CVE-2026-41089-Netlogon-RCE

🛡️ CVE-2026-41089-Netlogon-RCE - 分析关键 Windows 服务安全漏洞 本仓库提供用于分析和测试名为 CVE-2026-41089 的 Netlogon 漏洞的工具。该工具可帮助安全专业人员判断其 Windows 域控制器是否面临此特定远程代码执行漏洞的风险。 📋 了解风险 Netlogon 服务负责管理 Windows 域环境中的用户身份验证和网络流量。该服务中的缺陷允许未经身份验证的用户向域控制器发送特定网络数据包。此操作可能导致系统被完全接管。...

Hoteldruid v3.0.5 - SQL Injection

Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the idutentelog parameter at /hoteldruid/personalizza.php. id: CVE-2023-43374 info: name: Hoteldruid v3.0.5 - SQL Injection author: ritikchaddha severity: critical description: | Hoteldruid v3.0.5 was discovered to...

ai-exploits

AI 漏洞利用工具集 AI 领域存在安全问题，问题并不仅仅在于输入给 ChatGPT 等大语言模型的内容。基于 Protect AI 与独立安全专家在 Huntr 漏洞赏金平台上进行的研究，针对构建、训练和部署机器学习模型所使用的工具、库和框架，存在更具影响力和实用性的攻击方式。这些攻击大多无需认证，即可导致系统完全被接管和/或敏感数据、模型或凭证的丢失。 通过发布此仓库，Protect AI 希望向信息安全社区阐明，针对 AI/机器学习基础设施的实际攻击在真实世界中是如何发生的，并提高人们对当前 AI/ML 生态系统中存在的大量易受攻击组件的认识。更多漏洞可以在此处找到： 11 月漏洞...

privilege-escalation-breach

安全漏洞项目 - 权限提升 该漏洞存在于 Oracle Solaris（Oracle Systems 的产品）中，受影响组件为 XScreenSaver。受支持的受影响版本为 11。这是一个易于利用的漏洞，允许拥有低权限的攻击者登录到运行 Oracle Solaris 的基础设施，从而危及 Oracle Solaris 的安全。虽然漏洞存在于 Oracle Solaris 中，但攻击可能会对其他产品产生重大影响。成功利用此漏洞可导致对 Oracle Solaris 的完全控制。CVSS 3.0 基准评分：8.8 演示 演示步骤 启动：运行 'vagrant up'...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql (UTSA-2026-106193)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106193 advisory. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are MySQL Server:...

Malicious code in 3layerdipstackic0c5r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b070b5251c31e35e45c2f6c010c09c7340108089615d68b254d84da1abface4c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Oracle VM VirtualBox (August 2026 CSPU)

The 7.2.14 versions of VM VirtualBox installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14...

Oracle Java SE Multiple Vulnerabilities (August 2026 CSPU)

The 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2 versions of Java installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of...

CVE-2026-71160

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 1.0.0-1.4.18 and 3.0.0-3.2.17. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successf...

CVE-2026-71044

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Export. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this...

CVE-2026-71045

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Security. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human...

CVE-2026-71041

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Gantt Chart. The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM executes to compromise Oracle Agi...

CVE-2026-71040

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Security. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this...

CVE-2026-71126

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

UBUNTU-CVE-2026-71126

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle...

CVE-2026-70930

Vulnerability in the Oracle Order Management product of Oracle E-Business Suite component: Product Diagnostic Tools. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Order...

CVE-2026-70886

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-70868

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can resul...

CVE-2026-70829

Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-70834

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...