Security update for rmt-server

This update for rmt-server fixes the following issue: Update to version 3.1 bsc1274715. CVE-2026-42256: net-imap: hostile server can perform a DoS on client authenticating a connection with SCRAM-SHA1 or SCRAM-SHA2 bsc1265369. Changes for rmt-server: Version 3.1: Remove all errors and warnings du...

Security update for snpguest

This update for snpguest fixes the following issues Update openssl to v0.10.81 CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate bsc1270541. CVE-2026-41678: openssl: incorrect bounds assertion in aes key wrap in...

polypyus

Polypyus Firmware Historian Polypyus learns to locate functions in raw binaries by extracting known functions from similar binaries. Thus, it is a firmware historian. Polypyus works without disassembling these binaries, which is an advantage for binaries that are complex to disassemble and where...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort pat...

SUSE-SU-2026:3790-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. - CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in abort...

santa

Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...

python3.12 security update

An update is available for python3.12. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

QVD-2026-57410

QVD-2026-57410 PoC Toolkit DeepSeek Harness HTTP Host Heade...

Acelle-Mail-4.2.0-p97-Unauthenticated-SSTI-to-RCE-Chain

Acelle Mail 4.2.0-p97 — Unauthenticated SSTI to RCE Chain V...

patch-CVE-2026-04321

Patch: CVE-2026-04321 Dettagli della vulnerabilità CVE : CVE-2026-04321 Prodotto : Zyxel firewall Descrizione : OS command injection Severità : Critical Stato della patch: DEPLOYED...

E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands

Cybersecurity researchers are calling attention to a new campaign that employs FTP banners as dead drop resolvers DDRs to deliver two previously unreported remote access trojans RATs tracked as E4del and PINHOLE. While threat actors are known to abuse legitimate services to point to additional...

SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices

SNMPocalypse-Cisco-Fehler-lässt-Hacker-Geräte-zum-Absturz-bringen-oder-steuern CVE-2023-20352 ist ein kritischer Stack-Überlauf-Fehler in der SNMP-Engine von Cisco IOS/IOS XE. Mit nur präparierten SNMP-Paketen können entfernte Angreifer Systeme zum Absturz bringen oder die Root-Kontrolle...

From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps

Dal-Foothold-al-Domain-Admin-Sfruttare-CVE-2025-54918-nel-DevOps-del-Mondo-Reale Sfruttamento e mitigazione simulati di CVE-2025-54918 vulnerabilità NTLM di Windows. Include script di rilevamento, applicazione di patch con Ansible e hardening CI/CD. Dimostra l'escalation dei privilegi da accesso ...

Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover

क्लस्टर-कैओस-शोषण-CVE-2025-59359-द्वारा-कुबेरनेटीस-अधिग्रहण CVE-2025-59359 का एक व्यावहारिक फोरेंसिक वॉकथ्रू, जो Chaos-Mesh में एक गंभीर OS कमांड इंजेक्शन दोष है। जानें कि कैसे हमलावर GraphQL म्यूटेशन के माध्यम से कुबेरनेटीस क्लस्टर को हाईजैक करते हैं, और ELK का उपयोग करके उल्लंघन का पता कैसे...

CVE-2021-3456

CVE-2021-3456 Una catena pratica che inizia con un innocuo file PDF e termina con una reverse shell su un'istanza AWS EC2 L'Inizio: Creare un Payload PDF Tutto inizia sul fronte dell'attacco. Utilizzando l'oggetto WScript integrato di PowerShell, incorporiamo uno script all'interno di un PDF che...

Reset-inetpub

Reset inetpub Dieses Skript stellt den Ordner %SYSTEMDRIVE%\inetpub und seine standardmäßigen Sicherheitsberechtigungen wieder her, die als Reaktion auf CVE-2025-21204 nach dem Windows-Update KB5055523 erforderlich sind. Es richtet sich an Benutzer, die diesen Ordner möglicherweise gelöscht haben...

log4j-vulnerable-app-cve-2021-44228-terraform

log4j-vulnerable-app-cve-2021-44228-terraform Um Terraform para implantar aplicativo vulnerável e um JNDIExploit para trabalhar com CVE-2021-44228 Sobre a Stack Este terraform cria duas instâncias em uma VPC na AWS Cloud. Você só precisa exportar suas AWSACCESSKEYID e AWSSECRETACCESSKEY Uma...

ProxyLogon-CVE-2021-26855

ProxyLogon-CVE-2021-26855 Exploit RCE para a vulnerabilidade ProxyLogon no Microsoft Exchange Funciona com Python 3.9 Uso: python proxylogonrce.py target email command Exemplo: python proxylogonrce.py 192.168.227.137 [email protected] whoami Todos os créditos vão para a DEVCORE, baseado em...

MIPS-CVE-2014-9222

Disclaimer I tutorial sono solo a scopo informativo ed educativo. Credo che l'hacking etico, la sicurezza delle informazioni e la cyber security dovrebbero essere argomenti familiari a chiunque utilizzi informazioni digitali e computer. Credo che sia impossibile difendersi dagli hacker senza sape...

CVE-2025-34322_CVE-2025-34323_Nagios_Log_Server

CVE-2025-34322 e CVE-2025-34323 Nagios Log Server Exploits de Prova de Conceito para CVE-2025-34322 e CVE-2025-34323 no Nagios Log Server, juntamente com um script combinado para obter um shell como root. CVE-2025-34322 Após a autenticação, substitua seu ID de sessão nestes dois comandos curl. O...