370640 matches found
CVE-2023-51444
This README helps you getting started with GeoServer development. It will guide you through the process of checking out the source code, compiling it, and running. GeoServer Development requires Java 8, Maven, and git. Due to subtle changes in Java class libraries we require development on Java 8...
CVE-2025-57489
CVE-2025-57489 Description From the developer's blog: When the lock in SuperDuper is unlocked to allow execution to occur without having to enter an administrator password, a 3rd party program could make use of our authorization to run something other than a backup with administrator privileges...
CVE-2025-55182-Lab
CVE-2025-55182 Lab A hands-on lab to exploit CVE-2025-55182 React2Shell - Remote Code Execution in React Server Components. ⚠️ Disclaimer Educational purposes only. Only test on systems you own. Quick Start Clone and start git clone https://github.com/dhananjayakumarn/CVE-2025-55182-Lab.git cd...
roundcube-cve-2025-49113-lab
"DISCLAIMER: Educational Use Only" Roundcube Webmail RCE – CVE-2025-49113 Lab This repository documents my step-by-step exploitation of Roundcube Webmail CVE-2025-49113 in a controlled lab to obtain the secret stored in /secret.txt. ⚠️ Disclaimer All work was performed against a lab / training...
CVE-2025-52691
CVE-2025-52691 SmarterMail Unauthenticated Arbitrary File Upload RCE Overview Critical unauthenticated arbitrary file upload allowing remote code execution. Field| Value ---|--- Product| SmarterMail Affected| Build 9406 and earlier CVSS| 10.0 Critical Type| Arbitrary File Upload Vector| HTTP...
vthunting
Chasse VT VThunting est désormais présenté sur VirusTotal. Virus Total Hunting est un petit outil basé sur l'API VT version 3 pour générer un rapport quotidien, hebdomadaire ou mensuel sur la chasse aux malwares. Le rapport peut être envoyé par e-mail, sur un canal Slack ou Telegram. L'outil peut...
ike-scan
ike-scan Découvrir et identifier les hôtes IKE serveurs VPN IPsec Table des matières Construction et installation Aperçu Utilisation Détails d'implémentation Saisie d'hôtes et besoins en mémoire Limitation du débit Génération de cookies et identification de l'hôte distant Détails des paquets IKE...
Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.307 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free i...
EUVD-2026-94104
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection...
DEBIAN-CVE-2026-106583
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection...
AZL-106685 CVE-2026-106583 affecting package openssh 9.8p1-10
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection...
CVE-2026-106583
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection...
fuzzowski
Fuzzowski █ █ ████████ ██████████ ██ ████ ██ ██ ████ ██ ████ ████ █ ████████████ █ █ ██████████ █ Fuzzowski Network Fuzzer █ █ █ █ 🄯 Fuzzers, inc. ██ ██ by Mario Rivas L'idée est d'être le Fuzzer de protocole réseau que nous voulons utiliser. Le but de cet outil est d'assister tout au long du...
cve-2024-52005-poc
CVE-2024-52005: ANSI Escape Sequence Injection in Git Overview This repository contains a Proof-of-Concept PoC demonstrating CVE-2024-52005, a vulnerability in Git that allows ANSI escape sequence injection through the sideband channel during Git operations. CVE-2024-52005 is a High severity CVSS...
shannon v3.4.0
!NOTE Cyber verification for Anthropic and OpenAI models: complete your provider's cyber verification program to prevent model failures and refusals during cyber workloads. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths,...
CVE-2026-93674 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
EUVD-2026-94119
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
CVE-2026-93674 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
CVE-2026-93674
Langflow OSS versions 1.0.0 through 1.12.2 are vulnerable to a critical remote code execution (RCE) flaw (CVE-2026-93674 ). The root cause is the improper neutralization of special elements used in an OS command (CWE-94), which allows a remote attacker to execute arbitrary code. This vulnerabilit...