9480 matches found
Vulnerability-Disclosures
Mandiant 漏洞披露 本仓库详细列出了 Mandiant 披露的漏洞。这些漏洞通过内部研究、红队评估或在野利用被发现。可能提供也可能不提供概念验证（PoC）。 以下 许可证/许可 适用于本 Mandiant 仓库： 1. CC BY-SA 4.0 - 适用于与 CVE 相关的信息（不包括源代码，如 PoC） 2. MIT - 适用于所提供的 CVE 信息中包含的源代码 Mandiant 根据 Google 漏洞披露政策 协调和处理漏洞披露。 Mandiant CNA Mandiant 的 CVE 编号授权机构（CNA）范围：Mandiant 代码中的漏洞，以及由 Mandiant...
Aggressor-Aggregator
Aggressor 聚合器 描述 这是一个辅助脚本，用于将 Aggressor Script 和 Beacon 对象文件（BOF）仓库整合为单个 CNA 文件，供 Cobalt Strike 使用。专为红队 CTF 环境中频繁搭建/销毁操作员客户端的自动化而设计。该脚本本质上是 @am0nsec 所著 Cobalt Strike Aggressor Scripts-Ception 博客文章的一个封装。已在 Windows 10、Linux 和 macOS 上测试通过。 使用方法 1. 克隆此仓库 2. 创建一个文本文件，写入你常用的 BOF/Aggressor 仓库 URL（或单个 .c...
cobaltstrike-headless
Headless Strike Script Aggressor che trasforma il client aggressor headless in un client Cobalt Strike per lo più funzionante. Utilizzo connettiti al tuo teamserver tramite l'utility headless aggressor integrata ./agscript root@kitploit: ./agscript host port user password carica il file .cna...
MINI-H7RG-WV6V-MJFP
Bulletin has no description...
CVE-2026-71164
Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...
CVE-2026-71111
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Installer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity Manager...
CVE-2026-70814
Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Call...
SUSE CVE-2026-72585
Red Hat CNA-LR concluded that this CVE is not valid...
The vulnerability of the ath12k_ce_free_pipes() function in the drivers/net/wireless/ath/ath12k/ce.c driver for Atheros/Qualcomm wireless communication adapters in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ath12kcefreepipes function in the drivers/net/wireless/ath/ath12k/ce.c driver for Atheros/Qualcomm wireless communication adapters in the Linux operating system is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability...
GO-2024-2718 vulnerabilities
Vulnerabilities for packages: zot, goreleaser, slsa-verifier, tekton-chains-fips, falcoctl, spire-server-fips, skaffold, falcoctl-fips, ko, flux-source-controller, neuvector-sigstore-interface, ko-fips, gitsign, zarf, tkn, tkn-fips, tekton-chains, apko, vexctl, kubescape, policy-controller-fips,...
UBUNTU-CVE-2026-72745
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it's a duplicate of CVE-2026-73242...
CVE-2026-73374
A stored cross-site scripting XSS vulnerability existed in Vulnerability-Lookup in the rendertagbadges Jinja filter used to display reference tags associated with vulnerability records. Values from containers.cna.references.tags were directly interpolated into HTML badge elements and the resultin...
EUVD-2026-57219
A stored cross-site scripting XSS vulnerability existed in Vulnerability-Lookup in the rendertagbadges Jinja filter used to display reference tags associated with vulnerability records. Values from containers.cna.references.tags were directly interpolated into HTML badge elements and the resultin...
CVE-2026-73374 Stored Cross-Site Scripting (XSS) via Unescaped CNA Reference Tags in vulnerability-lookup
A stored cross-site scripting XSS vulnerability existed in Vulnerability-Lookup in the rendertagbadges Jinja filter used to display reference tags associated with vulnerability records. Values from containers.cna.references.tags were directly interpolated into HTML badge elements and the resultin...
CVE-2026-73374
CVE-2026-73374 describes a stored XSS in Vulnerability-Lookup’s render_tag_badges Jinja filter. Values from containers.cna.references[].tags[] were interpolated into HTML badge markup and wrapped with MarkupSafe.Markup, bypassing Jinja escaping. An authenticated user with vulnerability:create/mod...
CVE-2026-73374 Stored Cross-Site Scripting (XSS) via Unescaped CNA Reference Tags in vulnerability-lookup
A stored cross-site scripting XSS vulnerability existed in Vulnerability-Lookup in the rendertagbadges Jinja filter used to display reference tags associated with vulnerability records. Values from containers.cna.references.tags were directly interpolated into HTML badge elements and the resultin...
CVE-2026-73374
A stored cross-site scripting XSS vulnerability existed in Vulnerability-Lookup in the rendertagbadges Jinja filter used to display reference tags associated with vulnerability records. Values from containers.cna.references.tags were directly interpolated into HTML badge elements and the resultin...
PT-2026-71082
A stored cross-site scripting XSS vulnerability existed in Vulnerability-Lookup in the render tag badges Jinja filter used to display reference tags associated with vulnerability records. Values from containers.cna.references.tags were directly interpolated into HTML badge elements and the...
