opensoho v0.15.1

Warning this is an early release, please read the release notes of ALL the releases until now OpenSOHO Documentation OpenSOHO is built to manage a small number OpenWRT based network devices. Hence the name SOHO from Small Office Home Office SOHO Networks. From 2 to 20 devices there is no hard lim...

CVE-2026-85638 jofpin trape user.py authorization

A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipulation of the argument vId/id causes authorization bypass. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for...

EUVD-2026-71691

A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. This manipulation of the argument vId/id causes authorization bypass. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for...

CVE-2026-85638

jofpin trape 2.0 contains an authorization bypass in the file core/user.py , caused by manipulation of the argument vId/id . The vulnerability allows remote, unauthenticated exploitation over the network with low complexity. CVSS 3.1 scores it 7.3 (HIGH) , with low impacts to confidentiality, int...

ShuckNT

🔐 ShuckNT : Снятие оболочки с хэша перед попыткой взлома | скрипт Shuck.sh ShuckNT — это скрипт онлайн-сервиса Shuck.sh для локального использования попробуйте онлайн!. Он предназначен для понижения downgrade, конвертации, разбора и снятия оболочки shuck с токенов аутентификации на основе Data...

masm32-kernel-programming

masm32-kernel-programming Репозиторий Dreg для его собственных нужд Программирование ядра masm32, драйверы, руководства, примеры и инструменты автор: Four-F Инструкции скачайте/клонируйте этот репозиторий запустите masm32v11rinstall.exe нажмите на установочный образ земля установите masm32 в C:...

smart-contract-vulnerabilities

Уязвимости смарт-контрактов Подборка уязвимостей смарт-контрактов и методов их предотвращения. См. /references для справочных материалов, оптимизированных под LLM. Контроль доступа Авторизация через tx.origin Недостаточный контроль доступа Delegatecall на недоверенный вызываемый контракт...

CVE-2026-80118 PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Null Pointer Dereference via DirectIo64.sys IOCTL

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical memory disclosure in DirectIo64.sys, reachable by unprivileged local users through a single IOCTL with no caller-identity check. The handl...

CVE-2026-80118

PassMark PerformanceTest (before 11.1 build 1012), BurnInTest (before 11.1 build 1000), and OSForensics (before 11.1 build 1016) contain an unauthenticated physical memory disclosure in DirectIo64.sys . A single IOCTL with no caller-identity check allows unprivileged local users to write a crash-...

EUVD-2026-71689

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical memory disclosure in DirectIo64.sys, reachable by unprivileged local users through a single IOCTL with no caller-identity check. The handl...

CVE-2026-84890

A flaw was found in undici. The decompress interceptor in undici processes compressed response bodies based on the untrusted Content-Encoding header. A remote attacker can exploit this by sending a small, specially crafted compressed payload, known as a 'compression bomb,' which expands...

MAL-2026-15931 Malicious code in metricboxlite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 83407b9909ebc137e4d47fbb7fe2672a5920dd22bfd7d86ce8edb536bdd5fcab Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in metricboxlite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 83407b9909ebc137e4d47fbb7fe2672a5920dd22bfd7d86ce8edb536bdd5fcab Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2026-78328

A missing authorization vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin...

CVE-2026-78328

CVE-2026-78328 is a missing authorization (CWE-862) vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface. A lower-privileged Admin user can escalate privileges to SuperAdmin . SonicWall rates it CVSS 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The NVD/CNA entr...

CVE-2026-78328

A missing authorization vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin...

EUVD-2026-71680

A missing authorization vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin...

CVE-2026-84890

undici's decompress interceptor decompresses response bodies according to the untrusted Content-Encoding header. While the number of content-encoding layers is capped, the total decompressed output size is unbounded and there is no configuration option to limit it. A malicious or faulty upstream...

DEBIAN-CVE-2026-84890

undici's decompress interceptor decompresses response bodies according to the untrusted Content-Encoding header. While the number of content-encoding layers is capped, the total decompressed output size is unbounded and there is no configuration option to limit it. A malicious or faulty upstream...

AZL-99579 CVE-2026-80906 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net: packet: fix wrong transportheader when sending VLAN-tagged frame In packetparseheaders, when processing a VLAN-tagged frame, skbsetnetworkheader is called to advance networkheader past the VLAN tag to the inner protocol...