CVE-2026-69206

Http4s (a Scala HTTP service framework) has a DigestAuth replay vulnerability prior to versions 0.23.35 and 1.0.0-M47 . The replay protection records lastNc + 1 instead of the highest accepted nonce-count value. When a legitimate client sends noncontiguous nc values (due to parallel or retried re...

CVE-2026-69206 Http4s: DigestAuth allows replay of captured requests

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, DigestAuth replay protection records lastNc plus one instead of the highest nonce-count value it has accepted. When a legitimate client sends noncontiguous nc values because of parallel or retried requests, the stored...

cryptography-research-demo

"Further Single-Key Recovery Attacks on Reduced-Round AES" 的实验产物 论文中引用的每项实验的源代码。 未捆绑任何测量输出或预制表：每个程序自行打印或写入其结果，因此所有数字都可以从头重新生成。 目录| 内容 ---|--- experiments/| Measured costs 附录背后的两个实验：对 SR7,2,2,6 的完整黑盒密钥恢复，以及真实 7 轮 AES-128 攻击的逐条目 / 逐候选测量 c/| 独立的 C 程序，每个组件论断一个（桥接、指纹、DDT-Gray 游走、S-box 缓存、错误密钥随机化、查找下限）...

BWASP

BWASP The BoB Web Application Security Project BWASP is an open-source, analysis tool to support for Web Vulnerability Manual Analysis hackers. The BWASP tool basically provides predicted information through vulnerability analysis without proceeding with an attack. BWASP supports performing...

EUVD-2026-79233

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and...

CVE-2026-76707 Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and...

EUVD-2026-79231

A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with Admin privilege to execute arbitrary commands on the underlying operating system...

k8scout

k8scout Beta — A single-binary Kubernetes attack path engine for authorized security assessments. Drop it into a compromised pod, run it, and get a map of every realistic escalation path — from your current foothold to cluster-admin, node access, secret theft, and cloud IAM roles. The idea You ha...

EUVD-2026-79226

Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service...

CVE-2026-76697 Authenticated Information Disclosure in HPE Networking EdgeConnect Enterprise Web-Based Management Interface

A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially...

EUVD-2026-79223

A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially...

EUVD-2026-79222

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting networ...

CVE-2026-76696

HPE Networking EdgeConnect SD-WAN Gateways contain a vulnerability that allows an unauthenticated adjacent attacker to perform a denial-of-service attack. Successful exploitation can crash the system , preventing it from rebooting without manual intervention , thereby disrupting network operation...

CVE-2026-76695

CVE-2026-76695 affects the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways . The vulnerability is a buffer overflow that can be triggered by an unauthenticated remote attacker sending specially crafted packets to the affected service. Successful exploitation may compromi...

EUVD-2026-79221

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to send specially crafted packets to the affected service. Successful exploitation could allow an attacker to affect the...

CVE-2026-76686

A denial-of-service vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways . An unauthenticated remote attacker can exploit it to disrupt the affected service, with a CVSS 3.1 score of 7.5 (HIGH) reflecting network vector, low complexity, no privileg...

EUVD-2026-79201

A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to execute arbitrary commands on the underlying operating system leading to complete system compromise...

EUVD-2026-79198

A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with read-only privileges could exploit this vulnerability by sending a specially crafted request to the cache synchronization endpoint...

promptmap

root@kitploit: O O o.-. Humans, Do Not Resist! |/ ,-'-. / /, / /|.-.| / --O-- .--""" /\ /\ | o.o / Utku Sen's /|\ -'--' / /| | - | / | | | \ /| | | ' \ '/ \ ' | ' \ | ' / | ' \ | / | | | ./| /||| ./|||,| .// / / |-----| || || || || promptmap2 is a an automated prompt injection scanner for...

CVE-2026-58765

In GPU, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...