1926559 matches found
Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.69 bug fix and security update
Red Hat OpenShift Container Platform release 4.16.69 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.72 bug fix and security update
Red Hat OpenShift Container Platform release 4.14.72 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.68 bug fix and security update
Red Hat OpenShift Container Platform release 4.15.68 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...
cowrie v3.0.12
.. SPDX-FileCopyrightText: 2014 Upi Tamminen [email protected] .. SPDX-FileCopyrightText: 2014-2025 Michel Oosterhof [email protected] .. .. SPDX-License-Identifier: BSD-3-Clause Cowrie What is Cowrie Cowrie is a medium to high interaction SSH and Telnet honeypot designed to log brute...
CVE-2026-46456
CVE-2026-46456 — camel-aws2-sqs Inbound Message-Attribute Header Injection Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack| Hijacked sink| Demonstrated impact ---|---|---|---|--- Camel Spring Boot| camel-spring-boot/| Sprin...
CVE-2026-69084-PoC
CVE-2026-69084 / CVE-2026-69085 — SiYuan Arbitrary SQL Execution & SQLi CVE-2026-69084: Arbitrary SQL Execution via /api/search/searchEmbedBlock CVE-2026-69085: SQL Injection via /api/filetree/searchDocs CVSS 9.9 Critical each · CWE-89 · SiYuan = v3.7.2 fixed in v3.7.3 Published 2026-08-03 · no...
chronomaly-webos
Chronomaly — CVE-2025-38352 在 LG webOS 上的利用 针对 CVE-2025-38352（POSIX CPU 定时器竞态条件 / 释放后使用）的内核利用，可在运行内核 5.4.268（ARM64）的 LG webOS 智能电视上获得持久 root 权限。已在 4 种电视型号和多个固件版本上验证。已通过 LG 安全研究员计划（2026 年 2 月）负责任地披露。 基于 farazsth98 的 Chronomaly 构建。第 1 阶段 UAF 竞态逻辑和跨缓存基础设施经移植并适配至 ARM64；第 2–5...
Important: Red Hat Security Advisory: xmlrpc-c security update
An update for xmlrpc-c is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...
hostapd-mana v2.12
hostapd-mana Overview A featureful rogue access point first presented at Defcon 22 by Dominic White @singe & Ian de Villiers @ sensepost [email protected] Documentation Check the wiki for information of getting and using hostapd-mana. Features KARMA/MANA Mode - respond to any device looking...
solrradar
Apache Solr 批量侦察与漏洞利用框架 Velocity 模板注入 → 远程代码执行 📑 目录 漏洞概述 受影响版本 功能特性 安装 使用方法 概念验证 技术深入解析 检测方法论 防御与缓解措施 免责声明 参考资源 🔴 漏洞概述 CVE-2026-44825 是 Apache Solr 中的一个严重级别漏洞，攻击者可通过 Velocity 模板注入实现未认证远程代码执行（RCE） 。 问题所在 Apache Solr 的 /select 端点接受一个 wt=velocity 参数，用于渲染用户提供的 Velocity 模板。当 Velocity Response Writer...
CVE-2025-8110
CVE-2025-8110 Gogs 的 PutContents API 对符号链接的处理不当，可导致本地代码执行。 此检测方法如何工作？ 通过正则表达式（Gogs Version: X.X.X）从 /user/login 的页脚中提取 Gogs 版本，并将运行 0.13.3 或更早版本的实例标记为易受 CVE-2025-8110 影响。 如何运行此脚本？ 1. 下载并安装 Nuclei。 2. 将此仓库克隆到本地系统。 3. 运行以下命令： root@kitploit: nuclei -u -t template.yaml 或者，如果你想扫描主机列表，请执行： root@kitploi...
watchTowr-vs-SmarterMail-CVE-2025-52691
CVE-2025-52691 SmarterMail 预认证 RCE SmarterMail 预认证 RCE 1day 检测产物生成工具 检测演示 检测产物生成工具尝试将 .aspx 文件写入 C:\Program Files x86\SmarterTools\SmarterMail\Service\AppData 目录（94xx 版本）或 C:\Program Files x86\SmarterTools\SmarterMail\MRS\AppData 目录（16 版本）。这不会导致远程代码执行，仅用于证明漏洞可利用性。 该脚本已在以下环境测试： 基于 Windows Server 的...
EUVD-2026-68306
Authorization Bypass Through User-Controlled Key vulnerability in ash-project ashai allows a caller of an identity-configured tool to update or destroy records it never identified, including every row in the table. In AshAi.Tool.Execution, identityfilter/3 built the update/destroy filter directly...
CVE-2026-82564 Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records
Authorization Bypass Through User-Controlled Key vulnerability in ash-project ashai allows a caller of an identity-configured tool to update or destroy records it never identified, including every row in the table. In AshAi.Tool.Execution, identityfilter/3 built the update/destroy filter directly...
CVE-2026-82564 Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records
Authorization Bypass Through User-Controlled Key vulnerability in ash-project ashai allows a caller of an identity-configured tool to update or destroy records it never identified, including every row in the table. In AshAi.Tool.Execution, identityfilter/3 built the update/destroy filter directly...
CVE-2026-82564 Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records
Authorization Bypass Through User-Controlled Key vulnerability in ash-project ashai allows a caller of an identity-configured tool to update or destroy records it never identified, including every row in the table. In AshAi.Tool.Execution, identityfilter/3 built the update/destroy filter directly...
CVE-2026-82564
CVE-2026-82564 is an Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_ai (versions 0.6.0 to <1.0.0). In AshAi.Tool.Execution, the identity_filter/3 function built update/destroy filters directly from raw tool arguments. Because a map value is parsed as a predic...
EEF-CVE-2026-82564 Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records
Summary Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash\ai allows a caller of an identity-configured tool to update or destroy records it never identified, including every row in the table. In AshAi.Tool.Execution, identity\filter/3 built the update/destroy filte...
