1915475 matches found
WindowsFirewallHookDriverEnumeration
Enumeração do Driver de Hook do Firewall do Windows Ferramentas para enumerar drivers de hook do firewall do Windows no Windows 2000, XP e 2003. Vimos uma amostra de código malicioso que usa essa técnica. A Técnica de Hooking A funcionalidade de Hook do Firewall do Windows na técnica XP/2003 1234...
WindowsDACLEnumProject
Windows DACL Enum Project Una raccolta di strumenti per enumerare e analizzare le DACL di Windows Rilasciato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato da Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com https://github.com/nccgroup/WindowsDACLEnumProject...
Zulu
Zulu - इंटरैक्टिव फ़ज़र NCC Group Plc द्वारा ओपन सोर्स के रूप में जारी - http://www.nccgroup.com/ Andy Davis द्वारा विकसित, andy dot davis at nccgroup dot com https://www.github.com/nccgroup/Zulu AGPL के अंतर्गत जारी, अधिक जानकारी के लिए LICENSE देखें प्रलेखन...
[SECURITY] [DLA 4758-1] chromium security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4758-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 27, 2026 https://wiki.debian.org/LTS -...
RowHammer-Exploit
RowHammer-Exploit RowHammer Based-Exploit Hintertür für syssuid mithilfe von Rowhammer Muss noch überarbeitet werden... herausfinden, warum Dinge nicht richtig funktionieren... root@kitploit: Current stage... Denial fails with the following stack trace... UG: unable to handle kernel paging reques...
EUVD-2026-67310
FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, the WeChat iLink share-channel endpoints authorize requests using only the public shareId, with no authenticated identity or team-ownership check. As a result, an unauthenticated...
CVE-2026-68929 FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization
FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, the WeChat iLink share-channel endpoints authorize requests using only the public shareId, with no authenticated identity or team-ownership check. As a result, an unauthenticated...
CVE-2026-68929 FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization
FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, the WeChat iLink share-channel endpoints authorize requests using only the public shareId, with no authenticated identity or team-ownership check. As a result, an unauthenticated...
CVE-2026-68929
FastGPT , an open-source LLM platform, is vulnerable to unauthenticated WeChat channel hijack and denial of service in versions prior to 4.15.2 . The WeChat (iLink) share-channel endpoints authorize requests using only the publicly exposed shareId , with no authenticated identity or team-ownershi...
CVE-2026-68929 FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization
FastGPT is an open-source LLM platform for building AI applications on a knowledge base. In versions prior to 4.15.2, the WeChat iLink share-channel endpoints authorize requests using only the public shareId, with no authenticated identity or team-ownership check. As a result, an unauthenticated...
DEBIAN-CVE-2026-81525
The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into these identifiers may have operations...
DEBIAN-CVE-2026-81521
The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name...
CVE-2026-81522
A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An application that builds a namespace identifier from untrusted input without validating it may therefore have its operation directed at a different...
CVE-2026-81521
The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name...
CVE-2026-81524
A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have...
DEBIAN-CVE-2026-81522
A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An application that builds a namespace identifier from untrusted input without validating it may therefore have its operation directed at a different...
DEBIAN-CVE-2026-81524
A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have...
CVE-2026-81525
The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into these identifiers may have operations...
CVE-2026-66353
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woylie doggo allows Reflected XSS. Doggo.normalizevalue/2 in lib/doggo.ex returned date field values wrapped in :safe, ..., the Phoenix.HTML marker meaning "already escaped, emit verbatim", without...
CVE-2026-81521
The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that passes untrusted input as a database name...