Linux Distros Unpatched Vulnerability : CVE-2026-98600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: RFCOMM: Reject short EA=0 frames in rfcommrecvframe While rfcommrecvframe verifies that skb-len is at least sizeofhdr + 1 4 bytes: 3-byte header +...

Linux Distros Unpatched Vulnerability : CVE-2026-98583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: nfcmrvl: validate helper command length before pull The firmware download receive path removes the NCI data header and reads the helper command before...

Linux Distros Unpatched Vulnerability : CVE-2026-98561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfp: hold IPsec RX state under the XArray lock nfpnetipsecrx drops the XArray lock before taking a reference to the xfrmstate it found. The delete path can eras...

Linux Distros Unpatched Vulnerability : CVE-2026-98619

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ethtool: keep rtnllock for the ioctl self test An offline self test that brings the interface down and back up with netifclose / netifopen requires rtnllo...

PCMan FTP Server 2.0 PWD Command Buffer Overflow

PCMan FTP Server version 2.0 contains a buffer overflow in the PWD command that allows remote attackers to execute arbitrary code. This Metasploit module sends a crafted FTP PWD request to demonstrate the issue. https://packetstorm.news/download/236498...

FreeFloat FTP Server 1.0 NOOP Command Buffer Overflow

FreeFloat FTP Server version 1.0 contains a buffer overflow in its NOOP command handler. The supplied proof of concept documents analysis, fuzzing, offset discovery, and return-address control. https://packetstorm.news/download/236480...

Edimax BR-6478AC 2.20 Command Injection

Edimax BR-6478AC firmware version 2.20 contains an authenticated command injection vulnerability in the formWlanMP manufacturing-test handler that permits command execution as root. https://packetstorm.news/download/236505...

Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT Unauthenticated Remote Code Execution

Parasoft Continuous Testing Platform version 10.7.5-SNAPSHOT contains an unfiltered Java deserialization issue in its database restore path that, with documented license and authentication gate failures, enables unauthenticated JSP command execution. https://packetstorm.news/download/236508...

Linux Distros Unpatched Vulnerability : CVE-2026-98545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ata: libata-scsi: bound the ATA passthru sense descriptor writes When an ATA PASS-THROUGH command to an ATAPI device fails, the sense buffer holds the device's...

ProSoft RLX-IFH24E version 2.2.44 Unsigned Upgrade Package Root Command Execution

ProSoft RLX-IFH24E version 2.2.44 firmware upgrades do not verify package authenticity, allowing an authenticated attacker to upload a crafted package that executes commands as root on the appliance. https://packetstorm.news/download/236509...

TRENDnet TV-IP302PI 1.02.38 NTP Command Injection

TRENDnet TV-IP302PI version 1.02.38 contains an authenticated command injection vulnerability in the NTP server address that reaches a root shell-form system call. https://packetstorm.news/download/236511...

Exasol Database 7.1.30 Default Credential Python UDF Command Execution

Exasol Database version 7.1.30 docker-db deployments use the documented SYS default credential, which can create a PYTHON3 UDF invoking os.popen and return command output through SELECT. https://packetstorm.news/download/236507...

Edimax BR-6478AC 2.20 Command Injection

Edimax BR-6478AC version 2.20 contains an authenticated command injection vulnerability in the setWAN WAN-configuration handler that can lead to root command execution. https://packetstorm.news/download/236506...

Linux Distros Unpatched Vulnerability : CVE-2026-98727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-multipath: set BLKFEATZONED only after the zone info is known The namespace head is marked zoned at allocation time based only on the command set identifie...

Octopus

What is Octopus ? Octopus is an open source, pre-operation C2 server based on python which can control an Octopus powershell agent through HTTP/S. The main purpose of creating Octopus is for use before any red team operation, where rather than starting the engagement with your full operational...

Just-Metadata

Just-Metadata Just-Metadata is a tool that can be used to gather intelligence information passively about a large number of IP addresses, and attempt to extrapolate relationships that might not otherwise be seen. Just-Metadata has "gather" modules which are used to gather metadata about IPs loade...

dirble

Introduction Dirble is a website directory scanning tool for Windows and Linux. It's designed to be fast to run and easy to use. How to Use Download one of the precompiled binaries for Linux, Windows, or Mac, or compile the source using Cargo, then run it from a terminal. The default wordlist...

evillimiter

Evil Limiter A tool to monitor, analyze and limit the bandwidth upload/download of devices on your local network without physical or administrative access. evillimiter employs ARP spoofing and traffic shaping to throttle the bandwidth of hosts on the network. Searching for a Windows-compatible...

CVE-2024-50972

CVE-2024-50972 Description A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrowid parameter. Vulnerability Type SQL Injection Vendor of Product Itsourcecode Affected Product Code...

Max

Maximizing BloodHound with a simple suite of tools Description New Release: dpat - The BloodHound Domain Password Audit Tool DPAT A simple suite of tools: get-info - Pull lists of information from the Neo4j database mark-owned - Mark a list of objects as Owned mark-hvt - Mark a list of objects...