CGA-2GGV-2MCC-Q9MG

Bulletin has no description...

CGA-7C7V-3R39-MFRR

Bulletin has no description...

CGA-23G2-RW8W-GC33

Bulletin has no description...

CGA-3W5R-HG32-4R2X

Bulletin has no description...

Security Bulletin: Vulnerabilities in Axios and Netty might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Axios and Netty. Vulnerabilities include Allowing attackers to reach sensitive loopback or internal services despite the configured protections, Prototype pollution in a third-party dependency may be leveraged...

CVE-2026-100077

A flaw was found in the Linux kernel's MSM DRM driver. This vulnerability can lead to a Denial of Service DoS during GPU recovery operations. If a hung command submission is retired before the hardware recovery process completes, the driver may release memory buffers that the GPU is still activel...

Aresius

Aresius The lightweight, native interception proxy for security testing. Fast. Cross-platform. 100% Open Source. Quick Start · Features · Why Aresius · Install · Roadmap · Community · Releases ⚡ What is Aresius? Aresius is a native, modern desktop HTTP/HTTPS interception proxy designed for...

Exploit for Code Injection in Flowiseai Flowise

CVE-2025-59528 — Flowise AI Account Takeover to RCE !Python...

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets

Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite ZCS to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 CVSS score: 8.9, an unauthenticated operating system comman...

CGA-4PC2-H9FP-PFG8

Bulletin has no description...

CGA-282P-PMCW-6MCW

Bulletin has no description...

CGA-5WX4-2WGM-P464

Bulletin has no description...

CGA-778R-78C6-P85W

Bulletin has no description...

Exploit-Machine

Analisis Kerentanan — Canto HackMyVM Breakdown alur exploit...

recce

recce Pentest enumeration, vulnerability triage, exploitation...

ish

iSH A project to get a Linux shell running on iOS, using usermode x86 emulation and syscall translation. For the current status of the project, check the issues tab, and the commit logs. App Store page TestFlight beta Discord server Wiki with help and tutorials README中文 如若未能保持最新，请提交PR以更新 Hacking...

CrushFTP-SSTI-LFI-Proof-of-Concept

CVE-2024-4040 — CrushFTP SSTI / LFI Prueba de Concepto Solo para uso educativo y de laboratorio autorizado. CS443 Seguridad de Software y Sistemas — entorno Docker local controlado. Resumen de la vulnerabilidad Campo| Detalle ---|--- CVE| CVE-2024-4040 Software afectado| CrushFTP … que el servido...

CacheTrap

CacheTrap Repository for "CacheTrap: Unveiling a Stealthier Gray-Box Trojan against LLMs" , IEEE/ACM International Conference on Computer-Aided Design ICCAD, 2026. arXiv CacheTrap searches for a single bit flip in the KV cache of a fine-tuned LLM classifier and measures the resulting attack succe...

Security Bulletin: Vulnerabilities exists in IBM Netezza Software

Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 11.3.1.4. Vulnerability Details CVEID:CVE-2026-42766 DESCRIPTION: Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summar...

CVE-2026-62097

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPTasty Business Directory business-directory-plugin allows Blind SQL Injection.This issue affects Business Directory: from n/a through 6.4.27...