ransomware-simulator

QuickBuck - Ransomware Simulator / \ / / / / / / // // // // // // '// |/ // // // '/ \\,/// ///\// ,/ ///\ Nextron Systems GmbH The goal of this repository is to provide a simple, harmless way to check your AV's protection on ransomware. This tool simulates typical ransomware behaviour,...

DNSStager

What is DNSStager? DNSStager is an open-source project based on Python used to hide and transfer your payload using DNS. DNSStager will create a malicious DNS server that handles DNS requests to your domain and return your payload as a response to specific record requests such as AAAA or TXT...

Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0011)

Before Kentico Xperience 13 Hotfix 173, this vulnerability can be exploited with any username provided. For Hotfix = 173 and = 173 and 178, this vulnerability can be exploited only if you provide a valid Staging Service username default: admin impact: | Unauthenticated attackers can bypass...

gardyn-hack

Zusammenfassung Im Februar 2025 führte ich Sicherheitsforschung an einem Gardyn Home 4.0 Gerät durch. Während meiner Forschung entdeckte ich mehrere Schwachstellen und schlechte Sicherheitspraktiken. Durch Ausnutzung dieser Schwachstellen könnte ein Angreifer Systemzugriff auf ein Gardyn-Gerät...

FOLLINA-CVE-2022-30190

FOLLINA-CVE-2022-30190 Implementação do FOLLINA-CVE-2022-30190 Este repositório contém uma ferramenta de exploração para a vulnerabilidade FOLLINA-CVE-2022-30190 Aviso Legal Esta ferramenta foi desenvolvida para fins de teste de segurança e pesquisa. Ao clonar/forkar esta ferramenta, o...

kentico-xperience13-AuthBypass-wt-2025-0006

WT-2025-0006 CVE non ancora assegnato Kentico Xperience 13 CMS - Controllo del Bypass dell'Autenticazione del Servizio di Staging Rilevamento in Azione python3 watchTowr-vs-kentico-xperience13-AuthBypass-wt-2025-0006.py -H http://labcms / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | ...

Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage

Summary In Nginx UI versions 2.5.0 through 2.5.x, the node-signature authentication path staged an attacker-controlled request body in a temporary file and synchronized it to disk before validating the body digest and cryptographic signature. An unauthenticated remote client that can reach the AP...

CVE-2026-107805 Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage

Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication path performs temporary file staging of an attacker-controlled request body and synchronizes it before validating the body digest and cryptographic signature. An unauthenticated...

CVE-2026-107805 Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage

Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication path performs temporary file staging of an attacker-controlled request body and synchronizes it before validating the body digest and cryptographic signature. An unauthenticated...

kentico-xperience13-AuthBypass-wt-2025-0011

WT-2025-0011 CVE noch nicht vergeben Kentico Xperience 13 CMS - Staging Service Authentifizierungsumgehungs-Check Erkennung in Aktion python3 .\watchTowr-vs-kentico-xperience13-AuthBypass-wt-2025-0011.py -H http://labcms -u admin / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y |...

krustyloader-analysis

Analisi di KrustyLoader Questo repository contiene risorse relative all'analisi effettuata su KrustyLoader e disponibili in questo post del blog: https://www.synacktiv.com/publications/krustyloader-rust-malware-linked-to-ivanti-connectsecure-compromises. uno script Python per estrarre e decrittar...

CVE-2026-106058

GitAhead through 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames into clean/smudge filter commands. Attackers can ship files named with $command selected via .gitattributes so...

EUVD-2026-94306

GitAhead through 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames into clean/smudge filter commands. Attackers can ship files named with $command selected via .gitattributes so...

CVE-2018-10467

CVE-2018-10467 Cronologia 2018-04-06: Scoperto 2018-04-13: Ritest in ambiente di staging 2018-04-16: Comunicazione interna 2018-04-27: Notifica al fornitore 2018-04-27: Feedback del fornitore 2018-05-27: Chiarimenti tecnici sul prodotto 2018-05-03: Aggiunte istruzioni per risolvere il problema da...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Staging: iio: frequency: ad9834: Validate frequency parameter value In ad9834writefrequency, clkgetrate may return 0. In such cases, the call to ad9834calcfreqreg will result in a division by zero. Checking if fout clkfreq / 2 do...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: media: staging/intel-ipu3: A memory leak has been fixed in imufmt. We are no longer losing a reference to an allocated memory when trying to use it. We’ve changed the order of the checks to avoid that issue...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Staging: media: max96712: Fixed a kernel oop when removing the module. The following kernel oop occurred when attempting to remove the max96712 module: Unable to handle the kernel paging request at the virtual address...

CVE-2018-10715

CVE-2018-10715 Cronologia 2018-04-06: Scoperto 2018-04-13: Ritestato ambiente di staging 2018-04-16: Comunicazione interna 2018-05-03: Notifica al fornitore 2018-05-03: Riscontro del fornitore 2018-05-XX: Chiarimenti tecnici sul prodotto 2018-05-XX: Aggiunte istruzioni dal fornitore per risolvere...

Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0006)

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through...

ROS-20260929-73-0022

The vulnerability of the rtwgetie function in the drivers/staging/rtl8723bs/core/rtwieee80211.c module, which supports additional devices in the Linux operating system, is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain...