8978 matches found
Security Bulletin: Multiple Vulnerabilities affect VM Manager Tool and Scans Relay as part of IBM License Metric Tool Software as a Service
Summary Multiple vulnerabilities have been addressed in components of VM Manager Tool and Scans Relay as part of IBM License Metric Tool Software as a Service Vulnerability Details CVEID:CVE-2026-61308 DESCRIPTION: Difficult to exploit vulnerability allows unauthenticated attacker with network...
CVE-2026-94571
A flaw was found in OpenStack Octavia. An authenticated user who can create or update L7 policies on their own load balancer can inject arbitrary HAProxy configuration directives through the redirecturl or redirectprefix fields. The URL validator does not reject control characters such as tabs an...
CVE-2026-22686-RemoteCodeExecution-RCE-PoC
CVE-2026-22686 — enclave-vm Sandbox Escape PoC A proof-of-concept PoC exploit and payload generator for CVE-2026-22686 , a critical sandbox escape vulnerability in enclave-vm versions prior to 2.7.0 , allowing arbitrary code execution within the host Node.js runtime. ⚠️ Disclaimer : This tool is...
CVE-2026-67238: Uncontrolled Resource Consumption
RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, rabbitpidcodec:decomposefrombinary/1 parses a caller-supplied ETF-encoded binary and calls binarytoatomNode, utf8 on the node-name field. It is reached from rabbitvolatilequeue:pidfromname/2, which is invoked for any...
CVE-2026-47699
A flaw was found in Confidential Containers Guest Components. A workload owner can exploit a vulnerability in the image-rs library's hardlink fallback mechanism by providing a crafted OCI Open Container Initiative image layer. This allows for an arbitrary file write outside the intended directory...
CVE-2026-7574
🚨 CVE-2026-7574 — Bypass de Integridad de VM de Claude Desktop Cowork Bypass de Integridad de Imagen de VM de Anthropic Claude Desktop Cowork 🔥 Persistencia Local Mediante Manipulación de Imagen de VM Una debilidad en la validación de integridad que permite la modificación del archivo de imagen d...
ROOT-APP-NPM-AIKIDO-2026-10847 AIKIDO-2026-10847 in vm2 - Patched by Root
Root has patched AIKIDO-2026-10847 in the vm2 package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44007 CVE-2026-44007 in vm2 - Patched by Root
Root has patched CVE-2026-44007 in the vm2 package for Root:npm. Multiple fixed versions available...
CVE-2026-53359
CVE-2026-53359 A 16-year-old bug in the Linux kernel lets a rented VM break out and attack the host it runs on. Januscape is a use-after-free vulnerability in the KVM code that has been sitting there since 2010. Using the exploit-check.sh script, we can get more vuln info about the Linux Kernel...
windows-malware-behavioral-analysis
Análisis de comportamiento de malware con REMnux y FLARE-VM Una investigación práctica de malware para el equipo azul que demuestra cómo se pueden analizar ejecutables sospechosos de Windows de forma segura dentro de un laboratorio aislado mediante técnicas de análisis de comportamiento. En lugar...
KVM-Januscape
KVM-XJ Hot Patch dumptool.py automatically finds offsets; how to use it? Just read the code. Vulnerability Overview CVE-2026-53359 Januscape is a use-after-free UAF vulnerability in the Linux kernel KVM shadow MMU. Lurking time : 16 years August 2010 to July 2026 Affected range : All Intel/AMD x8...
LinusWare-Source-Code-Internal
Linusware 1.2 — Source Code & Engine Architecture Reconstructed, Reverse-Engineered & Documented by tekkenbugatti Target Platform: Linux x8664 / Luau / Roblox Runtime Engine Overview Linusware 1.2 is a native Linux x8664 runtime extension and execution engine for Roblox / Luau. This repository...
CVE-2023-27326
Parallels Desktop VM Escape This repository contains an exploit for a Parallels Desktop vulnerability which has been assigned CVE-2023-27326. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. The exploit was tested on Parallels Deskto...
CVE-2023-27326
Parallels Desktop VM Escape This repository contains an exploit for a Parallels Desktop vulnerability which has been assigned CVE-2023-27326. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. The exploit was tested on Parallels Deskto...
CVE-2026-53359
🚨 CVE-2026-53359 — Januscape Linux KVM Shadow Paging Use-After-Free Escape de Invitado a Anfitrión Januscape es una vulnerabilidad del Kernel de Linux KVM causada por una condición de Use-After-Free UAF en la x86 Shadow MMU. Bajo configuraciones vulnerables, un invitado malicioso puede corromper ...
TraditionalJay
TraditionalJay Tienda clásica / tradicional intencionalmente vulnerable para talleres de seguridad — Java en una VM EC2, Azure VM o GCP Compute Engine, no contenedores. Historia principal: Compromiso crítico de VM — inyección SQL → Log4Shell CVE-2021-44228 → reverse shell hacia C2 externo. !CAUTI...
CVE-2021-44228-VULN-APP
CVE-2021-44228-VULN-APP NOTE: This is a vulnerable virtual machine for showing what actually is this vulnerability log4j, and so on! Installation: root@kitploit: cd CVE-2021-44228-VULN-APP/ docker build -t log4j-shell-poc . docker run --network host log4j-shell-poc Listening on port 8080...
CVE-2026-34197
CVE-2026-34197 Description Improper Input Validation, Improper Control of Generation of Code ‘Code Injection’ vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access polic...
Linux Distros Unpatched Vulnerability : CVE-2026-92768
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext...