Lucene search
K

805 matches found

Fedora
Fedora
added 2 days ago11 views

[SECURITY] Fedora 44 Update: haveged-1.9.22-1.fc44

A Linux entropy source using the HAVEGE algorithm Haveged is a user space entropy daemon which is not dependent upon the standard mechanisms for harvesting randomness for the system entropy pool. This is important in systems with high entropy needs or limited user interaction e.g. headless server...

7.8CVSS5.4AI score0.00004EPSS
Exploits0
GithubExploit
GithubExploit
added 4 days ago37 views

cyber-pentools

🔥 Cyber Pentools — All-in-One Penetration Testing Toolkit 2...

5.9AI score
Exploits0
The Hacker News
The Hacker News
added 6 days ago13 views

Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five Months

Unknown attackers spent at least five months inside the Outlook mailbox of a senior executive at a major global stock exchange, copying the inbox out in small, repeated batches and routing it through Dropbox and OneDrive so the traffic blended into normal cloud activity. Symantec and Carbon Black...

5.8AI score
Exploits0
Microsoft Secure
Microsoft Secure
added 2026/05/14 3:0 p.m.9 views

Kazuar: Anatomy of a nation-state botnet

In this article 1. Delivery 2. Module types 3. Botnet operations 4. Who is Secret Blizzard? 5. Mitigation and protection guidance 6. Microsoft Defender detections Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard, has been under constant development for...

6.1AI score
Exploits0
Debian CVE
Debian CVE
added 2026/05/06 11:28 a.m.3 views

CVE-2026-43250

In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: udc: fix DMA and SG cleanup in epnuke The ChipIdea UDC driver can encounter "not page aligned sg buffer" errors when a USB device is reconnected after being disconnected during an active transfer. This occurs becau...

7.8CVSS5.8AI score0.00018EPSS
Exploits0
Packet Storm News
Packet Storm News
added 2026/03/26 12:0 a.m.0 views

Unicornscan 0.4.52

Unicornscan is an information gathering and correlation engine built for and by members of the security research and testing communities. It was designed to provide an engine that is Scalable, Accurate, Flexible, and Efficient. It is released for the community to use under the terms of the GPL...

5.8AI score
Exploits0
Metasploit
Metasploit
added 2026/02/24 6:58 p.m.203 views

GrandStream GXP1600 Gather Credentials

This gather module works against Grandstream GXP1600 series VoIP devices and can collect HTTP, SIP, and TR-069 credentials from a device. You can first leverage the exploit/linux/http/grandstreamgxp1600unauthrce exploit module to get a root session on a target GXP1600 series device before running...

5.8AI score
Exploits0
CVE
CVE
added 2026/02/04 4:8 p.m.13 views

CVE-2026-23100

The CVE-2026-23100 entry concerns the Linux kernel mm/hugetlb code and a fix for hugetlb_pmd_shared(). The vulnerability stemmed from how shared PMD tables were detected; the patch set switches to using an independent shared count and the ptdesc_pmd_is_shared() check, so that shared PMD tables ar...

5.5CVSS5.3AI score0.00033EPSS
Exploits0References7Affected Software1
GithubExploit
GithubExploit
added 2026/02/03 4:18 p.m.259 views

Exploit for Improper Input Validation in Boa Boa_Webserver

BOA Router Exploit Framework !Python Versionhttps://img...

10CVSS6.1AI score0.84527EPSS
Exploits9
Packet Storm News
Packet Storm News
added 2026/01/29 12:0 a.m.10 views

osTicket 1.18.3 Intelligence and Security Analysis Module

This Metasploit auxiliary module is designed for intelligence gathering, security analysis, and vulnerability discovery in osTicket installations. It performs passive and active reconnaissance without direct exploitation and stores results in the Metasploit database for reporting...

8.7CVSS5.9AI score0.91924EPSS
Exploits18
Packet Storm News
Packet Storm News
added 2026/01/28 12:0 a.m.5 views

Unicornscan 0.4.51

Unicornscan is an information gathering and correlation engine built for and by members of the security research and testing communities. It was designed to provide an engine that is Scalable, Accurate, Flexible, and Efficient. It is released for the community to use under the terms of the GPL...

5.9AI score
Exploits0
Packet Storm News
Packet Storm News
added 2026/01/20 12:0 a.m.7 views

VulnResolver: A Hybrid Agent Framework for LLM-Based Automated Vulnerability Issue Resolution

As software systems grow in complexity, security vulnerabilities have become increasingly prevalent, posing serious risks and economic costs. Although automated detection tools such as fuzzers have advanced considerably, effective resolution still often depends on human expertise. Existing...

5.6AI score
Exploits0
Packet Storm News
Packet Storm News
added 2026/01/20 12:0 a.m.3 views

AttackMate: Realistic Emulation and Automation of Cyber Attack Scenarios across the Kill Chain

Adversary emulation tools facilitate scripting and automated execution of cyber attack chains, thereby reducing costs and manual expert effort required for security testing, cyber exercises, and intrusion detection research. However, due to the fact that existing tools typically rely on agents...

5.5AI score
Exploits0
Packet Storm News
Packet Storm News
added 2026/01/19 12:0 a.m.3 views

Unicornscan 0.4.43

Unicornscan is an information gathering and correlation engine built for and by members of the security research and testing communities. It was designed to provide an engine that is Scalable, Accurate, Flexible, and Efficient. It is released for the community to use under the terms of the GPL...

5.5AI score
Exploits0
Spring Engineering
Spring Engineering
added 2026/01/16 12:0 a.m.11 views

Spring AI Agentic Patterns (Part 2): AskUserQuestionTool - Agents That Clarify Before Acting

Traditional AI interactions follow a common pattern: you provide a prompt, the AI makes assumptions, and produces a response. When those assumptions don't match your needs, you're left iterating through corrections. Each assumption creates rework—wasting time and context. What if your AI agent...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2026/01/07 9:47 a.m.8 views

CVE-2017-6894

A vulnerability exists in FlexNet Manager Suite releases 2015 R2 SP3 and earlier including FlexNet Manager Platform 9.2 and earlier that affects the inventory gathering components and can be exploited by local users to perform certain actions with elevated privileges on the local system...

7.8CVSS6.7AI score0.0004EPSS
Exploits0References1
Malwarebytes
Malwarebytes
added 2026/01/02 10:16 a.m.5 views

How AI made scams more convincing in 2025

This blog is part of a series where we highlight new or fast-evolving threats in consumer security. This one focuses on howAI is being used to design more realistic campaigns, accelerate social engineering, and how AI agents can be used to target individuals. Most cybercriminals stick with what...

6.8AI score
Exploits0
GithubExploit
GithubExploit
added 2025/12/17 11:18 a.m.120 views

ProbeSuite

text...

6.8AI score
Exploits0
Packet Storm News
Packet Storm News
added 2025/12/16 12:0 a.m.13 views

PentestEval: Benchmarking LLM-Based Penetration Testing with Modular and Stage-Level Design

Penetration testing is essential for assessing and strengthening system security against real-world threats, yet traditional workflows remain highly manual, expertise-intensive, and difficult to scale. Although recent advances in Large Language Models LLMs offer promising opportunities for...

6.6AI score
Exploits0
Gitee
Gitee
added 2025/12/07 6:54 p.m.137 views

awesome-burp-extensions

This is a curated list of Burp Extensions, a collection of user-submitted plugins for the Burp Suite web application security testing tool. The repository is maintained under a CC0 1.0 Universal license, allowing for the permanent relinquishment of copyright and related rights to the works...

6.6AI score
Exploits0
Rows per page
Query Builder