24175 matches found
Credential-Hunting
CredsHunter credshunter — это программа для поиска учётных данных, доступная только для чтения, предназначенная для авторизованного пост-эксплуатационного использования. Она однократно обходит хост и выявляет секреты, которые можно повторно использовать — пароли, ключи, хэши и файлы с учётными...
AgentWard
AgentWard · 玄甲OS AgentWard 玄甲 è un sistema operativo di sicurezza full-stack progettato specificamente per il deployment affidabile e scalabile di agenti AI, con adattamento nativo del codice a OpenClaw. AgentWard unifica l'onboarding degli agenti, il ragionamento sicuro e l'esecuzione affidabile...
ROOT-OS-DEBIAN-13-CVE-2026-53106 CVE-2026-53106 in linux - Patched by Root
Root has patched CVE-2026-53106 in the linux package for Root:Debian:13. Multiple fixed versions available...
Gnuboard 5 - Cross-Site Scripting
Gnuboard 5 contains a cross-site scripting vulnerability via the $GET'LGDOID' parameter. id: CVE-2021-3831 info: name: Gnuboard 5 - Cross-Site Scripting author: arafatansari severity: medium description: | Gnuboard 5 contains a cross-site scripting vulnerability via the $GET'LGDOID' parameter...
Emerson Dixell XWEB-500 - Arbitrary File Write
Emerson Dixell XWEB-500 contains an arbitrary file write caused by unauthenticated access to /cgi-bin/logoextraupload.cgi, /cgi-bin/calsave.cgi, and /cgi-bin/loutils.cgi, letting attackers write any file on the system, exploit requires no authentication. id: CVE-2021-45420 info: name: Emerson...
Aquatronica Controller System <= 5.1.6 - Information Disclosure
Aquatronica Controller System firmware 5.1.6 and earlier and web interface 2.0 and earlier contain an information disclosure vulnerability caused by unauthenticated access to tcp.php endpoint, letting remote attackers retrieve sensitive configuration data including plaintext credentials, exploit...
GnuBoard5 5.5.16 - Open Redirect
Gnuboard5 5.5.16 contains an open redirect vulnerability caused by insufficient URL parameter verification in bbs/logout.php, letting remote attackers redirect users to arbitrary URLs, exploit requires crafted URL parameter. id: CVE-2024-37656 info: name: GnuBoard5 5.5.16 - Open Redirect author:...
JoomSport <= 5.7.7 - SQL Injection
The JoomSport WordPress plugin through 5.7.7 is vulnerable to unauthenticated time-based blind SQL injection via the 'sortf' GET parameter in the player list view. The parameter value is backtick-wrapped and directly concatenated into an ORDER BY clause. id: CVE-2026-42647 info: name: JoomSport =...
Discuz! X5.0 - Authentication Bypass
Discuz! X5.0 20260320 through 20260501 contains an authentication bypass caused by exploitation of a shared cryptographic key and encryption oracle in dbbak.php and loggingctl::loggingmore, letting unauthenticated remote attackers access database backup and restore functions, exploit requires...
EUVD-2026-54678
JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login...
ROOT-OS-DEBIAN-12-CVE-2025-23146 CVE-2025-23146 in linux - Patched by Root
Root has patched CVE-2025-23146 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-21955 CVE-2025-21955 in linux - Patched by Root
Root has patched CVE-2025-21955 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-38530 CVE-2025-38530 in linux - Patched by Root
Root has patched CVE-2025-38530 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-5372 CVE-2025-5372 in libssh - Patched by Root
Root has patched CVE-2025-5372 in the libssh package for Root:Debian:12. Multiple fixed versions available...
Security Bulletin: IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control (CVE-2026-9762)
Summary IBM® Db2® is vulnerable to remote code execution when jdbc url is under user control. Vulnerability Details CVEID:CVE-2026-9762 DESCRIPTION: IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control. CWE:CWE-94:...
ROOT-OS-UBUNTU-2204-CVE-2025-40198 CVE-2025-40198 in linux - Patched by Root
Root has patched CVE-2025-40198 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2025-21768 CVE-2025-21768 in linux - Patched by Root
Root has patched CVE-2025-21768 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2025-68733 CVE-2025-68733 in linux - Patched by Root
Root has patched CVE-2025-68733 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...