lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 15.9.1 Refer to lunar.sh and changelog for more up to date version information License CC BY-SA: https://creativecommons.org/licenses/by-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code in audit...

exploit_mitigations

Exploitation Mitigations The goal is to list exploitation mitigations added over time in various operating systems, software, libraries or hardware. It becomes handy to know if a given vulnerability is easily exploitable or not depending on exploitation mitigations in place. An example is the...

Invoke-DCSync

Invoke-DCSync Invoke-DCSync Riferimento: https://adsecurity.org/?p=1729 Riferimento: https://silentbreaksecurity.com/invoke-dcsync-because-we-all-wanted-it/ Obiettivo: recuperare gli hash delle password di tutti gli account utente su un controller di dominio utilizzando la funzione DCSync di...

Motors Car Dealer & Classified Ads <= 1.4.0 - Unauthenticated settings import/export

includes/options.php in the motors-car-dealership-classified-listings aka Motors - Car Dealer & Classified Ads plugin through 1.4.0 for WordPress allows unauthenticated options changes. id: CVE-2019-17228 info: name: Motors Car Dealer & Classified Ads = 1.4.0 - Unauthenticated settings...

WordPress OneTone theme <= 3.0.6 – Unauthenticated Options Changes

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes. id: CVE-2019-17230 info: name: WordPress OneTone theme = 3.0.6 – Unauthenticated Options Changes author: daffainfo severity: medium description: | includes/theme-functions.php in...

CVE-2025-51675

CVE-2025-51675 affects the openRISC OR1200 processor (commit 83ac6b). The root cause is an inaccurate update of program counter (PC) values when SPR (Special Purpose Register) changes , which can lead to a Denial of Service . No specific affected version range, patch version, or exploit details a...

CVE-2013-3900_Remediation_PowerShell

CVE-2013-3900RemediationPowerShell CVE-2013-3900 को ठीक करने के लिए रजिस्ट्री में परिवर्तन करने वाला स्क्रिप्ट। यदि यह आपके वातावरण में कुछ तोड़ता है तो इसे पूर्ववत करने के विकल्प के साथ आता है। चरण स्क्रिप्ट डाउनलोड करें, इसे व्यवस्थापक विशेषाधिकारों के साथ चलाएं, मशीन को रिबूट करें।...

EUVD-2026-65521

An authenticated user may initiate repository migration operations without required repository permissions, potentially causing information disclosure, unauthorized state changes, and service disruption. Fixed versions address the issue...

get-pixels-updated

Questa è una versione aggiornata di get-pixels che corregge la vulnerabilità di sicurezza CVE-2020-8175. Al momento della creazione, ogni file è identico a quelli del repository originale, eccetto package.json. get-pixels-updated Quanto segue è tratto dalla pagina GitHub di . Come detto in...

security_monkey

NOTE: Security Monkey is in maintenance mode and will be end-of-life in 2020. For AWS users, please make use of AWS Config. For GCP users, please make use of Cloud Asset Inventory. Security Monkey Security Monkey monitors your AWS and GCP accounts for policy changes and alerts on insecure...

CVE-2026-71933

Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remote attacker can trigger these vulnerabilities via crafted requests to modify configuration, restart services, save...

jvmxray

JVMXRay: Java Application Security Monitoring Duke history Documentation | Changes from Upstream | Project Blog JVMXRay monitors Java applications in real-time via bytecode injection, detecting vulnerabilities and suspicious activity without code changes. 19 modular sensors track file access,...

tools-python

Libreria Python per analizzare, validare e creare documenti SPDX Stato CI Linux, macOS e Windows: Modifiche di rottura v0.7 - v0.8 Tieni presente che la prossima versione 0.8 ha subito un'importante refactoring in preparazione della prossima release SPDX v3.0, che comporta modifiche di rottura...

CVE-2026-77029

Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo 4.1.66...

EUVD-2026-63934

Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo 4.1.66...

CVE-2026-77029 Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66

Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo 4.1.66...

CVE-2026-77029

Zoo , a Joomla extension by yootheme.com , is affected by a missing CSRF token vulnerability on front-end state changes in versions prior to 4.1.66 . The CVSS 4.0 base score is 4.6 (MEDIUM) , with high privileges and active user interaction required, resulting in low integrity impact . No exploit...

CVE-2026-66154

An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 Build 9510.1044 and earlier versions which, under a successful MitM attack and controlled network conditions, could permit unauthorized changes...

CVE-2026-66154

CVE-2026-66154 affects SonicWall GMS (Global Management System) 9.5.1 and earlier. The issue is insufficient certificate validation in a privileged communication workflow, which under a MitM with controlled network conditions could permit unauthorized changes. CVSS v3.1 base score 8.3 (HIGH) with...

CVE-2026-66154

An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 Build 9510.1044 and earlier versions which, under a successful MitM attack and controlled network conditions, could permit unauthorized changes...