10963 matches found
gmailc2
gmailc2 A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions Note: This RAT communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the companies block unknown traffic so...
HoneyWire
HoneyWire 📋 Table of Contents Overview Showcase The Universal Event Standard Features Architecture Quick Start Guide Security Notes Tech Stack Roadmap & Development Versioning and API Reference Overview HoneyWire is a lightweight, Distributed High-Signal Security Early-Warning System Builder,...
yj_nearbyglasses
yjnearbyglasses attempting to detect smart glasses nearby and warn you. ⚠ WARNING! ⚠ nearby-glasses-alert.pages.dev is NOT RELATED TO MY PROJECT. Many apps in Play Store and App Store look or are even called very similar to Nearby Glasses. They seem to hijack the name and try to make a quick prof...
interactsh
An OOB interaction gathering server and client library Features • Usage • Interactsh Client • Interactsh Server • Interactsh Integration • Join Discord Interactsh is an open-source tool for detecting out-of-band interactions. It is a tool designed to detect vulnerabilities that cause external...
lazyrecon
/ \ / / \ /// / // Y / \ /| | | | / | / / \ / | /|| \ | / | / || |\ || | |/| |-||/ / / / | /| / | | /|| | || // |/// /\\|// | Usage ./lazyrecon.sh -d domain.com To exclude particular subdomains: ./lazyrecon.sh -d domain.com -e excluded.domain.com,other.domain.com About...
CVE-2026-121936
easyVoice before 0.0.23 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server send POST requests by supplying openaiBaseUrl with useLLM enabled. Attackers can target loopback and internal services through /api/v1/tts endpoints, using reflect...
CVE-2026-121936 easyVoice before 0.0.23 SSRF via openaiBaseUrl in TTS API
easyVoice before 0.0.23 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server send POST requests by supplying openaiBaseUrl with useLLM enabled. Attackers can target loopback and internal services through /api/v1/tts endpoints, using reflect...
CVE-2026-121936
The easyVoice software (versions prior to 0.0.23 ) is vulnerable to a Server-Side Request Forgery (SSRF) . An unauthenticated attacker can force the server to send POST requests by supplying a custom openaiBaseUrl while useLLM is enabled. This vulnerability can be exploited via the /api/v1/tts en...
CVE-2026-121936 easyVoice before 0.0.23 SSRF via openaiBaseUrl in TTS API
easyVoice before 0.0.23 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server send POST requests by supplying openaiBaseUrl with useLLM enabled. Attackers can target loopback and internal services through /api/v1/tts endpoints, using reflect...
CVE-2026-121936: cosin2077 easyVoice: easyVoice before 0.0.23 contains a server-side request forgery vulnerability that allows unauthenticated attackers to…
easyVoice before 0.0.23 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server send POST requests by supplying openaiBaseUrl with useLLM enabled. Attackers can target loopback and internal services through /api/v1/tts endpoints, using reflect...
CVE-2026-99256: Linux: In the Linux kernel, the following vulnerability has been resolved: dm cache: fix issue with background work locking dm…
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix issue with background work locking dm cache used a rwsemaphore for backgroundworklock. Write locks on rwsemaphores have strict owner semantics, but there was no guarantee that the process that locked...
Linux Distros Unpatched Vulnerability : CVE-2026-99256
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm cache: fix issue with background work locking dm cache used a rwsemaphore for backgroundworklock. Write locks on rwsemaphores have strict owner semantics, bu...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: mISDN: hfcpci: Fix warning when deleting uninitialized timer When CONFIGDEBUGOBJECTSTIMERS unloads the hfcpci module, the following error occurs: 250.215892 ODEBUG: assertinit not available active state 0 object: ffffffffc01a3dc0...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: hsi: omapssicore: fix missing DMA mask setup for SSI controller device The OMAP SSI driver uses a synthetic HSI controller device allocated via hsialloccontroller, which does not go through the normal OF/platform device...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix 802.1X-SHA256 call trace warning Based on wpaauth as 1x256 mode, it is necessary to set up "usefwsup" with BRCMFPROFILEFWSUP1X. Otherwise, a trace warning will occur when calling brcmfcfg80211setpmk. 4481.8311...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: afpacket: Do not send zero-byte data in tpacketsnd. SyZBot reported a WARNING in devqueuexmit triggered via tpacketsnd: skbassertlen WARNING: at include/linux/skbuff.h:2753 skbassertlen WARNING: at devqueuexmit+0x21bc/0x4970...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: tpm: tpmtisspi: Use waitwoken in waitfortmpstat waiteventinterruptibletimeout evaluates its condition after setting the current task state to TASKINTERRUPTIBLE. When CONFIGDEBUGATOMICSLEEP is enabled, this triggers a warning when...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: check the data direction of a C2HData PDU nvmetcphandlec2hdata finds the request by command id and checks that it has a payload; however, it does not verify whether the command actually requests data reading...
CVE-2026-99158
A flaw was found in the Linux kernel's ring buffer component. When a reader process accessing memory-mapped trace data catches up with a concurrent writer still committing events, the kernel incorrectly treats the temporary absence of data as an error and triggers a kernel warning. A local user...
CVE-2025-0994
CVE-2025-0994 How does this detection method work? This Nuclei template extracts the version stored in the HTML body and based on the version we can determine whether the instance is vulnerable to CVE-2025-0994 or not. Patched version: 15.8.9 How do I run this script? 1. Download Nuclei from here...