single 138 KB browser script whose entire body is an RC4-encrypted base64 blob decoded at runtime by an inline RC4 routine zc with a...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•8 views

PT-2026-94478

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vdpa sim component where the vdpasim create function leaves vdpasim-worker as an ERR PTR an error pointer if kthread run worker fails. The subsequent error path...

5.7AI score0.002EPSS
SaveExploits0
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•17 views

Astra Linux – Vulnerability in ofono

oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...

7.8CVSS7.5AI score0.00291EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•13 views

Astra Linux – Vulnerability in ofono

oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...

7.8CVSS7.8AI score0.00294EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/05 10:16 a.m.•14 views

CVE-2026-86115

Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SSRF validation and minting internal authentication tokens. Authenticated workflow authors can bypass external URL validation by supplying paths starting with /api/ in HTTP...

5.3CVSS0.005EPSS
SaveExploits0References6
osv-cve
osv-cve
•added 2026/09/05 9:59 a.m.•11 views

CVE-2026-86115 Sim before 0.8.14 Confused Deputy in Tool URL Routing Mints an Internal Token for a User-Supplied /api/ Path

Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SSRF validation and minting internal authentication tokens. Authenticated workflow authors can bypass external URL validation by supplying paths starting with /api/ in HTTP...

5.3CVSS5.9AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2026/09/05 9:59 a.m.•49 views

CVE-2026-86115 Sim before 0.8.14 Confused Deputy in Tool URL Routing Mints an Internal Token for a User-Supplied /api/ Path

Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SSRF validation and minting internal authentication tokens. Authenticated workflow authors can bypass external URL validation by supplying paths starting with /api/ in HTTP...

5.3CVSS0.005EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/05 9:59 a.m.•14 views

EUVD-2026-71947

Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SSRF validation and minting internal authentication tokens. Authenticated workflow authors can bypass external URL validation by supplying paths starting with /api/ in HTTP...

5.3CVSS5.8AI score0.005EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/05 9:59 a.m.•15 views

CVE-2026-86115 Sim before 0.8.14 Confused Deputy in Tool URL Routing Mints an Internal Token for a User-Supplied /api/ Path

Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SSRF validation and minting internal authentication tokens. Authenticated workflow authors can bypass external URL validation by supplying paths starting with /api/ in HTTP...

5.3CVSS5.8AI score0.005EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/05 9:59 a.m.•25 views

CVE-2026-86115

Sim (an open-source tool by SimStudio) before 0.8.14 contains a confused deputy flaw in tool URL routing. Requests are classified as internal via URL prefix matching without scheme normalization , causing SSRF validation to be skipped and internal authentication tokens to be minted for user-suppl...

5.3CVSS5.8AI score0.005EPSS
SaveExploits0References6
Rows per page
Query Builder