HydraDragonAV-Mobile

🐉 HydraDragonAV Mobile 高级 Android 杀毒软件，具备威胁防护功能 ⚠️ 项目暂停中。 这个项目没有获得足够的关注，因此我已 将其暂停一段时间。开发工作已转移到 HydraDragonAntivirus 。 Discord 社区服务器：https://discord.gg/7XMCuj5mbP 徽标由名为 1tophbeifong 的 Discord 用户制作 -3DDC84?style=for-the-badge&logo=android HydraDragonAV Mobile 是一款多层 Android 杀毒与安全套件，结合了静态分析（YARA-X +...

teler

!IMPORTANT ユーザーの皆様、 teler IDS の開発に関する重要なアップデートをお知らせいたします。 🛑 teler IDS の開発は現在一時停止しています。しかし、開発プロセス全体を向上させるために、ゼロから完全にリファクタリングするという大胆な一歩を踏み出すことにしましたので、お知らせいたします。🚀 並行して、teler IDS v3 のロードマップを積極的に策定しています。📝 現時点でお伝えできるのは、バージョン3では eBPF と teler-waf をサポートとして活用し、高度な機能と能力を約束するものです。🌟 teler IDS v3...

POC-CVE-2026-49975

-red CVE-2026-49975 HTTP/2 Bomb — HPACK 压缩炸弹 + 流控保持 PoC 由 naheeju 进行的安全研究 PoC ⚠️ 这是一个可用的内存耗尽型 DoS 工具——不是玩具。 它会打开流，迫使目标分配内存，并通过 HTTP/2 流控技巧保持这些流处于打开状态。只要进程在运行，它就会持续保持连接，并在服务器断开连接时自动重连 ——它不会自行停止。影响程度直接取决于 --threads、--streams 和 --headers。停止进程（Ctrl+C）会释放被保持的流，让服务器得以恢复，但默认操作方式绝非"温和"——请将每次运行都视为实弹测试。 1...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb PoC HTTP/2 远程拒绝服务漏洞复现工具 漏洞概述 CVE-2026-49975 是一个影响主流 Web 服务器的 HTTP/2 拒绝服务漏洞。该漏洞由安全公司 Calif（使用 OpenAI Codex）于 2026 年 6 月初发现。 攻击原理 1. HPACK 压缩炸弹 ：将极小的 header（如 "x: a"）插入服务器 HPACK 动态表，然后发送成千上万个 1-byte 的索引引用。每个引用迫使服务器分配大量簿记内存，但客户端只消耗极少带宽。内存放大比例可达 5700:1 （Envoy）和 4000:1 （Apac...

CVE-2026-104811

DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product. Authentication may be required to exploit this vulnerability. The specific flaw exists within the Configuration → Services → Music on Hold functionality...

EUVD-2026-92305

DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product. Authentication may be required to exploit this vulnerability. The specific flaw exists within the Configuration → Services → Music on Hold functionality...

CVE-2026-104811

The Mitel MiVoice Office 400 is vulnerable to remote code execution due to an improper file type validation flaw in the Music on Hold functionality. Located in the web portal on TCP port 443 (Configuration → Services), the application fails to properly restrict uploaded files to the intended WAV ...

CVE-2026-104811 Mitel MiVoice Office 400 Music on Hold WAV File Upload Code Execution

DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product. Authentication may be required to exploit this vulnerability. The specific flaw exists within the Configuration → Services → Music on Hold functionality...

CVE-2026-104811 Mitel MiVoice Office 400 Music on Hold WAV File Upload Code Execution

DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product. Authentication may be required to exploit this vulnerability. The specific flaw exists within the Configuration → Services → Music on Hold functionality...

CVE-2026-104811: Unrestricted Upload of File with Dangerous Type

DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product. Authentication may be required to exploit this vulnerability. The specific flaw exists within the Configuration → Services → Music on Hold functionality...

PT-2026-104776

DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product. Authentication may be required to exploit this vulnerability. The specific flaw exists within the Configuration → Services → Music on Hold functionality...

CVE-2026-45562

FreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, the FreePBX Music on Hold MoH module contains a critical security flaw that allows authenticated attackers to execute arbitrary system commands with the privileges of the Asterisk service. Authentication with an existing FreeP...

CVE-2026-45562 FreePBX: Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module

FreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, the FreePBX Music on Hold MoH module contains a critical security flaw that allows authenticated attackers to execute arbitrary system commands with the privileges of the Asterisk service. Authentication with an existing FreeP...

EUVD-2026-88385

FreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, the FreePBX Music on Hold MoH module contains a critical security flaw that allows authenticated attackers to execute arbitrary system commands with the privileges of the Asterisk service. Authentication with an existing FreeP...

CVE-2026-45562 FreePBX: Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module

FreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, the FreePBX Music on Hold MoH module contains a critical security flaw that allows authenticated attackers to execute arbitrary system commands with the privileges of the Asterisk service. Authentication with an existing FreeP...

CVE-2026-45562

The FreePBX Music on Hold (MoH) module is vulnerable to Authenticated Remote Code Execution in versions prior to 16.0.4 and 17.0.6 . The root cause is a lack of sanitization for a POST parameter that defines a custom Asterisk application . This unsanitized data is stored in the database and subse...

CVE-2026-45562: Improper Neutralization of Special Elements used in an OS Command

FreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, the FreePBX Music on Hold MoH module contains a critical security flaw that allows authenticated attackers to execute arbitrary system commands with the privileges of the Asterisk service. Authentication with an existing FreeP...

PT-2026-99957

FreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, the FreePBX Music on Hold MoH module contains a critical security flaw that allows authenticated attackers to execute arbitrary system commands with the privileges of the Asterisk service. Authentication with an existing FreeP...

UBUNTU-CVE-2026-97598

In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: bound automatic table ID allocation fibemptytable probes every table ID from 1 until it finds a free one. IPv4 tables are stored in a 256-bucket hash table, so a dense set of IDs makes each probe walk a growing hash...

CVE-2026-97598

The Linux kernel contains a vulnerability in the ipv4: fib component where the fib_empty_table() function probes every table ID starting from 1 until a free one is found. In a dense set of IDs, this causes each probe to walk a growing hash chain while the RTNL is held. To mitigate this, the autom...