thrunt-god

Dal segnale, allo sciame. Nessun dio. Solo Thrunt. Sistema di comandi per threat hunting per IDE agentici. Claude Code · OpenCode · Gemini · Codex · Copilot · Cursor · Windsurf /thrunt:autonomous | un comando, caccia completa Installa · Fasi · Comandi · Flussi · Artefatti Installazione...

ruby:3.3 security, bug fix, and enhancement update

An update is available for rubygem-mysql2, module.rubygem-mysql2, module.ruby, ruby, rubygem-abrt, rubygem-pg, module.rubygem-pg, module.rubygem-abrt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RLSA-2026:50728 Important: ruby:3.3 security, bug fix, and enhancement update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader CVE-2026-27820 net-imap: Net::IMAP: Arbitrary IMAP command...

CVE-2026-35869

CVE-2026-35869 is a command injection vulnerability in the bs_SetLimitCli_info function of the libshare.so library on the LB-link Router AC450M V4.0.0 . The root cause is insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution contex...

EUVD-2026-67101

An issue was discovered in luci-app-https-dns-proxy on OpenWrt PR 15 2026-01-17. The setInitAction function in /usr/libexec/rpcd/luci.https-dns-proxy allows authenticated users to execute arbitrary shell commands via shell metacharacters in the name parameter...

PT-2026-82487

Name of the Vulnerable Software and Affected Versions Zbtlink WE1326 firmware 19.1101 Zbtlink WE357 firmware 19.1101 Zbtlink WE5926 firmware 19.1101 Zbtlink WE5926-WD firmware 19.1101 Zbtlink WE826-Q firmware 19.1101 Zbtlink WE826-T2 firmware 19.1101 Zbtlink WE826-WD firmware 19.1101 Zbtlink WG10...

CVE-2026-35868

A Command Injection vulnerability in the bs_SetLimitCli_info function of the libshare.so library affects the LB-link Router AC2100_AZ3 V1.0.4 . The root cause is insufficient validation and sanitization of user-supplied input before it reaches a system-level command execution context. An attacker...

CVE-2026-26899

luci-app-https-dns-proxy on OpenWrt contains a command injection vulnerability in the setInitAction function (/usr/libexec/rpcd/luci.https-dns-proxy). Authenticated users can execute arbitrary shell commands by injecting shell metacharacters through the name parameter. The flaw was addressed in P...

PT-2026-82793

Xiiaozet LK100Wt contains an authentication weakness within an administrative service that may allow an attacker to bypass intended access controls and obtain command execution capabilities. Successful exploitation could allow unauthorized interaction with privileged functionality and may lead to...

VulnCheck KEV: CVE-2026-74232

Zbtlink L3V28 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007, Zbtlink ZBT-ZBT7621 firmware 1.0.0.3.001, MoreQuick MQAC-7620, MQAC-7620A, MQAP-7620, MQAP-7620A, and MQAP-7628 firmware 1.0.0.2.000, AP522 firmware 1.0.0.2.014, AP7628 and HC5661A firmwa...

VulnCheck KEV: CVE-2026-74233

Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE2426-C firmware 19.1112, Zbtlink WE5926-ECQP firmware 20.0516, Zbtlink WF3526-P firmware 19.051, CTN720-W1, LF-1541, and MT7620N firmware 19.1101, and WRC1 firmware 20.0622 contain...

PT-2026-82770

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0 through 4.14.6, multiple active response scripts pass attacker-influenced alert fields to privileged system commands without validating their format, allowing...

CVE-2026-37004

BerriAI litellm versions up to and including 1.82.4 are affected by a Server-Side Template Injection (SSTI) vulnerability. The root cause is the use of an unsandboxed jinja2.Environment in the /prompts/test endpoint, which allows unauthenticated remote attackers to execute arbitrary OS commands b...

PT-2026-82798

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device...

PT-2026-82486

Zbtlink L3 V2 8 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007, Zbtlink ZBT-ZBT7621 firmware 1.0.0.3.001, MoreQuick MQAC-7620, MQAC-7620A, MQAP-7620, MQAP-7620A, and MQAP-7628 firmware 1.0.0.2.000, AP522 firmware 1.0.0.2.014, AP7628 and HC5661A...

PT-2026-82754

Name of the Vulnerable Software and Affected Versions Redis versions prior to 8.2.9 Redis versions prior to 8.4.6 Redis versions prior to 8.6.6 Redis versions prior to 8.8.2 Redis versions prior to 8.10.1 Description A use-after-free issue exists in the tlsProcessPendingData function, which manag...

preflight

Preflight.sh Preflight.sh è uno strumento da riga di comando che analizza il tuo codebase per verificare la prontezza al lancio. Identifica configurazioni mancanti, problemi di integrazione, problematiche di sicurezza, lacune nei metadati SEO e altri errori comuni prima che tu vada in produzione...

CVE-2026-3227-TP-Link-authenticated-RCE

CVE-2026-3227: Iniezione di Comandi OS nei Router TP-Link Per maggiori informazioni, vedere https://vulners.com/cve/CVE-2026-3227 Una vulnerabilità persistente e autenticata di iniezione di comandi OS nel firmware dei router TP-Link che può causare il bricking del dispositivo o una potenziale...

samsung-android-lpe

Parte 1: Esecuzione arbitraria di comandi AT CVE-2026-20980 I comandi dell'Application Processor AP sono gestiti da atdistributor dopo aver commutato la modalità di connessione su un dispositivo sbloccato utilizzando. root@kitploit: AT+SWATD=0 AT+ACTIVATE=0,0,0 AT+SWATD=1 atdistributor verifica i...

CVE-2025-55182-POC

CVE-2025-55182 Next.js RCE Scanner Ferramenta de varredura e exploração da CVE-2025-55182, voltada para a vulnerabilidade de execução remota de código em aplicações Next.js. Suporta detecção em lote, execução de comandos, injeção de memory shell do Godzilla e funcionalidade de reverse shell. ⚠️...