Fedora 44 : nanosvg (2026-4718fc201a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4718fc201a advisory. Apply fix for CVE-2026-88367. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

CVE-2022-36446-Webmin-RCE

CVE-2022-36446 — Webmin 1.997 RCE 인증 필요 Webmin 1.997 미만 버전에서 Software Package Updates 모듈을 통한 원격 코드 실행 취약점 익스플로잇입니다. 작동 원리 Webmin의 Software Package Updates 모듈은 u 매개변수를 시스템에 전달하기 전에 제대로 살균sanitize하지 않습니다. 해당 모듈에 접근 권한이 있는 인증된 사용자는 root 권한으로 실행되는 임의의 명령어를 주입할 수 있습니다. 사전 요구 사항 익스플로잇을 실행하기 전에 의존성을...

CVE-2019-12840

CVE-2019-12840 Webmin 1.910에서 인증된 RCE - 'Package Updates' 사용법 : 1- netcat 리스너를 설정하세요. 2- python3 exploit.py 참고: 예를 들어 URL을 제공하세요: http://:port 브라우저에서 'sid' 쿠키를 복사하여 exploit이 작동하도록 제공하세요...

Microsoft SharePoint - Remote Code Execution

Microsoft SharePoint is vulnerable to a remote code execution when the software fails to check the source markup of an application package. id: CVE-2020-16952 info: name: Microsoft SharePoint - Remote Code Execution author: dwisiswant0 severity: high description: Microsoft SharePoint is vulnerabl...

Viessmann Vitogate 300 - Hardcoded Password

A critical vulnerability in Viessmann Vitogate 300 up to 2.1.3.0 allows attackers to authenticate using hardcoded credentials in the Web Management Interface. id: CVE-2023-5222 info: name: Viessmann Vitogate 300 - Hardcoded Password author: ritikchaddha severity: critical description: | A critica...

Fedora 44 : openssl (2026-12f3f3d569)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-12f3f3d569 advisory. Rebase to OpenSSL 3.5.9 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

sonos

sonos/amlogic haxx 여기에는 Hack in the Box amsterdam 2023에서의 Sonos One 프레젠테이션의 일부였던 익스플로잇 및 도구 코드가 있습니다. EL3 익스플로잇을 사용하여 OTP/eFUSE 데이터를 덤프할 수 있습니다. sonostool은 Sonos LUKS 볼륨의 복호화 키를 얻는 데 사용할 수 있으며, sonos 기기를 오라클로 사용하지 않고 OTA 업데이트를 가져와 복호화할 수도 있습니다. EL3 익스플로잇/버그는 작성 시점 기준 아직 0day입니다. 벤더에 보고되지 않음 즐기세요!...

columbus-server

Columbus server This repository is deprecated! ‼️ The server component is moved to https://github.com/elmasy-com/columbus. Columbus Project is an API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features. Subdomain Lookup Columbus returned 638...

kraker

About Setup Server Setup Agent Setup Build from source Using release Contacts About Kraker is a distributed password brute-force system that allows you to run and manage the hashcat on different servers and workstations, focused on easy of use. There were two main goals during the design and...

Microsoft SQL Server Reporting Services - Remote Code Execution

Microsoft SQL Server Reporting Services is vulnerable to a remote code execution vulnerability because it incorrectly handles page requests. id: CVE-2020-0618 info: name: Microsoft SQL Server Reporting Services - Remote Code Execution author: joeldeleep severity: high description: Microsoft SQL...

RealTek Jungle SDK - Arbitrary Command Injection

There is a command injection vulnerability on the "formWsc" page of the management interface. Successful exploitation of this vulnerability could lead to remote code execution and compromise of the affected system. id: CVE-2021-35395 info: name: RealTek Jungle SDK - Arbitrary Command Injection...

Fedora 45 : fetchmail (2026-8ffc03a2ce)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8ffc03a2ce advisory. Update to fetchmail-6.6.8 CVE-2026-94184 ---- Update to fetchmail-6.6.7 Tenable has extracted the preceding description block directly from the Fedora securi...

HP ThinPro 8.1 SP10 Security Updates

Previous versions of HP ThinPro prior to HP ThinPro 8.1 SP10 could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP10, which includes updates to mitigate potential vulnerabilities. All of the identified vulnerabilities listed above were addressed and fixed as part o...

Windows10_Cumulative_Updates_PowerShell

다음 링크를 사용하세요 - https://github.com/aaronparker/LatestUpdate Windows 10 ENTERPRISE 또는 EDU인 경우 모든 업데이트를 수행합니다. PRO인 경우 1809 , 1903 및 1909만 패치됩니다. Windows10CumulativeUpdatesPowerShell 이 PowerShell 스크립트는 시스템에서 실행되어 시스템이 CVE-2020-0601 "Curveball"에 대해 패치되었는지 확인하고, 그렇지 않은 경우 적절한 패치를 다운로드하여 실행합니다. Windows...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities (CVE-2024-53677, CVE-2025-23184)

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2024-53677 DESCRIPTION: File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params to enable paths traversal and under some circumstances this ca...

CVE-2017-3143

TSIG 우회 익스플로잇 Bind의 CVE-2017-3143 및 Knot DNS의 CVE-2017-11104에 대한 익스플로잇입니다. 자세한 내용은 https://www.synacktiv.com/ressources/CVE-2017-3143BIND9TSIGdynamicupdatesvulnerabilitySynacktiv.pdf 을를 참조하세요. 작성자 Clément Berthaux - clement dot berthaux at synacktiv dot com...

Rocky Linux 9.6 [TuxCare] Security Update: nbdkit / nbdkit-bash-completion / nbdkit-basic-filters / etc (ALMALINUX9.6:CLSA-2026:1777021155)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777021155 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

CentOS Linux 7.9 [CIQ] Security Update: microcode_ctl (ciqsa-2026_0718)

The CentOS Linux 7.9 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20260718 advisory. This advisory aggregates security fixes for the microcodectl SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2022-21233. Tenable has extracted the precedi...

CentOS Linux 7.9 [CIQ] Security Update: expat / expat-debuginfo / expat-devel / expat-static (ciqsa-2026_0659)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260659 advisory. This advisory aggregates security fixes for the expat SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2016-9063. Tenable has extracted the preceding...

AlmaLinux 9.6 [TuxCare] Security Update: expat / expat-devel / expat-static (ALMALINUX9.6:CLSA-2025:1765987202)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1765987202 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...