201 matches found
SSCMS-PluginShell
Install Visual Studio 2. Import this project 3. Modify the IPAddress.Parse value in the Startup.cs file using Microsoft.Extensions.DependencyInjection; using SSCMS.Advertisement.Abstractions; using SSCMS.Advertisement.Core; using SSCMS.Plugins; using System.Diagnostics; using System; using...
BlueBorn
BlueBorn CVE-2017-0785 Archlinux installation paru -S python-pybluez-git bluez-utils-compat pyhton3 python3-pip sudo pip install pwn TUTORIALS Discovery hcitool scan Scanning ... XX:XX:XX:XX:XX:XX Device 1 XX:XX:XX:XX:XX:XX Device 2 Use the exploit python CVE-2017-0785.py TARGET=XX:XX:XX:XX:XX V...
BetterBackdoor
BetterBackdoor Una puerta trasera es una herramienta utilizada para obtener acceso remoto a una máquina. Normalmente, las utilidades de puerta trasera como NetCat tienen dos funciones principales: canalizar la entrada remota a cmd o bash y devolver la respuesta. Esto es útil, pero también es...
CVE-2026-96747 Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption
The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...
CVE-2026-17350
Summary: CVE-2026-17350 affects pgAdmin 4 in SERVER mode (9.3–9.17). The per-tool permission system did not consistently enforce tool-level permissions; only the front-door route used a permissions_required decorator, while other backend routes and Socket.IO handlers relied on authentication chec...
dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM
.NET Denial of Service Vulnerability - HTTP/2 SETTINGS/PING ACK flood causing OOM...
PYSEC-2026-2697 Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access
Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access Affected Component Socket.IO session state and role-check callsites: - backend/openwebui/socket/main.py lines 330-351, connect handler — role snapshotted into SESSIONPOOL - backend/openwebui/socket/main.py lin...
MAL-2026-4400 Malicious code in @kmmao/happy-coder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4478b22a21a87a37250e86ef25639330f79b779e5793f642eaf7ddaafd975d4 This package is a near-verbatim fork of the upstream happy-coder/happy-cli references to slopus/happy-cli and happy.engineering are retained througho...
CVE-2026-42095
bookserver in KDE Arianna before 26.04.1 allows attackers to read files over a socket connection by guessing a URL...
CVE-2026-42095
bookserver in KDE Arianna before 26.04.1 allows attackers to read files over a socket connection by guessing a URL...
CVE-2026-42095: Missing Authentication for Critical Function
bookserver in KDE Arianna before 26.04.1 allows attackers to read files over a socket connection by guessing a URL...
CVE-2026-25947
Worklenz is a project management tool. Prior to 2.1.7, there are multiple SQL injection vulnerabilities were discovered in backend SQL query construction affecting project and task management controllers, reporting and financial data endpoints, real-time socket.io handlers, and resource allocatio...
EUVD-2003-0785
Malware in sbrugna...
EUVD-2018-20388
Malware in sbrugna...
EUVD-2020-12556
Malware in sbrugna...
EUVD-2007-1537
Malware in sbrugna...
EUVD-2022-35332
Malicious code in bioql PyPI...
EUVD-2022-54755
Malicious code in bioql PyPI...