CVE-2026-55394 Unencrypted 802.11 Network in Teledyne FLIR Robots running Aware2

Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions through 6.9.0.2 allows adjacent unauthenticated attackers to intercept, hijack, or modify session traffic against Teledyne FLIR PackBot robots running this software via sniffing or hijacking network traffic...

EUVD-2026-91049

Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to intercept, hijack, or modify session traffic against Teledyne FLIR PackBot robots running this software via sniffing or hijacking network traffic...

CVE-2026-14984 Cleartext HTTP for Control Traffic in Teledyne FLIR Robots running Aware2

Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to intercept, hijack, or modify session traffic against Teledyne FLIR PackBot robots running this software via sniffing or hijacking network traffic...

CVE-2026-14984

Teledyne FLIR Aware2 software, versions through 6.9.0.2 , is vulnerable to cleartext transmission in its primary control endpoints. This flaw allows remote unauthenticated attackers to intercept, hijack, or modify session traffic targeting Teledyne FLIR PackBot robots by sniffing or hijacking net...

CVE-2026-14984 Cleartext HTTP for Control Traffic in Teledyne FLIR Robots running Aware2

Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to intercept, hijack, or modify session traffic against Teledyne FLIR PackBot robots running this software via sniffing or hijacking network traffic...

CS-DropSpawn_BOF

DropSpawn 소개 DropSpawn은 DLL 하이재킹의 비교적 알려지지 않은 방법을 통해 추가 Beacon을 생성하는 데 사용되는 CobaltStrike BOF입니다. x86-x86, x64-x64, x86-x64 및 그 반대 방향으로 작동합니다. 프로세스 인젝션의 대안으로 사용하세요. Windows 실행 파일은 DLL 검색 순서를 따르며, 절대 경로가 지정되지 않은 DLL을 로드하려고 시도합니다: DLL 하이재킹은 일반적으로 다음 중 하나를 요구합니다: A. 사용자가 실제 DLL이 있는 폴더보다 검색 순서 우선순위가 높...

CVE-2026-42228

GHSA-f77h-j2v7-g6mw — n8n Несанкционированный перехват выполнения чата CVE: CVE-2026-42228 Серьёзность: Высокая Затронуто: n8n 1.123.32 Исправлено в: n8n 1.123.32 / 2.17.4 / 2.18.1 Сводка уязвимости chat-service.ts :: startSession принимает executionId из строки запроса WebSocket и только...

CVE-2025-60749

CVE-2025-60749 Уязвимость перехвата DLL в SketchUp Desktop 2025...

CVE-2026-37272

CVE-2026-37272 CVE-2026-37272 Описание Отражённая межсайтовая уязвимость XSS существует в /dashboard/settings.php в Bank Management System in Web 1.0. Уязвимость возникает из-за неправильной санитизации пользовательского ввода в GET-параметре msg. Злоумышленник может создать вредоносный URL,...

CVE-2024-40111-Exploit

CVE-2024-40111: Межсайтовый скриптинг XSS с сохранением в Automad 2.0.0-alpha.4 Детали эксплойта Название эксплойта : Межсайтовый скриптинг XSS с сохранением в Automad 2.0.0-alpha.4 Дата : 2024-06-20 Автор эксплойта : Jerry Thomas w3bn00b3r Домашняя страница вендора : Automad Ссылка на ПО :...

agentbox

🛡️ AgentBox Открытая песочница для ИИ-агентов Запускайте ИИ-агентов с уверенностью. Каждый агент получает собственную область разрешений, хранилище учётных данных, журнал аудита и аварийный выключатель. Зачем нужен AgentBox 27 января 2026 года CVE-2026-25253 стал первым CVE, когда-либо присвоенным...

CVE-2026-31281

CVE-2026-31281 Описание Totara LMS уязвим к HTLM-инъекции. Злоумышленник может внедрить вредоносный HTLM-код в сообщение и отправить его всем пользователям приложения, что приведет к выполнению кода и может привести к перехвату сеанса и выполнению команд в браузере жертвы CVSS 3 Score: 7.3 High Т...

IOBitMalwareFighterDLL

Malware Fighter LPE 0 day LPE, найденная мной в IObit Malware Fighter v. 13.2.0. Разбор: https://nathan2.com/files/iobit.pdf Общая информация: https://nathan2.com/posts/iobit/ Скомпилируйте DLL как x86 и назовите её Register.dll. Затем поместите её в Path вашей системы. По умолчанию это...

CVE-2026-30695

CVE-2026-30695 - XSS in Zucchetti Axess Summary A Cross-Site Scripting XSS vulnerability exists in the web-based configuration interface of Zucchetti Axess access control devices XA4, X3/X3BIO, X4, X7, XIO, i-door, i-door+. The vulnerability is caused by improper sanitization of user-supplied...

HotelDruid-CVE-2021-42948

CVE-2021-42948 HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's. The session token used to access authenticated pages of the application is passed using GET...

CVE-2026-25253-research

CVE-2026-25253 Proof of Concept One-click RCE on OpenClaw via Cross-Site WebSocket Hijacking. DISCLAIMER: This code is provided for authorized security research and educational purposes only. Use of this code against systems without explicit written permission is illegal and unethical. The author...

CVE-2026-6184-stored-XSS

Stored XSS in News Title - Simple Content Management System PHP Description A Stored Cross-Site Scripting XSS vulnerability exists in Simple Content Management System PHP. The News Title field in the admin panel does not sanitize user input before storing it in the database and reflecting it on t...

CVE-2025-60880

CVE-2025-60880: Stored Cross-Site Scripting XSS in Bagisto Admin Panel An authenticated stored XSS vulnerability exists in the Bagisto 2.3.6 admin panel's product creation path, allowing an attacker to upload a crafted SVG file containing malicious JavaScript code. This vulnerability can be...

CVE-2026-22794-POC

CVE-2026-22794 - Appsmith Origin Header Injection 🔴 Critical Security Vulnerability Password Reset Link Hijacking via Origin Header Manipulation This repository contains a Proof of Concept PoC exploit for CVE-2026-22794, a critical vulnerability in Appsmith that allows attackers to hijack passwor...

openclaw-vuln-report

OpenClaw Vulnerability Analysis Report Chinese Interpretation of Security Vulnerability CVE-2026-25253 Read Online GitHub Pages: https://joseph19820124.github.io/openclaw-vuln-report/ Vulnerability Summary CVE : CVE-2026-25253 Score : CVSS 8.8 High Type : Cross-Site WebSocket Hijacking Impact :...