Cybersecurity-Home-Lab-Project-Documentation

Cybersecurity Home Lab — Project Documentation Author: Ga...

CVE-2026-87270

Oracle VM VirtualBox version 7.2.16 (component: Core , Windows host only ) is affected by a local vulnerability that allows a low-privileged attacker with logon access to achieve full takeover of the VirtualBox environment. The attack requires local access, has low complexity, and no user interac...

CVE-2026-87269

CVE-2026-87269 affects Oracle VM VirtualBox 7.2.16 (component: Core ), applying to Windows hosts only . An easily exploitable vulnerability allows a low-privileged local attacker with logon to the host to achieve full takeover of VirtualBox, impacting confidentiality, integrity, and availability ...

kernel-debug-lab-for-virtual-box

Cómo configurar un laboratorio de VirtualBox para depurar un controlador de kernel con Windbg Consideramos aquí que en el Equipo A windbg ya está instalado y en el Equipo B están instalados Visual Studio, el SDK y el WDK. 1. Abre el Administrador de red del host para crear o configurar un nuevo...

pentest-metasploitable2-lab

Análise de Exploração e Resposta a Incidente — Laboratório Met...

CVE-2026-67355

A flaw was found in guzzlehttp/guzzle. The software does not correctly enforce the "host-only" scope for cookies, which means it stores the request host in the cookie's domain field instead of restricting the cookie to the exact host. This vulnerability could allow an attacker who controls a...

Linux Distros Unpatched Vulnerability : CVE-2026-67355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as...

Duplicate Advisory: Guzzle: Host-only cookie scope is not preserved

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-wm3w-8rrp-j577. This link is maintained to preserve external references. Original Description guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the...

GHSA-MJRX-74JH-7XGW Duplicate Advisory: Guzzle: Host-only cookie scope is not preserved

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-wm3w-8rrp-j577. This link is maintained to preserve external references. Original Description guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the...

CVE-2026-67355

guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as host-only. Attackers controlling child hosts can receive host-only cookies intended only for parent hosts, potentially disclosing session...

UBUNTU-CVE-2026-67355

guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as host-only. Attackers controlling child hosts can receive host-only cookies intended only for parent hosts, potentially disclosing session...

CVE-2026-67355

guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as host-only. Attackers controlling child hosts can receive host-only cookies intended only for parent hosts, potentially disclosing session...

CVE-2026-67355

CVE-2026-67355 affects guzzlehttp/guzzle versions before 7.15.1. The issue is that host-only cookie scope is not preserved; the request host is stored in the Domain field instead of marking cookies as host-only. As a result, attackers controlling child hosts could receive host-only cookies intend...

CVE-2026-67355

guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as host-only. Attackers controlling child hosts can receive host-only cookies intended only for parent hosts, potentially disclosing session...

CVE-2026-67355 guzzlehttp/guzzle before 7.15.1 Host-only Cookie Scope

guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as host-only. Attackers controlling child hosts can receive host-only cookies intended only for parent hosts, potentially disclosing session...

CVE-2026-67355 guzzlehttp/guzzle before 7.15.1 Host-only Cookie Scope

guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as host-only. Attackers controlling child hosts can receive host-only cookies intended only for parent hosts, potentially disclosing session...

EUVD-2026-51845

guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as host-only. Attackers controlling child hosts can receive host-only cookies intended only for parent hosts, potentially disclosing session...

CVE-2026-67355 guzzlehttp/guzzle before 7.15.1 Host-only Cookie Scope

guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as host-only. Attackers controlling child hosts can receive host-only cookies intended only for parent hosts, potentially disclosing session...

Linux Distros Unpatched Vulnerability : CVE-2026-47054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable...

Incorrectly Specified Destination in a Communication Channel

Overview Affected versions of this package are vulnerable to Incorrectly Specified Destination in a Communication Channel via improper handling of host-only cookies in the CookieJar process. An attacker can obtain sensitive information such as session identifiers or authorization tokens by...