Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Moderate: Red Hat Security Advisory: libkcapi security update

An update for libkcapi is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Security update for strongswan

This update for strongswan fixes the following issues: CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers bsc1276534. CVE-2026-78126: NULL-Pointer Dereference When Handling...

TriSuElla-AIDLCA-Framework

🔱 TriSuElla-AIDLCA 框架 AI 驱动的开发生命周期与自主智能体治理（LLMSecOps） 软件版本 ：3.2.0 | 框架版本 ：3.2.0 | 状态 ：制度化（生产就绪、DevSecOps 就绪且经 CI 验证） 合并不变量 ：305 项检查 | 规则 ：204 条 | 领域族 ：26 个 -success.svg -blue.svg 🏛️ 执行概览 TriSuElla-AIDLCA 框架 是一套企业级、策略治理的架构与安全标准，面向 AI 辅助软件工程与自主多智能体系统 。它确保机器智能以确定性执行、零信任密码学验证以及协调的人类在环治理方式运行。...

CVE-2024-36991

CVE-2024-36991: Windows 版 Splunk Enterprise（9.2.2、9.1.5、9.0.10 より前のバージョン）に影響を与えるパストラバーサル。 非同期パフォーマンスを備えた、CVE-2024-36991 の脆弱性検出・悪用ツール CVEHunter。 インストール root@kitploit: git clone https://github.com/th3gokul/CVE-2024-36991.git cd CVE-2024-36991 pip install -r requirements.txt python3 cvehunter.py...

CVE-2025-25705

CVE-2025-25705 Description Item: root@kitploit: Product Vendor: freebsdbrasil Item: ProApps - Enterprise Appliance Editor Creator: DreamWeaver PHP: PHP Version 7.3.18 Java Script Library: Jquery UI 1.6 | Jquery 1.2.6 Server: NGINX Operational System: FreeBDS Unix 脆弱性タイプ: リモートコード実行 脆弱性の説明:...

CVE-2017-15220-vxsearch-rce

CVE-2017-15220 – VX Search Enterprise Remote Buffer Overflow Remote buffer overflow vulnerability in VX Search Enterprise 10.1.12. Vulnerability Details CVE: CVE-2017-15220 Product: VX Search Enterprise Version: 10.1.12 Impact: Remote Code Execution Description VX Search Enterprise 10.1.12 is...

SCMKit

SCMKit 描述 源 代码管 理攻击工具包 - SCMKit 是一个可用于攻击 SCM 系统的工具包。SCMKIT 允许用户指定要使用的 SCM 系统和攻击模块，以及向相应的 SCM 系统提供有效凭据（用户名/密码或 API 密钥）。目前，SCMKIT 支持的 SCM 系统有 GitHub Enterprise、GitLab Enterprise 和 Bitbucket Server。支持的攻击模块包括侦察、权限提升和持久化。SCMKIT 采用模块化方式构建，以便信息安全社区将来可以添加新模块和 SCM 系统。 发布 可在 Releases 中找到 SCMKit 的 1.2 版本 目录...

CVE-2024-36991

CVE-2024-36991 Path traversal vulnerability in Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10 that allows reading sensitive files...

CVE-2017-14980_syncbreeze_10.0.28_bof

Exploit - CVE-2017-14980 - Sync Breeze Enterprise v10.0.28 This repository contains a proof-of-concept buffer overflow exploit BOF for Sync Breeze Enterprise version 10.0.28, targeting the vulnerability identified as CVE-2017-14980. Description The vulnerability exists due to improper input...

CVE-2021-40905

CVE-2021-40905 - RCE via a crafted .mkp file Application: CheckMK Management Web Console Software Revision: Less than or equal to 2.0.0p17 Attack type: RCE Solution: TBD or the MKPs shared on https://exchange.checkmk.com/ are manually reviewed by CheckMk and they look for malicious code or...

CVE-2026-27876

🚨 CVE-2026-27876 - Grafana 通过 SQL 表达式实现严重 RCE 一种允许通过 SQL 表达式进行任意文件写入的链式漏洞，可导致在主机上实现完全远程代码执行（RCE）。 📋 概述 CVE ID ：CVE-2026-27876 严重性 ：严重 （CVSS v3.1：9.1 ） 发布时间 ：2026 年 3 月 27 日 CWE ：CWE-94（代码生成控制不当 / 代码注入） Grafana 的 SQL 表达式（SQL Expressions） 功能（在 v11.6.0 中以类 MySQL 语法引入/重新实现）允许用户使用熟悉的 SQL...

CVE-2026-3854-PoC

CVE-2026-3854 PoC — GitHub RCE via X-Stat Push Option Injection For educational and authorized security research purposes only. Do not use against any system without explicit written permission. Overview CVE-2026-3854 is a Remote Code Execution vulnerability in GitHub Enterprise Server's and...

Enterprise-Cybersecurity

This repository does not have a README...

CVE-2024-36991-Tool

CVE-2024-36991-Tool This binary POC automates the exploitation of CVE-2024-36991 by sending crafted curl requests to a vulnerable Splunk instance. It retrieves sensitive files and saves them locally for further analysis. The script is modular, allowing users to target specific file categories e.g...

CVE-2024-36991

CVE-2024-36991 Nuclei Template Description This repository contains a Nuclei template to detect the path traversal vulnerability in Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10. The vulnerability allows unauthorized access to sensitive files, such as /etc/passwd. CVE Detai...

CVE-2017-14980

Exploit-CVE-2017-14980 PoC exploit for CVE-2017-14980 — a stack-based buffer overflow vulnerability in Sync Breeze Enterprise 10.0.28. 📖 Full technical analysis of the exploit: 👉 https://davigsantana.github.io/posts/buffer-overflow/ About This repository contains a proof-of-concept PoC developed...

cisco-security-research

Cisco 安全研究 研究员： 0xReadingSteiner 联系方式： [email protected] 厂商： Cisco Systems, Inc. 厂商通知时间： 2026-08-04 Cisco PSIRT, ZDI, SSD 厂商回应： 无 为什么会有这项研究 针对市面上可购买的 Cisco 产品的独立安全研究，已在多个产品线中发现严重漏洞——包括企业依赖的语音通信、协作和网络安全系统。 发布前曾进行多次协调尝试： 17 份提交 至 Zero Day Initiative ZDI — 未处理 SSD 暂停了所有 Cisco 漏洞收购，并表示 Cisco...

CVE-2026-20253-Splunk-Enterprise-Pre-Auth-RCE-

CVE-2026-20253 - Splunk Enterprise Pre-Auth RCE PoC CVE-2026-20253 - Splunk Enterprise Pre-Auth RCE PoC ⚠️ WARNING : This script is for educational purposes and testing in authorized environments only. Unauthorized use is prohibited and may be illegal. 📋 Description...

ghe-push-option-rce-scanner

CVE-2026-3854 — 通过 Push Option 注入实现 GitHub Enterprise Server RCE 概述 GHE 中 push option 值的中和不当。具有推送权限的攻击者可在实例上实现 RCE。 字段| 值 ---|--- CVE| CVE-2026-3854 严重性| CRITICAL 产品| GitHub Enterprise Server CISA KEV| 2026-03-10 攻击类型| 通过 Push Option 注入实现 RCE 所需认证| 无 受影响版本 状态| 版本 ---|--- ❌ 受影响| GitHub Enterprise...