13458 matches found
OESA-2025-1924 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI If lpfcissueelsflogi fails and returns non-zero status, the node reference count ...
GHSA-6V2P-P543-PHR9 vulnerabilities
Vulnerabilities for packages: newrelic-nri-kube-events, spark-operator, eck-operator-fips, knative-serving, kyverno-notation-aws, rabbitmq-messaging-topology-operator-fips, dex-fips, terraform-provider-kubernetes-fips, temporal, crossplane-provider-azure, victoriametrics-cluster-fips, loki,...
WordPress Cook&Meal <= 1.2.3 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Cook&Meal versions = 1.2.3...
Cisco Talos at Black Hat 2025: Briefings, booth talks and what to expect
Cisco Talos is back at Black Hat with new research, threat detection overviews and opportunities to connect with our team. Whether you're interested in what we're seeing in the threat landscape, detection engineering or real-world incident response, here's where and how to find us: Visit us at th...
DECE Software Geodi 跨站脚本漏洞
DECE Software Geodi is an AI and NLP-powered data discovery, classification, and search platform from DECE Software, UK. DECE Software Geodi suffers from a cross-site scripting vulnerability that stems from improper input neutralization and could lead to a cross-site scripting attack...
EcoStruxure IT Data Center Expert <= 8.3 Multiple Vulnerabilities (SEVD-2025-189-01)
The version of EcoStruxure IT Data Center Expert installed on the remote host is prior to 9.0. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-36 advisory. - A CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
WordPress MediCenter - Health Medical Clinic <= 15.1 - PHP Object Injection Vulnerability
WordPress MediCenter - Health Medical Clinic = 15.1 - PHP Object Injection Vulnerability discovered by Frank in WordPress Theme MediCenter - Health Medical Clinic versions = 15.1...
WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.4 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin Premmerce Product Search for WooCommerce versions = 2.2.4...
Xorux LPAR2RRD File Upload Directory Traversal
Vulnerability Details Affected Vendor: Xorux Affected Product: LPAR2RRD Affected Version: 8.04 and prior Platform: Rocky Linux 8.10 CWE Classification: CWE-24: Path Traversal: '../filedir', CWE-434: Unrestricted Upload of File with Dangerous Type, CWE-648: Incorrect Use of Privileged APIs CVE...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Android
This repository contains a PoC Proof of Concept code for the BlueBorne vulnerabilities. The BlueBorne vulnerabilities are a set of vulnerabilities in Bluetooth devices that allow an attacker to remotely execute code on a device. The PoC code is written in Python and uses the PyBluez library to...
A-Red-Teamer-diaries
The provided context is a GitHub repository containing a Python script named RunFinger.py and a README.md file. The script is designed to gather information about the domain name and Windows machine running in the network. The README.md file contains information about the purpose of the script an...
awesome-termux-hacking
This is an awesome list of Termux hacking tools. It appears to be a collection of various tools and frameworks for penetration testing, vulnerability assessment, and exploitation. The list includes tools for tasks such as: Subdomain enumeration e.g., Sublist3r Vulnerability scanning e.g., w3af,...
Exploit for Incorrect Default Permissions in Microsoft
This List is no longer updated. Awesome Red Teaming List of Awesome Red Team / Red Teaming Resources This list is for anyone wishing to learn about Red Teaming but do not have a starting point. Anyway, this is a living resources and will update regularly with latest Adversarial Tactics and...
Exploit for Incorrect Permission Assignment for Critical Resource in Tenable Nessus
Deprecated. Have a look at Watson instead. Sherlock PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities. Currently looks for: MS10-015 : User Mode to Ring KiTrap0D MS10-092 : Task Scheduler MS13-053 : NTUserMessageCall Win32k Kernel Pool...
Exploit for CVE-2007-6750
ReconScan The purpose of this project is to develop scripts that can be useful in the pentesting workflow, be it for VulnHub VMs, CTFs, hands-on certificates, or real-world targets. The project currently consists of two major components: a script invoking and aggregating the results of existing...
WordPress Kallyas theme <= 4.21.0 - Authenticated (Contributor+) Local File Inclusion vulnerability
Authenticated Contributor+ Local File Inclusion vulnerability discovered by stealthcopter in WordPress Theme KALLYAS versions = 4.21.0...
WordPress WoodMart - Multipurpose WooCommerce Theme plugin <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation vulnerability
WordPress WoodMart - Multipurpose WooCommerce Theme plugin = 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation vulnerability discovered by Samir El Khaouti in WordPress Theme WoodMart versions = 8.2.6...
WordPress Premium SEO Pack Plugin <= 3.3.2 - Privilege Escalation Vulnerability
Privilege Escalation Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Premium SEO Pack versions = 3.3.2...
WordPress Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App Plugin <= 0.8.8.8 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Blappsta Mobile App Plugin Your native, mobile iPhone App and Android App versions = 0.8.8.8...