android

cSploit gilt nun als EOL und wird von den Entwicklern nicht mehr aktualisiert. Die aktuelle Version funktioniert möglicherweise nicht auf neueren Android-Versionen. Wir danken allen, die im Laufe der Jahre zu cSploit beigetragen haben. cSploit: Android-Netzwerk-Penetrationstest-Suite cSploit ist...

BurpSuiteSharpener

Informazioni su questo repository e fine del ciclo di vita EOL Questo repository non verrà più aggiornato. Utilizza https://github.com/irsdl/BurpSuiteSharpenerEx. Burp Suite Sharpener Questa estensione aggiunge una serie di funzionalità UI e operative a Burp Suite per rendere il lavoro un po' più...

liferay-ga4-rce-research

Liferay CE 7.0.3 GA4 — Ricerca sulle vulnerabilità RAPTOR Loop-Hunt Un audit di sicurezza di Liferay Portal CE 7.0.3 GA4 git tag 7.0.3-ga4, commit b2d7cc68a eseguito con la metodologia RAPTOR loop-hunt : ricognizione deterministica → 25 agenti generatori isolati che leggono il sorgente grezzo → 2...

Turvan6rkus-CVE-2024-3273

🛠️ Dispositivi D-Link Network Attached Storage - Iniezione di Comandi 🌟 Contesto I dispositivi D-Link Network Attached Storage NAS o storage di rete sono dispositivi con uno o più hard disk collegati a una rete informatica per l'archiviazione e la condivisione di file. A differenza di un normale...

envizon

envizon – von evait security EOL https://github.com/evait-security/envizon/issues/130 Wir evait security sind für die interne Projektdokumentation zu https://gitlab.com/invuls/pentest-projects/pcf umgezogen. Netzwerkvisualisierung & Pentest-Berichterstattung Version 5.0 Dieses Tool wird von evait...

security-onion

Security Onion Security Onion 16.04 hat das Ende seiner Lebensdauer erreicht: https://blog.securityonion.net/2021/04/security-onion-1604-has-reached-end-of.html Sie finden das neue Security Onion 2 Repository unter: https://github.com/Security-Onion-Solutions/securityonion/...

scanner-cli

Deprecation Notice: Hawkeye hat sein Lebensende erreicht. Es gibt heutzutage modernere Optionen für dich und dein Projekt. Falls du die Wartung des Projekts übernehmen möchtest, kannst du mich gerne kontaktieren. Du findest Wege, mich zu erreichen, auf meiner persönlichen Homepage. . . . . . . De...

OpenPLC_v3

OpenPLC Runtime Version 3 ⚠️ Dieses Projekt hat das Ende seiner Lebensdauer erreicht und wird nicht mehr gewartet. Es wurde durch OpenPLC Runtime v4 ersetzt. Bitte besuchen Sie das neue Repository für Installationsanweisungen, Dokumentation und Support. OpenPLC ist eine...

Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

Ajax.NET Professional AjaxPro contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users are advised to discontinue use and/or transition to a...

EUVD-2026-64854

A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component Agent Execution Workflow. Such manipulation leads to infinite loop. The attack may be performed from remote. The exploit is publicly available and might be used. This...

Astra Linux – Vulnerability in Apache Log4j1.2

By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter, where the values to be inserted are converted using PatternLayout. The message converter %m is likely to always be included. This allows attackers to manipulate SQL statements by entering crafted...

CVE-2026-19841

A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted is an unknown function of the file /etc/vsftpd.conf of the component vsftpd. This manipulation causes incorrect default permissions. The attack is possible to be carried out remotely. A high degree of complexity is needed for the...

CVE-2026-41939

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by using default credentials identical across all installations. Attackers can...

CVE-2026-41939 Care Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFly

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by using default credentials identical across all installations. Attackers can...

CVE-2026-41939

Summary: CVE-2026-41939 affects Care Everywhere Gateway 14.3.10, where a hard-coded credential flaw in the bundled WildFly 8.2.0.Final management interface enables unauthenticated remote access to the WildFly admin console (port 20990) with default credentials. This allows deployment of a malicio...

Wednesday, July 29, 2026 Security Releases

Wednesday, July 29, 2026 Security Releases Security releases available Updates are now available for the 26.x, 24.x, 22.x Node.js release lines for the following issues. This security release includes the following dependency updates to address public vulnerabilities: undici 8.9.0, 7.29.0, 6.28.0...

PT-2026-65863

Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthenticated remote attackers to gain administrative access by using default credentials identical across all installations. Attackers can...

Cisco IOS 12.4 HTTP Server Cross-Site Request Forgery (CVE-2008-4128)

According to its self-reported version, Cisco IOS 12.4 is affected by multiple cross-site request forgery CSRF vulnerabilities in the HTTP administration component. An unauthenticated, remote attacker can exploit these by persuading an authenticated user to follow a malicious link, allowing...

CVE-2026-15487 TRENDnet TEW-821DAP Firmware Update system_ntp sub_41FBD0 os command injection

A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. This impacts the function sub41FBD0 of the file /goform/systemntp of the component Firmware Update Handler. Performing a manipulation of the argument Hostname results in os command injection. The attack may be initiated remotely. The vendo...

CVE-2026-15485

A flaw has been found in TRENDnet TEW-821DAP 1.11B03. The impacted element is the function sub43F2C4 of the file /goform/toolsnslookup of the component DNS Lookup Handler. This manipulation of the argument nslookuptarget/dnsserver causes os command injection. The attack can be initiated remotely...