CVE-2019-15107

CVE-2019-15107 This is information about the CVE-2019-15107 Webmin vulnerability, including building a server and recording attack results...

msdt-follina

msdt-follina Microsoft MS-MSDT Follina 0-day Vulnerability CVE-2022-30190 Attack Vector...

python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit CPU resources. This leads to...

CVE-2026-104046

A flaw was found in SSSD System Security Services Daemon. When Identity Provider IdP authentication is enabled, pre-authentication requests retain state in memory without being cleared or timed out. A local attacker can repeatedly initiate authentication flows without completing them, causing...

krackattacks-scripts

This project contains scripts to test if clients or access points APs are affected by the KRACK attack against WPA2. For details behind this attack see our website and the research paper. Помните, что наши скрипты — это не скрипты для атаки! Вам понадобятся соответствующие сетевые учётные данные,...

routopsy

routopsy Routopsy est une boîte à outils conçue pour attaquer des protocoles réseau souvent négligés. Routopsy prend actuellement en charge des attaques contre les protocoles de routage dynamique DRP et les protocoles de redondance de premier saut FHRP. La plupart des attaques actuellement mises ...

maskprocessor

maskprocessor Générateur de mots haute performance avec un jeu de caractères configurable par position Attaque par masque Essayez toutes les combinaisons d'un espace de clé donné, comme dans une attaque Brute-Force, mais de manière plus spécifique. Avantage par rapport au Brute-Force La raison po...

CVE-2021-26832

CVE-2021-26832 Description suggérée Cross Site Scripting XSS sur le formulaire de la page « Réinitialiser le mot de passe » de Priority Enterprise Management System v8.00 permet aux attaquants d'exécuter du javascript pour le compte de la victime en envoyant une URL malveillante ou en dirigeant l...

CVE-2026-79818

A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to obtain sensitive information from the affected system...

CVE-2026-79808

A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticated local user to execute arbitrary code with elevated privileges on the affected host or to disrupt the availability of the affected service...

CVE-2026-79812

A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an authenticated local attacker to interrupt the normal operation of the agent service...

CVE-2026-76749

A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated remote attacker to access sensitive information...

CVE-2026-76743

A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an...

DEBIAN-CVE-2026-106451

yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load uses File.createTempFile to create an exclusive temporary .lck file but derives the native-library path by removing the suffix, then FileOutputStream opens that predictable path without...

CVE-2026-104047

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause...

CVE-2026-102156

Improper neutralization of Lightweight Directory Access Protocol LDAP authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service...

CVE-2026-101154

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...

CVE-2026-105811

The QnABot on AWS (versions 7.0.0 through 7.4.5) contains an authorization bypass vulnerability in the optional Amazon Q Business Lambda hook sample (q-business-lambda-hook). This issue stems from a user-controlled key and could allow an authenticated remote user to read arbitrary Amazon S3 objec...

CVE-2026-105811 Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample q-business-lambda-hook https://github.com/aws-solutions-library-samples/qnabot-on-aws/blob/main/source/docs/lambdahooks/README.md , available with QnABot on AWS versions 7.0.0 through 7.4.5,...

CVE-2026-61674

A flaw was found in Fluent Bit. A stack-based buffer overflow exists in the forward output plugin due to insufficient bounds checking on server responses during connection handshakes. A remote attacker controlling or impersonating a destination server can exploit this vulnerability by sending an...