bucket-stream

🚨 Bucket Stream is no longer maintained. If you need support or consultation for your red teaming endeavours, drop me an e-mail [email protected] 🚨 Bucket Stream Find interesting Amazon S3 Buckets by watching certificate transparency logs. This tool simply listens to various certificate...

thedorkbox

thedorkbox TheDorkbox Colección completa de Google Dorks y técnicas OSINT para encontrar datos confidenciales Bienvenido a thedorkbox 👋 Esta es una herramienta OSINT que consiste en varios Google dorks incrustados en una plantilla HTML para que usuarios no técnicos comprendan la importancia de la...

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

The vulnerability of the GWP-ASan component in the Google Chrome web browser allows a hacker to gain access to confidential data.

The vulnerability of the GWP-ASan component in the Google Chrome web browser is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a malicious file...

The vulnerability of the Dovecot mail server, related to deficiencies in pathname restriction, allows attackers to gain access to confidential data.

The vulnerability of the Dovecot mail server is related to deficiencies in pathname restriction. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the udhcp_getoption() function in the networking/udhcp/common.c component of the BusyBox command-line utility tools allows a attacker to gain access to confidential data.

The vulnerability of the udhcpgetoption function in the networking/udhcp/common.c component of the BusyBox command-line utility tools on UNIX systems is related to reading data from a buffer beyond its allowable limits. Exploiting this vulnerability could allow an attacker to gain access to...

Linux Distros Unpatched Vulnerability : CVE-2026-79018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in FoldableAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page...

Astra Linux – Vulnerability in usbutils

The vulnerability of the readlinkrecursive function in the USBUtils utility is related to buffer overflow on the stack. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability in the Firefox web browser and Thunderbird email client, related to data type conversion errors, allows attackers to access confidential data.

The vulnerability in the Firefox web browser and Thunderbird email client is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...

The vulnerability of the vmw_vsock/virtio_transport_common.c component in the Linux operating system allows a hacker to gain access to confidential data.

The vulnerability of the vmwvsock/virtiotransportcommon.c component in the Linux operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules allows attackers to access confidential data.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

Cross-site Request Forgery (CSRF)

Overview org.springframework.graphql:spring-graphql is a GraphQL Support for Spring Applications Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the GraphiQL process. An attacker can access confidential information by enticing a victim with an active sessio...

The vulnerability of the mctp-i2c.c component in the Linux operating system’s kernel allows a hacker to gain access to confidential data.

The vulnerability of the mctp-i2c.c component in the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to access confidential data...

CVE-2026-19135

A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...

Vulnerability of functions EllipticCurvePublicNumbers.public_key(), EllipticCurvePublicNumbers.public_key(), load_der_public_key(), and load_pem_public_key() in the Python-cryptography cryptographic library, which allows a perpetrator to gain access to confidential data

The vulnerabilities of the functions EllipticCurvePublicNumbers.publickey, EllipticCurvePublicNumbers.publickey, loadderpublickey, and loadpempublickey in the Python-cryptography cryptographic library are related to insufficient validation of data authenticity. Exploiting these vulnerabilities...

Vulnerability of the DOM component: Security features in Firefox web browser and Thunderbird email client, which allow attackers to access confidential data and compromise its integrity

Vulnerability of the DOM component: The security of Firefox web browser and Thunderbird email client is related to the lack of data security mechanisms. Exploiting this vulnerability allows a malicious actor to access confidential data and compromise its integrity...

Vulnerability of the Networking component: The JAR web browser Firefox and the email client Thunderbird, which allow attackers to access and compromise confidential data.

Vulnerability of the Networking component: The JAR web browser Firefox and the email client Thunderbird are vulnerable due to a lack of source verification mechanism. Exploiting this vulnerability allows an attacker to gain access to confidential data and compromise its integrity...

The vulnerability in the Firefox web browser and Thunderbird email client relates to the issue of operations going beyond the buffer in memory, allowing an attacker to access confidential data.

The vulnerability in the Firefox web browser and Thunderbird email client relates to the escape of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the Protection component in the Firefox web browser and the Thunderbird email client allows attackers to access confidential data.

The vulnerability of the Protection component in the Firefox web browser and the Thunderbird email client relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

The vulnerability of the Graphics component in the Firefox web browser, allowing a hacker to access confidential data

The vulnerability of the Graphics component in the Firefox web browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data...