IIS-Backdoor

IIS-Backdoor En este artículo explicaré cómo diseñé un rootkit para el servidor web Microsoft Internet Information Services IIS. La pregunta es: ¿por qué un backdoor en un servidor web? La primera respuesta obvia pero inútil: porque podemos. Bien, demos una respuesta más inteligente. El propósito...

Sicurezza-Informatica-Presentazione

このリポジトリには何が含まれていますか？ このリポジトリには、UNIPRのセキュリティ情報学コース向けのXZ Utilsのセキュリティ脆弱性に関する簡単な調査とプレゼンテーションが含まれています。 CVE-2024-3094 Ubuntuによる脆弱性の説明:...

CVE-2024-3094

CVE-2024-3094 在 xz 的上游 tarball 中发现恶意代码，自 5.6.0 版本开始。通过一系列复杂的混淆手段，liblzma 构建过程从源代码中一个伪装的测试文件中提取出预构建的目标文件，并利用该文件修改 liblzma 代码中的特定函数。 这导致 liblzma 库被修改，任何与该库链接的软件均可利用此库，拦截并修改与该库的数据交互。本仓库提供两个快速脚本，用于检查您的 Kubernetes Pod 和 Docker 容器是否受到易受攻击的最新版本 liblzma5（5.6.0 或 5.6.1）的影响。...

xz-utils-vuln-checker

root@kitploit: / / / / | |/// / / / / / / / / / / / / / / //// // / / / / / / / //|| // ,/ / // // // Hare Krishna Rai 0xblurr3d / / / / / / | | / / / / / / / / / \ / / / \ / \ / / / /// / \ / / | |/ / / // / / / / / / //// / / / / // // / / , / / / / |/ ,/ // // // / // // / / //|| / //...

CVE-2024-3094

CVE-2024-3094 在 xz 的上游 tarball 中发现了恶意代码，从版本 5.6.0 开始。通过一系列复杂的混淆，liblzma 的构建过程从一个伪装成测试文件（存在于源代码中）的文件中提取出一个预构建对象文件，然后利用它修改 liblzma 代码中的特定函数。 这导致了一个被修改的 liblzma 库，任何链接到该库的软件都可以使用它，拦截并修改与该库的数据交互。本仓库包含两个快速脚本，用于检查你的 Kubernetes Pods 和 Docker 容器是否受该存在漏洞的最新版本 liblzma5（5.6.0 或 5.6.1）影响。...

-CVE-2024-3094-Vulnerability-Checker-Fixer-Public

表达支持 如果您觉得这个脚本有用，并且它帮助您保护了系统免受 CVE-2024-3094 的影响，请考虑给它点一个星 ⭐ 。给这个仓库点星不仅是对我们的支持，还能帮助更多人发现并受益于我们为提高网络安全所做的集体努力。 要为仓库点星，只需点击本页顶部的“Star”按钮。非常感谢您的支持！ 感谢您帮助让数字世界变得更加安全！ CVE-2024-3094 是什么 CVE-2024-3094 是一个在 xz 工具的上游 tarball 中发现的关键安全漏洞，从 5.6.0 版本开始存在。该漏洞涉及恶意代码，通过复杂的混淆手段操纵 liblzma 的构建过程。 XZ Utils “几乎存在于每个...

CVE-2026-85525

A flaw was found in Snowflake drivers, including Python, Go, JDBC, and Node.js. This flaw involves improper Online Certificate Status Protocol OCSP response validation, which allows a revoked Transport Layer Security TLS certificate to be accepted as valid. A man-in-the-middle attacker, possessin...

EUVD-2025-210763

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications...

CVE-2026-76403

In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol HTTP Event Collector in Splunk Enterprise. The vulnerability...

CVE-2026-21079

Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data...

CVE-2026-66410

Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be retrieved and/or altered...

CVE-2026-66410

CVE-2026-66410 affects the Android and iOS ECOVACS PRO App, with improper server certificate validation in the smartphone app. The vulnerability can allow a man-in-the-middle to retrieve and/or alter communications between the app and servers. Connected documents confirm the issue and reference r...

EUVD-2026-55104

Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data...

CVE-2026-21079

Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data...

CVE-2026-21079

CVE-2026-21079 concerns Samsung Smart Switch prior to version 3.7.72.6, where missing encryption of sensitive data allows adjacent attackers to intercept transmitted data. The affected component is the Smart Switch data transmission flow; the root cause is lack of encryption for sensitive data in...

CVE-2025-9291 Improper Certificate Validation in TP-Link Omada Cloud Communications

A certification validation weakness exists in communication between affected Omada devices and cloud controllers. Certificate identity verification does not adequately validate that a presented certificate corresponds to the expected cloud controller hostname, which may allow certificate validati...

EUVD-2026-46279

HCL IEM was affected with X-Content-Type-Options Header Missing. It may enable attackers to perform SSL stripping or man-in-the-middle attacks and intercept sensitive data...

CVE-2026-15925 Improper TLS Hostname Verification in Snowflake Connector for Python

Improper TLS hostname verification in Snowflake Connector for Python versions prior to 4.7.1 and 3.18.1 may have allowed a network-positioned attacker to bypass certificate hostname validation on HTTPS connections made by the connector. An attacker with on-path network access could exploit this b...

PayRange Android app version 7.0.7 contains multiple vulnerabilities

Overview PayRange is a mobile payment app that allows users to pay for vending machines, laundromats, and other unattended machines using a smartphone with Bluetooth. Two vulnerabilities were discovered in version 7.0.7 of the PayRange app that is available in the Google Play store. Description A...

nodejs: Node.js: Certification validation bypass in TLS host verification

A flaw was found in Node.js. An attacker can exploit a vulnerability in the Transport Layer Security TLS host verification process to bypass certification validation. This bypass could allow an attacker to intercept or alter communications, potentially leading to information disclosure or integri...