unshackle

지원 종료 ⚠ 이 프로젝트는 현재 보관되었으며, 유지 관리 및 좋지 않은 PC에서 VMware로 테스트하는 데 필요한 시간 때문에 더 이상 작업되지 않습니다, Unshackle - 비밀번호 우회 도구 Unshackle는 Linux 기반 부팅 가능한 USB에서 Windows 및 Linux 사용자 비밀번호를 우회하는 오픈 소스 도구입니다. 기여를 환영합니다. 할 일 목록: Feature| Status ---|--- 사용하기 쉬움| ✅ Windows 지원| ✅ 간단한 CLI| ✅ Linux 지원| ✅ 튜토리얼 비디오| 🟡 빌드 쉬움...

Tivoli-Madness

Tivoli-Madness アドバイザリ: CVE-2020-28054: JamoDat – TSMManager Collector v. = 6.5.0.21 に影響する認可バイパスの脆弱性 IBM Tivoli Storage Manager コマンドライン管理インターフェース バージョン 5、リリース 2、レベル 0.1 に影響するスタックベースのバッファオーバーフロー 残念ながら、Hackerone のトリアージ担当者との最も無礼な遭遇の後、以下のことがわかりました: IBM Tivoli Storage Manager はサポート終了に達しており、パッチは提供されません。...

seal-security-nuget-demo-net7

ブラウザ + CLI デモ NuGet/C — .NET 7 エディション なぜ .NET 7 フォークなのか? これは、標準的な seal-security-nuget-demo（net9.0 をターゲットにしている）を再ターゲットしたフォークです。エクスプロイトのストーリー、コントローラー、シールドパッケージのリストは同一です — TargetFramework のみが異なります。 これが存在する理由は、ほとんどのエンタープライズ顧客が要求に応じて最新の .NET SDK に移行できないためです。.NET 7 は 2024 年 5 月 14 日にサポート終了に達しました...

seal-security-nuget-demo-net7

ブラウザ + CLI デモ NuGet/C — .NET 7 版 なぜ .NET 7 フォークか？ これは、標準的な seal-security-nuget-demo（net9.0 ターゲット）を再ターゲットしたフォークです。脆弱性のストーリー、コントローラ、封印パッケージのリストは同一です — 異なるのはTargetFramework のみです。 存在する理由は、ほとんどのエンタープライズ顧客がオンデマンドで最新の .NET SDK に移行できないからです。.NET 7 は 2024 年 5 月 14 日にサポート終了...

PT-2026-84054

Name of the Vulnerable Software and Affected Versions QVidium Opera11 version 3.3.2a26-Ax4x-opera11 Description An unauthenticated command injection issue exists in the CGI Script component. A remote attacker can exploit this by manipulating the ipaddr argument within the '/cgi-bin/net tr.cgi'...

aws__aws-sdk-java_CVE-2022-31159_1-12-2600

AWS SDK for Java L'AWS SDK for Java consente agli sviluppatori Java di lavorare facilmente con Amazon Web Services e di creare soluzioni scalabili con Amazon S3, Amazon DynamoDB, Amazon Glacier e altri servizi. Consulta l'AWS SDK for Java 2.x per iniziare. In modalità di manutenzione a partire da...

EUVD-2026-67134

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Seres Software syWEB allows Reflected XSS. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported...

Zyxel NAS Firmware 5.21- Remote Code Execution

Multiple Zyxel network-attached storage NAS devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. Zyxel NAS devices achieve authentication by using th...

K000162640: BIND vulnerability CVE-2026-3592

Security Advisory Description BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18...

June 9, 2026—KB5094041 (Monthly Rollup)

None None...

June 9, 2026—KB5094042 (Monthly Rollup)

None None...

[SECURITY] [DLA 4659-1] debian-security-support update

Debian LTS Advisory DLA-4659-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón June 30, 2026 https://wiki.debian.org/LTS Package : debian-security-support Version : 1:11+2026.06.30 Debian Bug : 1109118 1121942 1135153 debian-security-support, the Debian...

EUVD-2026-35454

Insufficient input validation in NETGEAR JR6150 AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014 allows users connected to the local WiFi Networks to execute operating system commands. NETGEAR JR6150 has reached End-of-Support phase as of 2018 , and no further security updates are...

CVE-2026-0419

Insufficient input validation in NETGEAR JR6150 AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014 allows users connected to the local WiFi Networks to execute operating system commands. NETGEAR JR6150 has reached End-of-Support phase as of 2018 , and no further security updates are...

CVE-2026-0412

Insufficient input validation vulnerability in NETGEAR JR6150 AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014 allows administrators connected to the local network to make unauthorized modification of router software and functionality. NETGEAR JR6150 reached End-of-Support status in...

CVE-2026-0419

CVE-2026-0419 describes insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router, 802.11ac, dual-band; released 2014) that allows users on the local Wi‑Fi to execute operating system commands. The device is End-of-Support since 2018 with no planned security updates. The advisory notes t...

CVE-2026-0419 Insufficient input validation vulnerability in NETGEAR JR6150

Insufficient input validation in NETGEAR JR6150 AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014 allows users connected to the local WiFi Networks to execute operating system commands. NETGEAR JR6150 has reached End-of-Support phase as of 2018 , and no further security updates are...

CVE-2026-0419 Insufficient input validation vulnerability in NETGEAR JR6150

Insufficient input validation in NETGEAR JR6150 AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014 allows users connected to the local WiFi Networks to execute operating system commands. NETGEAR JR6150 has reached End-of-Support phase as of 2018 , and no further security updates are...

CVE-2026-0412 Insufficient input validation vulnerability in NETGEAR JR6150 Web UI

Insufficient input validation vulnerability in NETGEAR JR6150 AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014 allows administrators connected to the local network to make unauthorized modification of router software and functionality. NETGEAR JR6150 reached End-of-Support status in...

CVE-2026-0412

CVE-2026-0412 relates to the NETGEAR JR6150 Web UI and is described as an insufficient input validation vulnerability. The affected device is the NETGEAR JR6150 (AC750 WiFi Router, 2014 release) and the description states that administrators connected to the local network can make unauthorized mo...