DevGuide

Guide du développeur de la Fondation OWASP Le Guide du développeur est l'un des documents originaux d'OWASP et possède donc une longue histoire. Le dépôt original du DevGuide contient de nombreuses versions précédentes remontant jusqu'à la toute première version 1.0 publiée en 2002. Ceci est le...

shepard

SHEPARD BITS This is a persistance tool using Windows Background Intelligent Transfer Service BITS. Functionality File Download, File Exfiltration, File Download + Persistent Execution Usage Run shepard.exe as Administrator with the following command line arguments: -d : regular file download to ...

CheatSheetHost

CheatSheetHost Un serveur web léger, piloté par le contenu, pour héberger des antisèches interactives et des documents de référence. Parfait pour les défis CTF Capture The Flag, le reverse engineering et la documentation technique. Idéal dans les laboratoires où l'on souhaite limiter ou renoncer ...

PerkinElmer ProcessPlus <= 1.11.6507.0 - Local File Inclusion

Files on the Windows system are accessible without authentication to external parties due to a local file inclusion in PerkinElmer ProcessPlus.This issue affects ProcessPlus through 1.11.6507.0. id: CVE-2024-6911 info: name: PerkinElmer ProcessPlus = 1.11.6507.0 - Local File Inclusion author:...

poro

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...

EUVD-2026-91482

YesWiki before 4.6.7 contains an unrestricted file upload vulnerability that allows authenticated admins to write remote files into the web-accessible files/ directory via Bazar CSV import preview. Attackers can import a CSV whose file or image field references a remote .php URL, which is saved...

s3_objects_check

S3 Objects Check Описание Whitebox-оценка эффективных разрешений на объекты S3 для выявления публично доступных объектов. Позволяет выявлять публично доступные объекты, а также объекты, доступные для AuthenticatedUsers с использованием дополнительного профиля. Существует ряд инструментов, которые...

CVE-2026-97866

A weakness exists in Zhonglun CloudPOS 3.0 within the Automatic Update component, specifically involving an unknown functionality in the Program.cs file. By manipulating arguments such as version , url , packagekey , or package name , a remote attacker can cause a channel to become accessible by ...

CVE-2026-97866 Zhonglun CloudPOS Automatic Update Program.cs channel accessible

A weakness has been identified in Zhonglun CloudPOS 3.0. Affected by this vulnerability is an unknown functionality of the file Program.cs of the component Automatic Update. Executing a manipulation of the argument version/url/packagekey/package name can lead to channel accessible by non-endpoint...

UBUNTU-CVE-2026-97929

In the Linux kernel, the following vulnerability has been resolved: ALSA: usbusx2y: validate URB actuallength in interrupt callback iusx2yin04int processes the interrupt URB data without checking urb-actuallength. A short transfer from a malfunctioning device would cause the handler to process...

PT-2026-98064

In the Linux kernel, the following vulnerability has been resolved: xhci: Prevent queuing new commands if xhci is inaccessible Refuse to queue a new command on the command ring if xHC is marked inaccessible with the HCD FLAG HW ACCESSIBLE. HCD FLAG HW ACCESSIBLE is set and cleared in suspend and...

CVE-2026-75799: Improper Control of Generation of Code

The YAHMAN Add-ons WordPress plugin before 0.9.31 does not validate the type of the remote files it caches in a publicly accessible directory, allowing unauthenticated attackers to write arbitrary PHP files on the server and achieve RCE when the relevant feature is enabled...

EUVD-2025-210927

The Dictionary WordPress plugin through 1.0 does not escape user input before reflecting it back in the responses of several directly accessible scripts, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against anyone they can induce to submit a crafted request...

CVE-2026-73940

Oracle Access Manager (Oracle Fusion Middleware) is vulnerable in its Authentication Engine component, affecting versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via T3 or IIOP can exploit this easily exploitable vulnerability to achieve full takeover of the pr...

PT-2026-92699

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Common Applications versions 12.2.3 through 12.2.15 Description A flaw exists in the CRM User Management Framework component of Oracle Common Applications. A high privileged attacker with network access via HTTP...

Astra Linux – Vulnerability in Firefox and Thunderbird

A malicious web page could have caused a “use-after-free” issue, leading to memory corruption and potentially exploitable crashes. This bug can only be triggered when accessibility is enabled. This vulnerability affects Thunderbird 78.12, Firefox ESR 78.12, and Firefox 90...

Linux Distros Unpatched Vulnerability : CVE-2026-68006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/pumahttp11/http11parser.rl file CVE-2026-68006 Note that...

Fedora 44 : grpcurl (2026-fc26634b91)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fc26634b91 advisory. Update to 1.9.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

EUVD-2026-74767

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with local access could potentially exploit this...

CVE-2026-80175

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with local access could potentially exploit this...