593874 matches found
zero-touch-containment
zero-touch-containment Antigena Darktrace → Aruba ClearPass CoA bridge — model-driven, real-time user/device quarantine. Zero SOC clicks between detection and containment. Sanitized reference implementation of a production NDR↔NAC integration pattern operated at financial-sector scale...
-Netdata-PrivEsc-CVE-2024-32019
CVE-2024-32019-Netdata-ndsudo-PrivEsc CVE-2024-32019: Netdata ndsudo PrivEsc HTB Editor Automated Bash script to exploit the PATH Hijacking vulnerability in Netdata's SUID ndsudo binary CVE-2024-32019. This exploit was specifically adapted to overcome common restrictions found in hardened...
CVE-2016-5195
سجل لأغراض التعلم فقط، ويُحظر استخدامه لأغراض غير قانونية المبدأ يعتمد مبدأ هذه الثغرة على الكتابة المتزامنة للصفحات المتسخة، مما يؤدي إلى تغيير محتوى ملف كان للقراءة فقط إذا كان الملف المعدَّل مملوكًا لـroot ويمتلك صلاحية SUID، فيمكن استغلاله لرفع الصلاحيات نطاق التأثير النوى التي تم تجميعها قبل...
CVE-2025-27591
CVE-2025-27591 - تصعيد الامتيازات عبر معالجة غير آمنة لملفات السجل نظرة عامة CVE-2025-27591 هي ثغرة تصعيد امتيازات محلية في أداة below الإصدارات السابقة للإصدار المُصحح ناتجة عن معالجة غير آمنة للروابط الرمزية داخل آلية تسجيل الأحداث الخاصة بها. يمكن للمهاجمين الذين لديهم وصول محلي استغلال هذه...
CVE-2026-79756
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, the fix for unauthenticated OS command injection in the nuclio dashboard on the local/Docker platform is incomplete. The fix added validateFunctionName for function names and common.Quote for the...
CVE-2026-79755
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio local Docker platform, the function namespace is interpolated—unvalidated—into a double-quoted docker ps --filter "label=nuclio.io/namespace=" command that is executed via the host...
CVE-2026-52831
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.4, the Nuclio controller builds a curl invocation string for each cron trigger and stores it as the args of a Kubernetes CronJob container /bin/sh, -c, . Two fields in the trigger specification flow...
cifswitch-check
cifswitch-check एक शेल स्क्रिप्ट जो यह जाँचने के लिए है कि क्या कोई लिनक्स सिस्टम CIFSwitch CVE-2026-46243 — लिनक्स कर्नेल के CIFS/SMB क्लाइंट में 2007 से मौजूद एक स्थानीय विशेषाधिकार वृद्धि भेद्यता — के संपर्क में है। बेयर-मेटल होस्ट, VM, और कंटेनरों के अंदर चलता है। सीधे CI/CD पाइपलाइनों में...
CVE-2026-31431-CopyFail-static-ELF--POC
CVE-2026-31431: Copy Fail - ملف ELF ثابت بحجم 587 بايت لم أكتشف هذا الثغرة. يعود الفضل إلى Xint Code / Theori. هذا المستودع هو محاولتي لجعل الاستغلال صغيرًا قدر الإمكان - ملف ELF معماري x8664 مكتوب يدويًا ينفذ تصعيد الامتيازات الكامل LPE في 587 بايت. بدون libc، بدون رابط linker، بدون بيئة تشغيل...
Popcorn-TJNULL-OSCP-
HackTheBox: Popcorn Write-up Date: June 05, 2026 Difficulty: Easy Platform: HackTheBox Key Techniques: Port & Service Enumeration, Directory Fuzzing Gobuster, File Upload Evasion, HTTP Request Manipulation Burp Suite, Remote Code Execution RCE, Advanced TTY Shell Stabilization Python, Local...
CVE-2026-52831 Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.4, the Nuclio controller builds a curl invocation string for each cron trigger and stores it as the args of a Kubernetes CronJob container /bin/sh, -c, . Two fields in the trigger specification flow...
EUVD-2026-70220
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.4, the Nuclio controller builds a curl invocation string for each cron trigger and stores it as the args of a Kubernetes CronJob container /bin/sh, -c, . Two fields in the trigger specification flow...
CVE-2026-52831 Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.4, the Nuclio controller builds a curl invocation string for each cron trigger and stores it as the args of a Kubernetes CronJob container /bin/sh, -c, . Two fields in the trigger specification flow...
CVE-2026-52831 Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.4, the Nuclio controller builds a curl invocation string for each cron trigger and stores it as the args of a Kubernetes CronJob container /bin/sh, -c, . Two fields in the trigger specification flow...
CVE-2026-52831
CVE-2026-52831 affects Nuclio , a serverless framework for real-time events and data processing. In versions prior to 1.16.4 , the Nuclio controller builds a curl invocation string for each cron trigger and stores it as the args of a Kubernetes CronJob container (/bin/sh, -c, ). Two fields in the...
CVE-2026-79756 Nuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platform
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, the fix for unauthenticated OS command injection in the nuclio dashboard on the local/Docker platform is incomplete. The fix added validateFunctionName for function names and common.Quote for the...
EUVD-2026-70219
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, the fix for unauthenticated OS command injection in the nuclio dashboard on the local/Docker platform is incomplete. The fix added validateFunctionName for function names and common.Quote for the...
CVE-2026-79756 Nuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platform
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, the fix for unauthenticated OS command injection in the nuclio dashboard on the local/Docker platform is incomplete. The fix added validateFunctionName for function names and common.Quote for the...
CVE-2026-79756 Nuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platform
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, the fix for unauthenticated OS command injection in the nuclio dashboard on the local/Docker platform is incomplete. The fix added validateFunctionName for function names and common.Quote for the...
CVE-2026-79756
Nuclio is a serverless framework for real-time events and data processing. Prior to version 1.17.4 , an incomplete fix for unauthenticated OS command injection in the Nuclio dashboard on the local/Docker platform leaves the list-all resource path vulnerable: when no specific resource name is prov...