14005 matches found
caldera-agent
Агент CALDERA Папка calderaagent содержит исходный код агента CALDERA или cagent — службы Windows, которая обеспечивает связь между сервером CALDERA и Rat-агентами CALDERA. Программа cagent должна быть установлена на каждом компьютере, участвующем в операции эмуляции действий противника. После...
CVE-2021-34600
Proof of Concept для CVE-2021-34600 Подробное объяснение того, как работает этот PoC, можно найти в нашем посте в блоге. Со стороны пользователя мы добавили только две новые команды: hf 14a getchallenge и hf 14a opendoor . Чтобы они заработали, нам пришлось смешать некоторый код из форка iceman с...
CVE-2026-67105
HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...
cve-2024-26229
cve-2024-26229 Версия на Nim ныне устаревшая уязвимости повышения привилегий Windows, эксплуатирующая CSC. Это предназначено только для образовательных целей; обратитесь к списку патчей, чтобы определить, уязвима ли ваша система/ваша цель...
CVE-2025-32013
CVE-2025-32013 Бюллетень безопасности и PoC для CVE-2025-32013 Как использовать 1. Начните здесь: Прочтите этот README-файл, чтобы получить обзор структуры и содержимого репозитория. 2. Внутренний бюллетень безопасности: Откройте 01SecurityAdvisory.md, чтобы увидеть подробный отчёт, описывающий...
EUVD-2026-90876
HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...
CVE-2026-67105
The HCL BigFix Service Management software is affected by an Insecure Communication vulnerability (CWE-319). An attacker with internal network access could intercept unencrypted HTTP traffic between backend services. This allows for the extraction of sensitive data and the execution of man-in-the...
CVE-2026-67105 HCL BigFix Service Management is affected by multiple security vulnerabilities.
HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...
CVE-2026-67105 HCL BigFix Service Management is affected by multiple security vulnerabilities.
HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...
Malicious code in online-header (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9cc23b20e29ff5e2382e8812e86048148646c43b844f6f73db4581e790f761 [email protected] is a dependency-confusion squat name claimed at version 99.0.0 with an inert main entry whose preinstall lifecycle script runs...
OpenSSL_DTLS_CVE_2014_0221
OpenSSLDTLSCVE20140221 OpenSSL DTLS CVE-2014-0221 Удаленный отказ в обслуживании Что такое DTLS Datagram Transport Layer Security? Безопасность транспортного уровня на основе датаграмм. Физический уровень Поддержка датаграмм на уровне TCP : TLS Поддержка датаграмм на уровне UDP : DTLS : через...
Rocky Linux 9 [CIQ] Security Update: qt5-qtbase / qt5-qtbase-common / qt5-qtbase-debuginfo / etc (crlsa-2024_4623)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20244623 advisory. qtbase: qtbase: Delay any communication until encrypted can be responded to CVE-2024-39936 Tenable has extracted the preceding description block directly from the C...
PT-2026-103900
HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...
CVE-2026-67105: Cleartext Transmission of Sensitive Information
HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...
Rocky Linux 9 [CIQ] Security Update: cups / cups-client / cups-client-debuginfo / cups-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_0312)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20260312 advisory. CUPS: Local denial-of-service via cupsd.conf update and related issues CVE-2025-61915 cups: Slow client communication leads to a possible DoS attack...
Rocky Linux 10.1 [CIQ] Security Update: cups / cups-client / cups-client-debuginfo / cups-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_0464)
The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20260464 advisory. CUPS: Local denial-of-service via cupsd.conf update and related issues CVE-2025-61915 cups: Slow client communication leads to a possible DoS attack...
CVE-2026-92941
A flaw was found in vm2. The sandbox improperly exposes the host Transport Layer Security TLS module to untrusted code running within the sandbox environment. An attacker can exploit this issue using allowed built-in utilities to modify the process-wide certificate authorities. This manipulation...
Malicious code in reactjs-risk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e58c82916c5199ef9e73a5d70f91d120312151eb5c28090d8bbf6dbf4117543 The package's preinstall lifecycle script collects host identity metadata from the installer machine — os.hostname, the output of...
RCCL Vulnerability
CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-43598| Improper input validation in the AMD ROCm Communication Collectives Library RCCL could allow a compromised peer rank or network-adjacent attacker to dereference an...