RHEL 10 : python3.12 (RHSA-2026:58902)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:58902 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic...

NetworkManager security update

1.54.3-5.0.1 - Introduce always-ignore-carrier setting Orabug: 39663315 - disable MPTCP handling by default Orabug: 34801142 - add connectivity check via Oracle servers Orabug: 32051972 - Add a dropin file to make Networkmanager-dispatcher persistent Orabug: 36989910 - Drop 777 permissions from t...

Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Important: python3.14 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

RHEL 10 : python3.14 (RHSA-2026:58928)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:58928 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic...

freeipa

Server FreeIPA FreeIPA consente agli amministratori Linux di gestire centralmente gli aspetti di identità, autenticazione e controllo degli accessi dei sistemi Linux e UNIX, fornendo strumenti di gestione da riga di comando e basati sul web, semplici da installare e utilizzare. FreeIPA è costruit...

GitDump

GitDump GitDump estrae il codice sorgente da .git quando il directory traversal è disabilitato Requisiti Python3 Testato su Windows Kali Linux Cosa fa Estrae il codice sorgente dalla directory website/.git quando il directory traversal è disabilitato. Come funziona Recupera tutti i file comuni...

CVE-2025-67160

CVE-2025-67160 — Vatilon-basierte IP-Kameras Zusammenfassung Die Firmware von IP-Kameras auf Vatilon-Basis legt mehrere interne Webverzeichnisse offen, ohne dass eine Authentifizierung erforderlich ist. Wenn die Verzeichnisindizierung auf dem eingebetteten Webserver aktiviert ist, können nicht...

AD-description-password-finder

AD विवरण पासवर्ड खोजक इस टूल का उद्देश्य यह जांचना है कि Active Directory खातों के विवरण में पासवर्ड क्लियर टेक्स्ट में संग्रहीत हैं या नहीं। आवश्यकताएँ हैं: ntds.dit और SYSTEM hive की एक प्रति होना अगर आपके पास python नहीं है, तो आप इस रिपॉजिटरी के binary फ़ोल्डर में स्क्रिप्ट के .exe संस्करण का...

deploy-goad

GOAD v2 auf Ubuntu Linux 22.04 bereitstellen Dieses Skript optimiert die Voraussetzungen, die für die Bereitstellung des Active-Directory-Labors von https://github.com/Orange-Cyberdefense/GOAD benötigt werden. Übersicht Stellen Sie sicher, dass im BIOS die VT-x-Erweiterungen aktiviert sind...

PowerShellForPentesters

PowerShellForPentesters Playlist-Link - https://youtube.com/playlist?list=PLJQHPJLjSQatUsJy3O4k-VQlllquDmDr PowerShell for Pentesters ist eine grundlegende Einführung in die Verwendung von PowerShell bei internen Penetrationstests. Dieser Kurs ist im Wesentlichen das PowerShell-Modul aus meinem...

Kestrel

Kestrel BloodHound ti mostra il percorso. Kestrel ti mostra ciò che è già dentro. Tutti mappano la stessa cosa: il percorso di attacco - chi può raggiungere Domain Admin. È la domanda giusta, e gli strumenti che le rispondono sono eccellenti. Ma un grafo di "chi può raggiungere chi" è cieco a...

EUVD-2026-64606

The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.9.8 via the getimagesrcinbase64 function. This makes it possible for authenticated attackers, with...

CVE-2026-18027

The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.9.8 via the getimagesrcinbase64 function. This makes it possible for authenticated attackers, with...

printnightmare-detection-mitigation-lab

Laboratorio di rilevamento e mitigazione PrintNightmare Un caso di studio accademico sanificato che dimostra come un laboratorio di dominio Windows sia stato progettato, monitorato e indurito durante l'indagine su CVE-2021-34527 PrintNightmare in un ambiente virtuale controllato. Nota di sicurezz...

MiracleLinux 9 : python3.9-3.9.25-7.el9_8.3 (AXSA:2026-1621:07)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1621:07 advisory. python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory CVE-2026-11940 Tenable has extracted the preceding...

CVE-2026-18027 WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 4.9.8 - Authenticated (Subscriber+) Arbitrary File Read via 'customer_note' Parameter

The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.9.8 via the getimagesrcinbase64 function. This makes it possible for authenticated attackers, with...

CVE-2026-18027

The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Directory Traversal in all versions up to and including 4.9.8 . The flaw resides in the get_image_src_in_base64 function, which processes the customer_note parameter witho...

CVE-2026-76598

Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjaxgetFolders in Fabrik 4.7.2 - The onAjaxgetFolders method of the elements model allows arbitrary directory listings...

CVE-2026-76598 Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjaxgetFolders in Fabrik 4.7.2 - The onAjaxgetFolders method of the elements model allows arbitrary directory listings...