microcode_ctl security update

4:20260812-1.0.3 - disable late update for 06-ad-01 - add support for UEK7/UEK8 and ueknext kernels - don't bother calling dracut if virtualized Orabug: 35710077 - ensure UEK also rebuilds initramfs Orabug: 34280058 - add support for UEK7 kernels - enable early update for 06-4f-01 - remove no...

CVE-2018-13379

IOC's for CObalt Strike/CVE-2018-13379 All credit goes to Awake/Arista/https://www.linkedin.com/in/kevin-romano-48071a42/ IOCs copied from DD: https://awakesecurity.com/blog/exploiting-cve-2018-13379-a-case-study-of-threat-actors-exploiting-years-old-cves/...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2024-27316

CVE-2024-27316 I decided to call this vulnerability specifically "CVE-2024-27316" since I have tested it against this vulnerability. The underlying flaw effects other CVEs so I thought I'd mention those with the hope that others could test and modify this PoC : This PoC currently only works again...

Oracle Linux 10 : ELSA-2026-66432-0: / osbuild-composer (ELSA-2026-664320)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-664320 advisory. 176-1.0.3 - Fix CVE-2026-41178, CVE-2026-55677, CVE-2026-25681, CVE-2026-27136, CVE-2026-42502, CVE-2026-39821 Tenable has extracted the preceding...

CVE-2026-13181-CVE-2026-13182-CVE-2026-13183-CVE-2026-13184

CVE-2026-13181, CVE-2026-13182, CVE-2026-13183, CVE-2026-13184 Donar...

CVE-2026-17156 IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization...

CLSA-2026-1789407656 TuxCare security update for log4j:log4j (2 CVEs)

TuxCare rebuilt log4j:log4j to address 2 CVEs. Fixed in 1.2.13-tuxcare.1...

CLSA-2026-1789407479 TuxCare security update for log4j:log4j (2 CVEs)

TuxCare rebuilt log4j:log4j to address 2 CVEs. Fixed in 1.2.12-tuxcare.1...

APT-Backpack

APT-Backpack Most common used CVE's by APT, legitimate RAT and other tools used by adversary CVE's CVE-2019-11510 Pulse Connect Secure 8.2 8.3 9.0 Unauth file read CVE-2019-19781 Citrix ADC & Gateway Directory Traversal CVE-2020-5902 F5 Big IP RCE CVE-2021-1497 Cisco HyperFlex HX Unauth Command...

CLSA-2026-1789404783 TuxCare security update for dompurify (2 CVEs)

TuxCare rebuilt dompurify to address 2 CVEs. Fixed in 3.4.8-tuxcare.4...

CLSA-2026-1789400953 TuxCare security update for dompurify (4 CVEs)

TuxCare rebuilt dompurify to address 4 CVEs. Fixed in 3.2.7-tuxcare.3...

CLSA-2026-1789384773 TuxCare security update for zendframework/zend-view (1 CVE)

TuxCare rebuilt zendframework/zend-view to address 1 CVE. Fixed in 2.1.6-p1+tuxcare...

CLSA-2026-1789377909 TuxCare security update for send (2 CVEs)

TuxCare rebuilt send to address 2 CVEs. Fixed in 0.0.4-tuxcare.1...

CLSA-2026-1789371790 TuxCare security update for org.yaml:snakeyaml (1 CVE)

TuxCare rebuilt org.yaml:snakeyaml to address 1 CVE. Fixed in 1.7-tuxcare.1...

2009

2009 Exploits del kernel de Linux - CVE-2009-1185 + CVE-2009-1337 + CVE-2009-2692 + CVE-2009-2698 + CVE-2009-3547...

ALSA-2026:67148 Important: osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes:...

vendor-android-cves

vendor-android-cves Colecciones de nuestros POCs/scripts de fuzzing/harness para CVE de Android de proveedores, incluidos los de BlackHat ASIA 2022: https://www.blackhat.com/asia-22/briefings/schedule/the-hidden-rce-surfaces-that-control-the-droids-26083 Actualización: He recibido noticias sobre ...

vulnerability-poc

Vulnerability PoC Repository Curated Proof-of-Concept PoC code, test labs, and prevention rules for high-severity CVEs — built for authorized security testing, penetration testing, CTF challenges, and security research. Maintained by the SeekersLab team. Every entry ships with detection-only PoC...

CVE-2022-RCE

CVE-2022-XXXX Reverse junk data injection CVE subscription tools exploitation tutorials Exploit POC RCE LOG4j deserialization JNDI Payload CVE-2022-20550 CVE-2022-20551 CVE-2022-20552 CVE-2022-20553 CVE-2022-20554 CVE-2022-20555 CVE-2022-20556 CVE-2022-20557 CVE-2022-20558 CVE-2022-20559...