Astra Linux – Vulnerability in Flatpak

Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. The flatpak-builder command applies the finish-args option last in the build process. At this point, the build directory will have full acce...

moria

moria IoT firmware identification and extraction moria identifies files and the structures embedded inside firmware and IoT images filesystems, kernels, bootloaders, archives, keys and unpacks most of what it finds, without root. It reports each finding with a byte offset, a type, and a confidenc...

CVE-2026-59783

The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability. This only affects deployments where MySQL/MariaDB database is used as the Zabbix database...

DEBIAN-CVE-2026-59783

The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability. This only affects deployments where MySQL/MariaDB database is used as the Zabbix database...

UBUNTU-CVE-2026-59783

The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability. This only affects deployments where MySQL/MariaDB database is used as the Zabbix database...

Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit

CVE-2025-54123 — Esecuzione Remota di Codice tramite API Middleware di Hoverfly RCE autenticata tramite iniezione di comandi OS in Hoverfly ≤ 1.11.3 Panoramica della Vulnerabilità Proprietà| Valore ---|--- ID CVE| CVE-2025-54123 Punteggio CVSS| 9.8 — Critico Vettore CVSS|...

radare2-scripts

Script di radare2 Sommario Una 'collezione' di script da utilizzare con radare2. r2bincarver.py - Uno script utilizzato per estrarre file da dump di memoria. r2hashfuncdecoder.py - Uno script utilizzato per decodificare funzioni hashate, comunemente presenti nello shellcode. Script Binary Carver...

DIRTY-FRAG-Detection-with-Wazuh-4.14.4

DIRTY FRAG Detection con Wazuh 4.14.4 - CVE-2026-43284 / CVE-2026-43500 Detection engineering per la Linux Kernel LPE Dirty Frag - Ubuntu / RHEL / Debian / Amazon Linux Cos'è Dirty Frag? CVE-2026-43284 / CVE-2026-43500 è una vulnerabilità di escalation locale dei privilegi LPE nel kernel Linux ch...

CVE-2024-55347

Divulgazione CVE: CVE-2024-55347 Divulgazione pubblica di CVE-2024-55347 🚀 Data: 10-02-2025 Riepilogo Una vulnerabilità di Binary Planting in Kroll Artifact Parser And Extractor KAPE v1.3.0.2 consente agli aggressori di elevare i privilegi ed eseguire codice arbitrario posizionando un file binari...

machscope

machscope machscope ist ein terminal-basierter macOS-Explorer, der Prozesse, launchd-Jobs, Mach-Dienste, Bundles, Signaturen, Entitlements und Mach-O-Verknüpfungen in einen abfragbaren Graphen verwandelt. Es existiert, um eine einfache Frage gnadenlos gut zu beantworten: Womit ist dieser Prozess,...

CVE-2026-59783 Server DoS via binary items

The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability. This only affects deployments where MySQL/MariaDB database is used as the Zabbix database...

CVE-2026-59783

The Zabbix Server/Proxy is vulnerable to a Denial of Service (DoS) condition when processing binary items containing specific NULL byte input . This vulnerability leads to a crash of the service, resulting in a potential loss of availability. The issue is specific to deployments utilizing MySQL o...

EUVD-2026-92396

The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability. This only affects deployments where MySQL/MariaDB database is used as the Zabbix database...

CVE-2026-59783 Server DoS via binary items

The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability. This only affects deployments where MySQL/MariaDB database is used as the Zabbix database...

CVE-2026-59783

The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability. This only affects deployments where MySQL/MariaDB database is used as the Zabbix database...

CVE-2026-59783

The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability. This only affects deployments where MySQL/MariaDB database is used as the Zabbix database...

CVE-2024-31449

CVE-2024-31449 Redis è un database non relazionale in-memory open source. Riepilogo Vulnerabilità di stack buffer overflow presente in tutte le versioni di Redis che includono il motore Lua Correlata alla funzione bit.tohex all'interno del motore Lua il modulo bit viene utilizzato per eseguire...

Security Bulletin: Multiple Security Vulnerabilities Addressed in IBM Tivoli Netcool Configuration Manager(ITNCM) Version 6.4.2 Fix Pack 25 (6.4.2.25).

Summary Multiple security vulnerabilities have been addressed in IBM Tivoli Netcool Configuration ManagerITNCM Version 6.4.2 Fix Pack 25 6.4.2.25. The vulnerabilities affect components including Apache Log4j, Eclipse OpenJ9, Java SE, Apache Ant, and SSH implementations. Vulnerability Details...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 Proof of Concept — uid=1000raken → uid=0root nach ./sley auf WSL2 6.6.87.2-microsoft-standard-WSL2 Einzeldatei-Proof-of-Concept für CVE-2026-43494 PinTheft: eine Linux-Kernel-Lokale-Privilegieneskalation, die einen RDS-Zerocopy-Referenzzählfehler mit...

waf-fu

waf-fu Browser di log e replayer per AWS WAF v2 con una TUI interattiva. Estrae i log da CloudWatch, S3 e dall'API di campionamento WAF con caching su SQLite, li visualizza in una UI terminale a pannelli divisi con rilevamento dell'autenticazione e filtraggio basato su YAML, e riproduce le...