Lucene search
+L

2499 matches found

Kitploit
Kitploit
•added 2026/09/14 10:34 p.m.•18 views

hoverfly v1.12.14

API simulations for development and testing Hoverfly is a lightweight, open source API simulation tool. Using Hoverfly, you can create realistic simulations of the APIs your application depends on. Replace slow, flaky API dependencies with realistic, re-usable simulations Simulate network latency...

6.3AI score
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•18 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Net: Consume xmit errors of GSO frames. udpgrofrglist.sh and udpgrobench.sh are the most flaky tests currently in NIPA. They fail in exactly the same way. The TCP GRO test occasionally stalls, and the test terminates after 10...

7.5CVSS6.6AI score0.00762EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/10 11:49 p.m.•10 views

OMG_KILLER

OMGKILLER Автоатакующий скрипт на базе эксплойтов CVE-2024-37890 и OOM 2026 Пока лайтовый вариант щас расширим проксями и прочим дерьмом что бы атаковать с одной тачки как огромная ботферма...

7.5CVSS7.2AI score0.01346EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/09 4:41 a.m.•21 views

renode v1.17.0

Renode Copyright c 2010-2026 Antmicro What is Renode? Renode was created by Antmicro as a virtual development tool for multi-node embedded networks both wired and wireless and is intended to enable a scalable workflow for creating effective, tested and secure IoT systems. With Renode, developing,...

6.1AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/09/07 12:00 a.m.•14 views

The vulnerability of the executable file expmt.exe of the Siman software, a discrete event simulation and automation software from Rockwell Automation Arena, allows a hacker to execute arbitrary code.

The vulnerability of the exprt.exe executable component of the Siman software for discrete event simulation and automation in Rockwell Automation Arena lies in the issue of out-of-buffer writing. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially...

7.3CVSS6.9AI score0.00265EPSS
SaveExploits0References2Affected Software1
Packet Storm News
Packet Storm News
•added 2026/09/06 12:00 a.m.•9 views

Efficient Hardware Information-Flow Tracking for Pre-Silicon Security Testing

Register-Transfer Level RTL simulation is widely used to test hardware before it is fabricated. To allow testing for security related information flow properties, such as confidentiality and integrity, taint logic can be automatically added to the design to track how information flows through it...

5.8AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/08/31 12:00 a.m.•11 views

A Roadmap to Available ICS Datasets and Testbeds for Cybersecurity Research

Industrial Control Systems ICS are the backbone of many critical infrastructure sectors; however, their growing level of connectivity, long lifespan and integration with the Information Technology IT environment introduces numerous cybersecurity challenges. The merging of Operational Technology O...

5.9AI score
SaveExploits0
NVD
NVD
•added 2026/08/28 8:18 p.m.•18 views

CVE-2026-55521

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs omits authorization checks in IndexesApi.listPacketIndex, IndexesApi.listEventIndex, Cop1Api.disable, Cop1Api.resume, Cop1Api.initialize, Cop1Api.updateConfig, and TimeApi.setTime. An authenticated low-privilege user can read...

8.8CVSS0.00523EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/28 5:09 p.m.•19 views

GHSA-962X-CCWF-8X6P Yamcs Core API has Multiple Missing Function Level Access Control vulnerabilities

Summary Multiple Missing Function Level Access Control vulnerabilities exist in the Yamcs Core API. These vulnerabilities allow any authenticated user, regardless of their assigned roles or privileges e.g., an unprivileged "Guest", to bypass intended access controls. An attacker can exploit these...

8.8CVSS6.1AI score0.00523EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/28 5:08 p.m.•38 views

CVE-2026-55521

Yamcs , a mission control framework, contains multiple missing function-level access control vulnerabilities in its Core API. Prior to 5.12.8 and 5.13.2 , authorization checks are omitted in IndexesApi.listPacketIndex, IndexesApi.listEventIndex, Cop1Api.disable/resume/initialize/updateConfig, and...

8.8CVSS5.8AI score0.00523EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/08/28 5:08 p.m.•21 views

CVE-2026-55521 Yamcs : Multiple Missing Function Level Access Control vulnerabilities in Yamcs Core API

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs omits authorization checks in IndexesApi.listPacketIndex, IndexesApi.listEventIndex, Cop1Api.disable, Cop1Api.resume, Cop1Api.initialize, Cop1Api.updateConfig, and TimeApi.setTime. An authenticated low-privilege user can read...

8.8CVSS5.8AI score0.00523EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/28 12:00 a.m.•26 views

PT-2026-83245

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs omits authorization checks in IndexesApi.listPacketIndex, IndexesApi.listEventIndex, Cop1Api.disable, Cop1Api.resume, Cop1Api.initialize, Cop1Api.updateConfig, and TimeApi.setTime. An authenticated low-privilege user can read...

8.8CVSS5.8AI score0.00523EPSS
SaveExploits0References6
Packet Storm News
Packet Storm News
•added 2026/08/27 12:00 a.m.•20 views

From Security Events to Conflict States: A Three-Layer Cyber Defense Scenario Model for Enhanced Cyber Situational Awareness

Cyber defense in mission-critical environments requires integrated approaches capable of representing adversarial progression, defender-side uncertainty, mission impact, and defensive decision support within a unified framework. In operational domains, defenders must continuously estimate the...

5.9AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/08/25 7:41 p.m.•27 views

cybershield-ai

AI-Powered Network Intrusion & Phishing Detection System An e...

5.5AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/08/23 10:16 p.m.•13 views

hoverfly v1.12.12

API simulations for development and testing Hoverfly is a lightweight, open source API simulation tool. Using Hoverfly, you can create realistic simulations of the APIs your application depends on. Replace slow, flaky API dependencies with realistic, re-usable simulations Simulate network latency...

5.6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/08/20 6:27 p.m.•12 views

PCAPdroid v2.0.0

PCAPdroid PCAPdroid is a privacy-friendly open source app which lets you track, analyze and block the connections made by the other apps in your device. It also allows you to export a PCAP dump of the traffic, inspect HTTP, decrypt TLS traffic and much more! PCAPdroid simulates a VPN in order to...

5.8AI score
SaveExploits0References16
Packet Storm News
Packet Storm News
•added 2026/08/18 12:00 a.m.•81 views

An Emulation Anchored Digital Twin Testbed for Cyberattack and Defense Analysis in Hospital IT OT Environments

Modern hospitals increasingly rely on integrated Information Technology IT and Operational Technology OT infrastructures to support critical healthcare services. However, this convergence expands the cybersecurity attack surface and makes safe validation of defensive mechanisms difficult on live...

5.8AI score
SaveExploits0
OSV
OSV
•added 2026/08/17 11:16 a.m.•13 views

PYSEC-2026-3772

opensslencrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation failures silently fall back to simulation mode, generating a deterministic shared secret from only 16 bytes of the private key and publicly available encapsulated key data. Attackers who obtain...

9.3CVSS5.8AI score0.00559EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/17 11:16 a.m.•16 views

CVE-2026-74900

opensslencrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation failures silently fall back to simulation mode, generating a deterministic shared secret from only 16 bytes of the private key and publicly available encapsulated key data. Attackers who obtain...

9.8CVSS0.00559EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/17 11:04 a.m.•59 views

CVE-2026-74900 openssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation Mode

opensslencrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation failures silently fall back to simulation mode, generating a deterministic shared secret from only 16 bytes of the private key and publicly available encapsulated key data. Attackers who obtain...

9.8CVSS0.00559EPSS
SaveExploits0References2
Rows per page
Query Builder