10839 matches found
CVE-2020-2551
CVE-2020-2551 Скрипт развёртывания этого проекта протестирован на версии 10.3.6; версия 12 не тестировалась. Окружение kali+weblogic10.3.6+jdk6u25 Убедитесь, что объём памяти машины, на которой развёртывается weblogic, составляет не менее 1.5G, поскольку в параметрах скрипта указано -x1024m...
cve-2019-1108
Эксплуатация CVE-2019-1108 CVE-2019-1108 Remote Desktop Protocol Client Information Disclosure Vulnerability Published: 07/09/2019 | Last Updated : 11/19/2019 MITRE CVE-2019-1108 An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its...
CVE-2025-15467
CVE-2025-15467: Переполнение стека в OpenSSL CMS AuthEnvelopedData Обзор CVE-2025-15467 — это критическая уязвимость переполнения стекового буфера в коде разбора CMS Cryptographic Message Syntax в OpenSSL. Уязвимость существует в функции evpciphergetasn1aeadparams при обработке векторов...
raven
Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...
Datart v1.0.0-rc.3 - Remote Code Execution
Datart v1.0.0-rc.3 contains a vulnerability that allows remote attackers to execute arbitrary code via INIT connection parameters. id: CVE-2025-56819 info: name: Datart v1.0.0-rc.3 - Remote Code Execution author: Redmomn severity: critical description: | Datart v1.0.0-rc.3 contains a vulnerabilit...
gftrace
gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...
wavecrack
Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...
CVE-2026-94592 Armatura LLC Armatura One Use of Hard-coded Credentials
Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can...
elfloader
Summary elfloader is a super simple loader for ELF files that generates a flat in-memory representation of the ELF. Pair this with Rust and now you can write your shellcode in a proper, safe, high-level language. Any target that LLVM can target can be used, including custom target specifications...
CVE-2026-85086
Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
EUVD-2026-91068
: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63...
CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-
CVE-2025-2945 – аутентифицированный RCE в pgAdmin4 PoC Этот репозиторий содержит скрипт proof-of-concept , созданный для исследований в области безопасности и авторизованного тестирования на проникновение, связанных с уязвимостью CVE-2025-2945 , затрагивающей определённые версии pgAdmin4. Проблем...
CVE-2026-71448
: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63...
CVE-2026-71448
The Johnson Controls EasyIO FS32 (versions before 3.0b63 ) is susceptible to an Insecure Default Initialization of Resource vulnerability (CWE-1188). This security flaw allows for Authentication Abuse . The documents do not provide specific technical details regarding the root cause, exploit vect...
CVE-2026-71448
: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63...
Llama-Stack-0.4.0rc3-local-CVE-2026-25211
Llama Stack pgvector 비밀번호 유출 PoC CVE-2026-25211 로컬 PoCProof-of-Concept — llama-stack 버전 0.4.0rc3의 초기화 로그에서 데이터베이스 비밀번호가 평문으로 노출되는 취약점을 시연합니다. 개요 영향을 받는 llama-stack 버전0.4.0rc3 이전에서는 pgvector 벡터 저장소 제공자를 사용할 때, PostgreSQL 데이터베이스 비밀번호가 서버 또는 벡터 저장소 초기화 중 평문 으로 로그에 기록됩니다. 이 정보는 다음 위치에 나타납니다: stdout /...
CVE-2026-79900
The boks_ksllogsd component is vulnerable to a heap overflow during KSL checksum initialization. The issue occurs because affected releases verify that OpenSSL recognizes a digest name provided in the MD field of an authenticated KSL start message but fail to validate that the name fits within a ...
CVE-2026-79900 Heap overflow in KSL checksum initialization
boksksllogsd accepts a checksum algorithm name in the MD field of an authenticated KSL start message. Affected releases verify that OpenSSL recognizes the digest name but do not verify that the value fits in a fixed 16-byte checksum context field before copying it. An authenticated KSL client can...
