gdog

Gdog A stealthy Python based Windows backdoor that uses Gmail as a command and control server This project was inspired by the gcathttps://github.com/byt3bl33d3r/gcat from byt3bl33d3r. Requirements Python 2.x PyCrypto module WMI module Enum34 module Netifaces module Features Encrypted...

keycloak

CVE-2026-9794 — Keycloak SAML ECP Client Enumeration Security research leading to CVE-2026-9794 CVSS 5.3, Medium. Summary Unauthenticated client ID enumeration via SAML ECP faultstring oracle in Keycloak 2.0 through 26.6.1. Fixed in 26.6.3. Findings VULN-001: Client ID enumeration CVE-2026-9794 ✅...

CVE-2026-45877

A flaw was found in the Linux kernel's Intel Integrated Sensor Hub ISH HID driver. During a warm reset, a NULL-pointer dereference can occur if clients are still being enumerated. This can lead to a kernel panic, causing the system to become unstable or unavailable, resulting in a Denial of Servi...

CVE-2025-34222 Vasion Print (formerly PrinterLogic) Unauthenticated Admin APIs Used to Modify SSL Certificates

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 VA/SaaS deployments expose four admin routes – /admin/hp/certupload, /admin/hp/certdelete, /admin/certs/ca, and /admin/certs/serviceclients/scid – without any...

CVE-2025-34222

Vasion Print (formerly PrinterLogic) Vulnerability CVE-2025-34222 affects Virtual Appliance Host before 22.0.1049 and Application before 20.0.2786 (VA/SaaS). The issue stems from four unauthenticated admin routes exposed in the printercloud/pi Docker container (routes: /admin/hp/cert_upload, /adm...

Mozilla Image stealing via canvas and HTTP redirect

Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are no...