postEX

PostEX - Post-Exploitation Recon Agent For authorized security testing only. Unauthorized use is illegal. PostEX is a Python-based post-exploitation reconnaissance agent for Windows. It collects system information, privilege status, installed patches, defense mechanisms, network configuration,...

melee

MELEE: A Tool to Detect Ransomware Infections in MySQL Instances Attackers are abusing MySQL instances for conducting nefarious operations on the Internet. The cybercriminals are targeting exposed MySQL instances and triggering infections at scale to exfiltrate data, destruct data, and extort mon...

CVE-2026-33796 Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route monitoring...

CVE-2026-33796 Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route monitoring...

CVE-2026-33789 Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and potential root-level command execution via crafted BGP route updates when the BGP Monitoring Protoco...

CVE-2026-33789 Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and potential root-level command execution via crafted BGP route updates when the BGP Monitoring Protoco...

EUVD-2026-101401

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and potential root-level command execution via crafted BGP route updates when the BGP Monitoring Protoco...

CVE-2026-33789

A Stack-based Buffer Overflow vulnerability exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . When the BGP Monitoring Protocol (BMP) is enabled, an unauthenticated BGP peer can trigger this vulnerability by sending crafted BGP route updates . This fla...

EUVD-2026-101385

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the phone-home daemon phcd of Juniper Networks Junos OS and Junos OS Evolved on EX Series, SRX Series, and QFX Series allows an adjacent unauthenticated attacker to execute arbitrary...

CVE-2026-102059 Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific information

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the phone-home daemon phcd of Juniper Networks Junos OS and Junos OS Evolved on EX Series, SRX Series, and QFX Series allows an adjacent unauthenticated attacker to execute arbitrary...

CVE-2026-102059

Juniper Networks Junos OS and Junos OS Evolved on EX Series , SRX Series , and QFX Series are vulnerable to an OS Command Injection (CWE-78) vulnerability. The flaw exists in the phone-home daemon (phcd) , where the software fails to properly neutralize special elements used in OS commands. This ...

CVE-2026-102059 Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific information

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the phone-home daemon phcd of Juniper Networks Junos OS and Junos OS Evolved on EX Series, SRX Series, and QFX Series allows an adjacent unauthenticated attacker to execute arbitrary...

EUVD-2026-101356

An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled...

CVE-2026-102031

A critical OS Command Injection vulnerability exists in the TACACS component of Juniper Networks Junos OS Evolved . When periodic TACACS+ authorization-refresh is enabled, a low-privileged TACACS+-authenticated user can execute arbitrary commands with root privileges . No specific affected versio...

CVE-2026-102031 Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled

An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled...

CVE-2026-102031 Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled

An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled...

CVE-2026-87902

CVE-2026-87902 — WordPress Core Path Traversal / LFI / RCE Unauthenticated Local File Inclusion via double-encoded path traversal in WordPress core's page-template resolver, with PEAR-based RCE chain. Vulnerability Details Field| Value ---|--- CVE| CVE-2026-87902 CVSS| 9.2 Critical —...

Aresius

Aresius The lightweight, native interception proxy for security testing. Fast. Cross-platform. 100% Open Source. Quick Start · Features · Why Aresius · Install · Roadmap · Community · Releases ⚡ What is Aresius? Aresius is a native, modern desktop HTTP/HTTPS interception proxy designed for...

Detections-CVE-2026-31431

MOVING TO: https://github.com/insomnisec/publiccvedetections FOR BETTER LONG TERM MANAGEMENT OF DETECTION PUBLICATIONS THIS REPO WILL BE REMOVED IN JUNE 2026 PLEASE USE THE OTHER REPO GOING FORWARD CVE-2026-31431 "Copy Fail" — Detection & Response Package Published: 2026-04-30 CVSSv3: 7.8 High...

EUVD-2016-10916

A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Command Handler. The manipulation results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used...