Lucene search
+L

5358 matches found

Richard Bejtlich's blog
Richard Bejtlich's blog
added 2025/11/04 12:49 a.m.10 views

Creating a Linux Application Using VSCodium, Cline, OpenRouter, and Claude

In March I created a Windows Application Using Visual Studio Code, Cline, OpenRouter, and Claude. This was a program that created square screen captures. The user doesn't need to manually ensure the dimensions are a square. The program makes the window grow and shrink while keeping the length equ...

7.1AI score
SaveExploits0
The Hacker News
The Hacker News
added 2025/11/03 10:42 a.m.15 views

New HttpTroy Backdoor Poses as VPN Invoice in Targeted Cyberattack on South Korea

The North Korea-linked threat actor known as Kimsuky has distributed a previously undocumented backdoor codenamed HttpTroy as part of a likely spear-phishing attack targeting a single victim in South Korea. Gen Digital, which disclosed details of the activity, did not reveal any details on when t...

7.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/11/03 12:0 a.m.6 views

PT-2025-44887

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 26.1 iOS versions prior to 26.1 iPadOS versions prior to 26.1 visionOS versions prior to 26.1 Description A privacy issue existed where a malicious application could potentially capture screenshots of sensitive...

5.5CVSS5.8AI score0.00242EPSS
SaveExploits0References6
AstraLinux
AstraLinux
added 2025/10/31 4:38 p.m.5 views

Astra Linux - уязвимость в wireshark

Memory handling issue in editcap could cause denial of service via crafted capture file...

5.5CVSS6.9AI score0.00416EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2025/10/31 4:38 p.m.4 views

Astra Linux - уязвимость в wireshark

GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file...

6.5CVSS7.2AI score0.00857EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2025/10/31 4:38 p.m.14 views

Astra Linux - уязвимость в wireshark

Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injection or crafted capture file...

6.3CVSS7.2AI score0.0182EPSS
SaveExploits1References1
AstraLinux
AstraLinux
added 2025/10/31 4:38 p.m.5 views

Astra Linux - уязвимость в wireshark

Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted capture file...

6.3CVSS7.3AI score0.00569EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2025/10/31 4:38 p.m.7 views

Astra Linux - уязвимость в wireshark

FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file...

7.8CVSS7.2AI score0.00268EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/10/30 2:13 p.m.9 views

CVE-2025-64149

A cross-site request forgery CSRF vulnerability in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

5.4CVSS6.6AI score0.00192EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/10/30 1:1 a.m.10 views

drm/i915: Fix request ref counting during error capture & debugfs dump

...

5.5CVSS7AI score0.00226EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/10/29 1:29 p.m.19 views

CVE-2025-64149

A cross-site request forgery CSRF vulnerability in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

0.00192EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/29 12:0 a.m.9 views

Jenkins Publish to Bitbucket Plugin 安全漏洞

Jenkins Publish to Bitbucket Plugin is an automated publishing plugin for Jenkins open source. A security vulnerability exists in Jenkins Publish to Bitbucket Plugin version 0.4 and earlier, which stems from vulnerability to a cross-site request forgery attack that could lead to the capture of...

5.4CVSS6.3AI score0.00192EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/29 12:0 a.m.8 views

PT-2025-44298

Name of the Vulnerable Software and Affected Versions Jenkins Publish to Bitbucket Plugin versions 0.4 and earlier Description A cross-site request forgery CSRF flaw exists in the Jenkins Publish to Bitbucket Plugin. This issue allows attackers to connect to a URL specified by the attacker,...

5.4CVSS6.4AI score0.00192EPSS
SaveExploits0References6
Packet Storm News
Packet Storm News
added 2025/10/28 12:0 a.m.12 views

Covert Surveillance in Smart Devices: A SCOUR Framework Analysis of Youth Privacy Implications

This paper investigates how smart devices covertly capture private conversations and discusses in more in-depth the implications of this for youth privacy. Using a structured review guided by the PRISMA methodology, the analysis focuses on privacy concerns, data capture methods, data storage and...

7AI score
SaveExploits0
GithubExploit
GithubExploit
added 2025/10/27 10:8 a.m.328 views

Exploit for CVE-2025-59287

wsus-decoy Defensive proof of concept decoy for CVE-2025-5928...

9.8CVSS9.6AI score0.99938EPSS
SaveExploits24
GithubExploit
GithubExploit
added 2025/10/25 1:25 p.m.141 views

ctf-competition-2025

SINF25 CTF Competition Writeups This repository cont...

6.9AI score
SaveExploits0
Fedora
Fedora
added 2025/10/23 1:57 a.m.14 views

[SECURITY] Fedora 41 Update: wireshark-4.4.10-1.fc41

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...

5.5CVSS6.8AI score0.00112EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/10/15 9:54 a.m.13 views

CVE-2011-20002

A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family incl. SIPLUS variants All versions V2.0.2, SIMATIC S7-1200 CPU V2 family incl. SIPLUS variants All versions V2.0.2. Affected controllers are vulnerable to capture-replay in the communication with the engineering software. This...

8.3CVSS7.4AI score0.00297EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/14 10:15 a.m.12 views

CVE-2011-20002

A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family incl. SIPLUS variants All versions V2.0.2, SIMATIC S7-1200 CPU V2 family incl. SIPLUS variants All versions V2.0.2. Affected controllers are vulnerable to capture-replay in the communication with the engineering software. This...

8.3CVSS0.00297EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/14 9:14 a.m.15 views

CVE-2011-20002

Affected software/hardware: Siemens SIMATIC S7-1200 CPU V1/V2 families (incl. SIPLUS variants). Vulnerability: Capture-replay of engineering software communication that can allow an on-path attacker to replay legitimate commands to the controller. Root cause (from sources): Insecure handling of e...

8.3CVSS7.1AI score0.00297EPSS
SaveExploits0References1
Rows per page
Query Builder