46607 matches found
CVE-2026-3869
CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and availability of the PLC provided an application project with a lower application level is running on the PLC...
CVE-2026-84387
creationtimestamp| type| source ---|---|--- 2026-09-11 13:55:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaprcwds62r...
poc-h2-CVE-2026-71554
CVE-2026-71554 - h2 Duplicate Host Header Request Smuggling Primitive This is my first CVE, and I have released this PoC to document the finding and help others understand and reproduce it. CVE: CVE-2026-71554 GHSA: GHSA-6hr6-w5qg-qmwg Affected: h2 = 4.4.0 Fixed: h2 4.4.1 Severity: Medium CWE-444...
BIT-TOMCAT-2026-55957 Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind
Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds using GSSAPI allowed attackers to authenticate without provided the correct password. This issue affects Apache Tomcat: from 11.0.0 through 11.0.4, from 10.1.0 through...
BIT-TOMCAT-2026-43513 Apache Tomcat: LockOutRealm treats user names as case-sensitive
Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0 through 11.0.21, from 10.1.0 through 10.1.54, from 9.0.0 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Older unsupported versions may also...
CVE-2026-89162
A flaw was found in PCRE2. The pcre2serializeencode function might disclose two bytes of information to an attacker. This vulnerability typically occurs in scenarios where the attacker already has unsafe access to the system, making exploitation difficult. The primary impact is a limited...
CVE-2026-16338
creationtimestamp| type| source ---|---|--- 2026-09-11 03:29:04+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mv7mrtrurl2y 2026-09-14 21:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvj3pffm7d2t 2026-09-14 22:08:10+00:00| seen|...
Fedora 44 : bluez (2026-d4156b5fc5)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d4156b5fc5 advisory. This update fixes a number of security issues. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
Linux Distros Unpatched Vulnerability : CVE-2026-89087
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cstruct package before 6.3.0 for OCaml mishandles indexes. CVE-2026-89087 Note that Nessus relies on the presence of the package as reported by the vendor...
RockyLinux 10 : kernel (RLSA-2026:66355)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66355 advisory. kernel: net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 Tenable has extracted the preceding description block directly from the RockyLin...
Fedora 43 : corosync (2026-c0427570d6)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c0427570d6 advisory. Fix CVE-2026-81666 and CVE-2026-81665 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
CVE-2025-32463
CVE-2025-32463 CVE-2025-32463...
WMIcmd
问题 在进行低影响调查及其他类似活动时，您可能希望尽量减少写入磁盘的内容/尽量不引人注意。 该工具允许我们通过 WMI 执行命令，并获取通过此通道无法以其他方式获得的信息。 目的 一个仅使用 WMI 的小型实用程序，用于： 执行命令行的 shell 命令 捕获这些命令的 stdout 并将其写入注册表 从注册表读取，然后删除 打印到本地 stdout 设计 该工具由以下部分组成： NCC Group 内部核心库（WMICore）的一个极小子集 命令执行（WMIcmd） 用法 root@kitploit:...
CVE-2022-26xx9
CVE-2022-26xx9 CVE-2022-26xx9...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.70 bug fix and security update
Red Hat OpenShift Container Platform release 4.16.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...
CVE-2025-67221
CVE-2025-67221 Resumen de la Vulnerabilidad...
Fedora 46 : ruby (2026-fbf03424ec)
The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fbf03424ec advisory. Update resolv gem in ruby.src to resolve security issues. Tenable has extracted the preceding description block directly from the Fedora security...
corosync-3.1.10-5.1 on GA media (moderate)
corosync-3.1.10-5.1 on GA media Announcement ID: openSUSE-SU-2026:11715-1 Rating: moderate Cross-References: CVE-2026-81665 CVE-2026-81666 CVSS scores: CVE-2026-81665 SUSE : 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-81665 SUSE : 7.7...