shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

Cockpit Web Console < 360 - Remote Code Execution

Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH...

CVE-2018-19518

CVE-2018-19518 अंतिम रिपोर्ट यहाँ : https://gitlab.com/ensimag-security/CVE-2018-19518/-/jobs/artifacts/master/raw/rapport.pdf?job=PDF उपयोग ऐप चलाएँ root@kitploit: docker-compose up -d वेब ऐप के लिए सामान्य उपयोग का उदाहरण। imap : webmail.grenoble-inp.org user : [email protected] password :...

advisories

عني تويتر: @justinsteven المدونة: https://www.justinsteven.com/ النشرات الأمنية مُدرجة بترتيب زمني عكسي. انقر على أي عنوان لقراءة النشرة الأمنية الكاملة. ثغرة XSS في DOM عبر postMessage في أداة Gartner Peer Insights تاريخ الإفصاح: 2023-02-03 كانت أداة Gartner Peer Insights Widget تعاني من ثغرة XS...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

EUVD-2026-64763

fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding...

GHSA-FPH4-WMHF-6FWF fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding

Impact fast-uri decodes a hostname's percent escapes twice in a single normalize or resolve call: once during parsing and again during authority recomposition. A nested percent-encoded host therefore survives the first decode and is turned into a live destination by the second, so...

resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames

A flaw was found in the resolv gem. This vulnerability arises from the incorrect handling of DNS label lengths during message encoding. A remote attacker could exploit this by providing a specially crafted hostname to an application utilizing the resolv gem. This could lead to the bypass of...

resolv: Resolv gem: DNS allowlist and egress bypass, and cache poisoning via crafted hostnames

A flaw was found in the resolv gem. This vulnerability arises from the incorrect handling of DNS label lengths during message encoding. A remote attacker could exploit this by providing a specially crafted hostname to an application utilizing the resolv gem. This could lead to the bypass of...

cve-2026-59891-control-lab

CVE-2026-59891: مختبر الانحدار والتحكم مشروع تمرين عملي معزول وتدقيق للقراءة فقط read-only يقارن الإصدار الفعلي المُصاب والإصدار المُصحَّح من @sigstore/oci باستخدام المدخلات نفسها، ويفحص شروط التعرّض حسب البيئة. مُبلِّغ CVE الخاص بهذا المشروع هو gyubin02. ملخّص مخصص للتوظيف والمقابلات: حالة أتمتة...

poc-proxycommand-vulnerable

असुरक्षित /.ssh/config के माध्यम से RCE ProxyCommand में %h, %p जैसे टोकन का उपयोग सुरंगों और कनेक्शन प्रॉक्सीिंग के लिए SSH का उपयोग करके काफी लोकप्रिय है। असुरक्षित कॉन्फ़िगरेशन root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p नोट: अपने प्रारंभिक...

EUVD-2026-69711

The values of the mail.allowedattachmenthostnames advanced config setting were used in a regular expression without escaping. For some possible valid hostnames, this could allow certain unintended hostnames to also match and serve remote attachments. This vulnerability was fixed in Thunderbird 15...

CVE-2026-84642

The values of the mail.allowedattachmenthostnames advanced config setting were used in a regular expression without escaping. For some possible valid hostnames, this could allow certain unintended hostnames to also match and serve remote attachments. This vulnerability was fixed in Thunderbird 15...

CVE-2026-84642

CVE-2026-84642 affects Mozilla Thunderbird , where the mail.allowed_attachment_hostnames advanced config setting values were inserted into a regular expression without escaping . For certain valid hostnames, this regex injection allowed unintended hostnames to match , enabling remote attachments ...

CVE-2026-84642 Allowed UNC hostnames for attachments interpreted as a regular expression

The values of the mail.allowedattachmenthostnames advanced config setting were used in a regular expression without escaping. For some possible valid hostnames, this could allow certain unintended hostnames to also match and serve remote attachments. This vulnerability was fixed in Thunderbird 15...

CVE-2025-32462-

CVE-2025-32462 – Sudo होस्टनाम बायपास विशेषाधिकार वृद्धि विषय-सूची 1. अवलोकन 2. भेद्यता विवरण 3. प्रभाव 4. प्रयोगशाला वातावरण 5. भेद्य संस्करण की पुष्टि 6. उपयोगकर्ता और sudoers कॉन्फ़िगरेशन 7. शोषण चरण-दर-चरण 8. प्रूफ ऑफ कॉन्सेप्ट सारांश 9. उबंटू क्यों भेद्य नहीं है 10. शमन 11. MITRE ATT&CK मैपि...

CVE-2026-84194 LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname

LibreNMS versions = 23.10.0 and getDevice-hostname is concatenated into shell commands ssh, virsh list/dumpxml/domstate in VminfoLibvirt.php and passed to exec without escapeshellarg or argument separation. An authenticated admin can set a crafted device hostname to inject arbitrary OS commands,...

EUVD-2026-69031

LibreNMS versions = 23.10.0 and getDevice-hostname is concatenated into shell commands ssh, virsh list/dumpxml/domstate in VminfoLibvirt.php and passed to exec without escapeshellarg or argument separation. An authenticated admin can set a crafted device hostname to inject arbitrary OS commands,...

CVE-2026-84194 LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname

LibreNMS versions = 23.10.0 and getDevice-hostname is concatenated into shell commands ssh, virsh list/dumpxml/domstate in VminfoLibvirt.php and passed to exec without escapeshellarg or argument separation. An authenticated admin can set a crafted device hostname to inject arbitrary OS commands,...