bcm4360-wpa3

WPA3-SAE + 802.11w sul Broadcom BCM4360 blob wl chiuso Apple/Broadcom non ha mai dato al BCM4360 14e4:43a0 il WPA3. Il suo unico driver Linux è il blob chiuso broadcom-sta wl; brcmfmac non può pilotarlo. Questo aggiunge WPA3-SAE + 802.11w PMF completo a quel blob chiuso — interamente dal software...

smt878u-ionstack-poc

smt878u-ionstack-poc Prova de conceito de re-root assistido por host, em C puro, para Samsung Galaxy Tab S7 SM-T878U / gts7l contra CVE-2026-43499 IonStack / GhostLock. A cadeia em tempo de execução usa apenas componentes nativos em C/ELF. Ela não requer Python, Java, DEX, appprocess ou uma JVM n...

phantomprint

PHANTOMPRINT Strumento di Analisi Ibrida Passiva per Profilazione e Intelligence Multiprotocollo Indipendente dal Sistema Operativo Riconosci gli host sulla tua rete senza inviare un singolo pacchetto. PHANTOMPRINT correla multipli segnali passivi stack TCP/IP, TLS/JA4, DHCP Option 55, HTTP/2...

kernel-debug-lab-for-virtual-box

So richtest du ein VirtualBox-Labor ein, um Kernel-Treiber mit Windbg zu debuggen Wir gehen hier davon aus, dass auf Computer A windbg bereits installiert ist und auf Computer B Visual Studio, das SDK und das WDK installiert sind. 1. Öffne den Host-Netzwerkmanager, um einen neuen...

webcvescanner

shitsniffer Erstellt eine Liste von Citrix Appliances in einem Land/Bundesstaat-Paar und prüft, ob sie anfällig für CVE-2019-19781 sind. Ergebnisse werden als JSON ausgegeben, die sich recht gut in einen aussagekräftigen PowerBI-Bericht einbinden lassen. Dies geschieht durch Abfragen von Shodan...

CVE-2026-78061

A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/email-sync/imap-client.ts of the component Email Sync. Executing a manipulation of the argument host/port can lead to server-side request forgery. It is possible to launch the...

CVE-2026-78061

CVE-2026-78061 affects vas3k TaxHacker up to version 0.8.2 . The vulnerability is a server-side request forgery (SSRF) in the Email Sync component, specifically in the function buildImapConfig within lib/email-sync/imap-client.ts. An attacker can manipulate the host/port arguments to force the se...

EUVD-2026-64626

A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/email-sync/imap-client.ts of the component Email Sync. Executing a manipulation of the argument host/port can lead to server-side request forgery. It is possible to launch the...

CVE-2026-78061 vas3k TaxHacker Email Sync imap-client.ts buildImapConfig server-side request forgery

A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/email-sync/imap-client.ts of the component Email Sync. Executing a manipulation of the argument host/port can lead to server-side request forgery. It is possible to launch the...

CVE-2026-78061 vas3k TaxHacker Email Sync imap-client.ts buildImapConfig server-side request forgery

A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/email-sync/imap-client.ts of the component Email Sync. Executing a manipulation of the argument host/port can lead to server-side request forgery. It is possible to launch the...

starlette-host-header-lab

Starlette Host-Header URL Confusion Lab X41-2026-002 Un laboratorio formativo containerizzato e autonomo che riproduce la vulnerabilità di bypass dell'autenticazione in Starlette, divulgata da X41 D-Sec. Advisory: X41-2026-002 GHSA: GHSA-86qp-5c8j-p5mr CWE: 436 — Conflitto di interpretazione /...

dsh2shell

dsh2shell Unauthenticated RCE PoC for expo...

Security Bulletin: This Power System update is being released to address CVE-2026-17494

Summary Power Systems Firmware is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system, giving full control over the host system...

uacscript

Vulnérabilité de contournement de l'UAC dans Windows Script Host Les exécutables Windows Script Host souffrent d'une vulnérabilité due à l'absence d'un manifeste incorporé. En utilisant une autre exploitation, la combinaison des fichiers « wusa.exe » et « makecab.exe » peut être copiée dans le...

Security Bulletin: This Power System update is being released to address CVE-2026-16933

Summary Power Systems Firmware is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can read and write arbitrary regions of host system memory, giving full control over the host system and all hoste...

Security Bulletin: This Power System update is being released to address CVE-2026-17063

Summary Power Systems Firmware is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can access and disrupt host processor state, potentially affecting the managed system and all hosted partitions,...

Security Bulletin: This Power System update is being released to address CVE-2026-17429

Summary Power Systems Firmware is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker with service account or root access to the BMC/FSP can write arbitrary data to hardware control registers, allowing full control over the host system and all hosted...

CVE-2026-77087

Paperclip before 0.3.1 in default localtrusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a malicious webpage that, when visited by a developer running Paperclip locally, uses DNS rebinding to make authenticated A...

EUVD-2026-63991

Paperclip before 0.3.1 in default localtrusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a malicious webpage that, when visited by a developer running Paperclip locally, uses DNS rebinding to make authenticated A...

CVE-2026-77087

Paperclip before 0.3.1 running in its default local_trusted mode fails to validate Host headers , enabling DNS rebinding attacks. An attacker can craft a malicious webpage that, when visited by a developer with Paperclip running locally, makes authenticated API requests and executes arbitrary com...