300625 matches found
Security update for libgcrypt
This update for libgcrypt fixes the following issue: CVE-2026-41989: crafted ECDH ciphertext can lead denial of service bsc1262684. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...
Security update for dovecot22
This update for dovecot22 fixes the following issues: Security issues fixed: CVE-2026-27852: DoS by sending mail with bad header bsc1276799. CVE-2026-33604: SMTP smuggling via missing dot-stuffing after bare carriage return bsc1276802. CVE-2026-33605: managesieve-login: pre-auth crash bsc1276809...
Twenty-Three-Scanner
🛰️ ماسح Twenty-Three ماسح قوي وسريع وأنيق لاكتشاف خدمات Telnetd الضعيفة المتأثرة بـ CVE-2026-24061. مبني باستخدام مكتبة Python القياسية النقية - بدون أي تبعيات خارجية. -A32D2A?style=for-the-badge 🔗 جدول المحتويات ⚖️ الترخيص 🧩 الميزات ☣️ تفاصيل الثغرة ⚡ حالة الخدمة 🧪 إثبات المفهوم PoC 💥 الإصدارات...
Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads
The U.S. Department of Justice DoJ on Tuesday announced the takedown of a long-standing peer-to-peer P2P botnet known as Sality as part of a coordinated law enforcement operation. The effort was undertaken on August 31, 2026, by authorities from the U.S., Bulgaria, Hungary, and Romania, in...
Cybersecurity-Penetration-Testing-Lab-for-Kioptrix-1-and-Metasploitable-2
Penetration Testing Lab for Kioptrix 1 and Metasploitable 2 A f...
Mr.SIP
SIP Security, Attack and Audit Framework Mr.SIP is...
Mr.SIP
SIP Security, Attack and Audit Framework Mr.SIP is...
FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files
A flaw in FreeRDP's file parser incorrectly treats lines starting with a forward slash / as command-line options. If a victim opens a maliciously crafted .rdp file, an attacker can silently inject CLI flags to execute arbitrary code, expose local filesystems, or bypass certificate validation...
CVE-2026-25253-research
CVE-2026-25253 Proof of Concept Однокликовое RCE на OpenClaw через Cross-Site WebSocket Hijacking. ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ: Этот код предоставлен только для авторизованных исследований в области безопасности и образовательных целей. Использование этого кода против систем без явного письменного...
CVE-2024-7593_PoC_Exploit
CVE-2024-7593 Exploit Script This Bash script serves as a proof of concept PoC for exploiting the authentication bypass vulnerability in Ivanti vTM CVE-2024-7593. It allows users to create a new admin user on the target system. Table of Contents Prerequisites Usage Parameters Example Author Licen...
DASICS-CVE-2021-3156
DASICS CVE-2021-3156 Version Requirements sudo: 1.8.31 glibc: 2.31 Linux: 4.18 or 5.10.167-gee203559bc0b-dirty Usage For convenience, when compiling Linux, do not use the initramfs method. Instead, use the rootfs.img provided in this repository as the root filesystem to boot. It contains the...
CVE-2019-16278_Nostromo-1.9.6---Remote-Code-Execution
POC Repository: https://github.com/CybermonkX/CVE-2019-16278Nostromo-1.9.6---Remote-Code-Execution.git 📜 Description This repository contains a Python exploit for CVE-2019-16278 , a vulnerability in Nostromo 1.9.6 a web server. The vulnerability allows for Remote Code Execution RCE by exploiting...
CVE-2022-2992
CVE-2022-2992 تنفيذ أوامر عن بُعد لمستخدم مُصادق في GitLab عبر استيراد GitHub. ثغرة في GitLab CE/EE تؤثر على جميع الإصدارات من 11.10 حتى ما قبل 15.1.6، وجميع الإصدارات بدءًا من 15.2 حتى ما قبل 15.2.4، وجميع الإصدارات بدءًا من 15.3 حتى ما قبل 15.3.2. تسمح لمستخدم مُصادق بتنفيذ كود عن بُعد عبر نقطة...
Kalim_Backdoor
Kalim Backdoor Malware Analysis Report This Report will talk about the functionality of Kalim Backdoor Malware. Table of Contents: - What is Backdoor? - Technical Analysis. - Summary. - Tactics & Technique MITRE ATT&CK. - IOCs. - Yara Rule. What does Backdoor mean? A backdoor is a hidden...
CVE-2021-29440
CVE-2021-29440 Unsafe Twig processing of static pages leading to RCE in Grav CMS 1.7.10 Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this...
CVE-2026-6469
A flaw was found in PostgreSQL where the ALTER TABLE ALTER TYPE command incorrectly reassigns ownership of dependent statistics objects to the current user. This grants the table owner unauthorized privileges to execute DROP STATISTICS and ALTER STATISTICS while locking out the legitimate owner...
secretlint v13.0.5
Secretlint Secretlint is a Pluggable linting tool to prevent committing credentials. Features Scanner : Find credentials in a project and report these Project Friendly: Easy to set up your project and integrate CI services Pre-Commit Hook : Prevent committing credential files Pluggable : Allow...
CVE-2025-25706
CVE-2025-25706 Description Item: root@kitploit: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix Vulnerability Type: Remote Code...
CVE-2025-25705
CVE-2025-25705 Description Item: root@kitploit: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix Vulnerability Type: Remote Code...
