1402 matches found
linnix
Linnix Find which process is hurting your SLOs — not just who's using CPU, but who's causing stalls. The Problem top shows 80% CPU. Prometheus shows high latency. But which pod is actually stalling your payment service? Linnix uses eBPF + PSI Pressure Stall Information to answer this. PSI measure...
CVE-2023-36884-MS-Office-HTML-RCE
CVE-2023-36884: MS Office HTML RCE with crafted documents On July 11, 2023, Microsoft released a patch aimed at addressing multiple actively exploited Remote Code Execution RCE vulnerabilities. This action also shed light on a phishing campaign orchestrated by a threat actor known as Storm-0978,...
hostintel
hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...
Storm-Breaker
A Tool With Attractive Capabilities. Features: Obtain Device Information Without Any Permission ! Access Location SMARTPHONES Access Webcam Access Microphone Update Log: Second latest Update on November 4th , 2022 . The overall structure of the tool is programmed from the beginning and is availab...
WordPress Admin Word Count Column 2.2 - Local File Inclusion
The plugin does not validate the path parameter given to readfile, which could allow unauthenticated attackers to read arbitrary files on server running old version of PHP susceptible to the null byte technique. This could also lead to RCE by using a Phar Deserialization technique. id:...
Joomla! Component Love Factory 1.3.4 - Local File Inclusion
A directory traversal vulnerability in the Love Factory comlovefactory component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1957 info: name: Joomla! Component Love Factory 1.3.4 - Local File Inclusion...
Joomla! Component JProject Manager 1.0 - Local File Inclusion
A directory traversal vulnerability in the Ternaria Informatica JProject Manager comjprojectmanager component 1.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1469 inf...
Suprema BioStar <2.8.2 - Local File Inclusion
Suprema BioStar before 2.8.2 Video Extension allows remote attackers can read arbitrary files from the server via local file inclusion. id: CVE-2020-15050 info: name: Suprema BioStar 2.8.2 - Local File Inclusion author: gy741 severity: high description: Suprema BioStar before 2.8.2 Video Extensio...
WordPress Videos sync PDF <=1.7.4 - Local File Inclusion
WordPress Videos sync PDF 1.7.4 and prior does not validate the p parameter before using it in an include statement, which could lead to local file inclusion. id: CVE-2022-1392 info: name: WordPress Videos sync PDF =1.7.5 or apply the vendor-provided patch to mitigate the vulnerability. reference...
Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion
A directory traversal vulnerability in the ZiMB Comment comzimbcomment component 0.8.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1602 info: name: Joomla! Component...
Razer Sila Gaming Router 2.0.441_api-2.0.418 - Local File Inclusion
Razer Sila Gaming Router 2.0.441api-2.0.418 is vulnerable to local file inclusion which could allow attackers to read arbitrary files. id: CVE-2022-29014 info: name: Razer Sila Gaming Router 2.0.441api-2.0.418 - Local File Inclusion author: edoardottt severity: high description: Razer Sila Gaming...
Artica Web Proxy 4.30 - OS Command Injection
Artica Web Proxy 4.30 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php. These commands are executed with root privileges via servicecmdspeform. id: CVE-2020-17505 info: name: Artica Web Proxy 4.30 - OS Command Injection author: dwisiswant0...
CVE-2021-40865
CVE-2021-40865 CVE-2021-40865 POC/exploit-poc import org.apache.commons.io.IOUtils; import org.apache.storm.serialization.KryoValuesSerializer; import ysoserial.payloads.ObjectPayload; import ysoserial.payloads.URLDNS; import java.io.; import java.math.BigInteger; import java.net.; import...
CVE-2023-36884
CVE-2023-36884 comeonits2023 ie9 Storm-0978 https://learn.microsoft.com/en-us/previous-versions/windows/internet-explorer/ie-developer/general-info/ee330731v=vs.85 https://learn.microsoft.com/en-us/archive/blogs/ieinternals/internet-explorer-9-0-2-update...
Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages
Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center JC3 and a coalition of private sector companies, such as Resecurity, Cloudflare, Oracle, Proofpoint, and TRM Labs, announced the disruption of three phishing kits, CoGUI aka NX or FA, Haozi aka Phoenix, and Iron Man System...
The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
In this article 1. Uncovering the shadow world of a phishing kit ecosystem 2. Storm-3119: YAM Store, the power broker 3. Storm-2990: The Iron Man System phishing kit 4. Downstream activity from Storm-2990 phishing kits 5. Mitigation and protection guidance 6. Microsoft Defender detections Over th...
CVE-2026-12656
A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A power cycle is required to recover the device to it...
CVE-2026-12656
A denial-of-service security issue exists in the 1732E ArmorBlock® due to the improper handling of network storm traffic . This vulnerability can interrupt communications, cause device faults, and affect open TCP and UDP ports . Impacted devices require a power cycle to return to a normal state. ...
CVE-2026-12656: Allocation of Resources Without Limits or Throttling
A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A power cycle is required to recover the device to it...