cybervault-cve-intel

🛡️ CyberVault Zero-Day & Critical CVE Threat Intelligence Feed...

PT-2026-108020

A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free spa...

CVE-2024-6387-nmap

OpenSSH Vulnerability Checker Nmap Script Description The openssh-vuln-checker.nse script checks if a server is running a vulnerable version of OpenSSHCVE-2024-6387. It connects to the SSH port, retrieves the SSH banner, and compares it against a list of known vulnerable versions. Vulnerable...

webenum-ng

webenum-ng L'equivalent web de enum4linux-ng : un seul orch...

Nuclei_Templates

🎯 Nuclei Templates A large personal collection of 50,000+...

Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

Summary When docling detects the input format of a gzip-compressed tar archive METS-GBS, and later when the METS-GBS backend opens it, it calls tarfile.TarFile.getmembers. That builds the full member list in memory before the maxmembercount limit is checked. A small archive with a very large numb...

GHSA-3CR3-8M4C-FPXW Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

Summary When docling detects the input format of a gzip-compressed tar archive METS-GBS, and later when the METS-GBS backend opens it, it calls tarfile.TarFile.getmembers. That builds the full member list in memory before the maxmembercount limit is checked. A small archive with a very large numb...

log4j-samples

log4j-muestras Muestras de versiones de la librería log4j para ayudar a los escáneres/detectores de log4j incluyendo nuestro propio log4j-detector a mejorar su precisión para detectar CVE-2021-45046 y CVE-2021-44228. Las muestras incluyen jars sombreados, uber jars, jars ejecutables de spring-boo...

onedrive_user_enum

onedriveuserenum v2.10 Gültige OneDrive-Benutzer enumerieren Eine vollständige Erläuterung der Enumerationstechnik und der OneDrive-Enumeration finden Sie im Blog hier: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ Wenn Sie nach der alten Version ohne Datenbank der OneDrive-Enumerati...

Cisco ASA Improper Access Control (CVE-2019-1695)

A vulnerability in the detection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, adjacent attacker to send data directly to the kernel of an affected device. The vulnerability exists because the software...

Systematically Optimized CNN-Transformer with Focal Loss for Imbalanced Intrusion Detection on NSL-KDD

Intrusion Detection Systems IDS struggle with imbalanced datasets like NSL-KDD, especially in detecting rare R2L and U2R attacks. This work describes a systematically optimized and explainable framework using a CNN-Transformer architecture to improve performance on highly imbalanced data. We...

CVE-2026-105747

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/metsgbsbackend.py call tarfile.TarFile.getmembers...

CVE-2026-105747 Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection in docling/datamodel/document.py and the backend in docling/backend/metsgbsbackend.py call tarfile.TarFile.getmembers...

pagecache-lpe-containment-kit

Page-Cache LPE Containment Kit Detect, contain, and verify defenses against two Linux page-cache-corruption local privilege escalations — DirtyClone CVE-2026-43503 and pedit COW CVE-2026-46331 — on hosts and containers. This is an educational, defensive security kit. It explains how both...

CVE-2023-29923

CVE-2023-29923 1、Prepare a url.txt, for example: 2、Execute python CVE-2023-29923.py -f url.txt 3、Assets detected with unauthorized access vulnerabilities will be saved in the result.txt file in the same directory...

Astra Linux – Vulnerability in mbedtls

Mbed TLS before version 3.6.4 has a race condition in AESNI detection when certain compiler optimizations are applied. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: intel-sdw-acpi: hardening the detection of controllers. The existing code currently sets a pointer to an ACPI handle before checking whether it is indeed a SoundWire controller. This can lead to issues where the proces...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: arm64: set exceptionirqentry with irqentry as a default filterirqstacks is supposed to cut entries which are related irq entries from its call stack. And inirqentrytext which is called by filterirqstacks uses irqentrytextstart/en...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: nau8821: Cancel delayed work on component removal Attempting to unload the driver while a jack detection task is pending may cause the kernel to crash when it is eventually executed. 1984.896308 BUG: Unable to handle a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: cihdrcimx: Also search for ‘phys’ handle. When passing ‘phys’ in the device tree to describe the USB PHY handle which is the recommended approach according to Documentation/devicetree/bindings/usb/ci-hdrc-usb2.txt,...