Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer. Since the report buffer is used by various drivers in various ways, let’s initialize it to zero during allocation, so that it cannot ever be used to leak kernel memory through special...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm: bridge: adv7511: Unregistering the i2c device after unregistering the CEC adapter. The cecunregisteradapter function assumes that the underlying CEC adapter is callable. For example, if the CEC adapter currently has a valid...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: octeontx2-af: fixed the issue where VF bring-up affected the promiscuous state of PF. The Mbox handling of nixsetrxmode for a VF with promiscuous and allmulti flags set to false causes the deletion of the PF’s promiscuous and...

Astra Linux – Vulnerability in python-ipaddress

The Lib/ipaddress.py module in Python up to version 3.8.3 incorrectly calculates hash values for the IPv4Interface and IPv6Interface classes. This may allow a remote attacker to cause a denial of service if an application relies on the performance of a dictionary containing IPv4Interface or...

CVE-2020-25078

CVE-2020-25078 使用说明 instructions 攻击url放同一目录下 ip.txt The attack IP is placed in the same directory as ip.txt Terminal log root@localhost:/CVE-2020-25078ls CVE-2020-25078.py ip.txt root@localhost:/CVE-2020-25078cat ./ip.txt https://xxx.xxx.xxx.xxx:3128 http://xxx.xxx.xxx.xxx:80...

CVE-2019-17137

CVE-2019-17137 CVE信息：https://vulners.com/cve/CVE-2019-17137 POC GET /index.htm%00currentsetting.htm HTTP/1.1 Host: 192.168.1.1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78.0 Accept: / Accept-Language:...

CVE-2026-100102

Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, potentially leading to compromise of the connected P4 Server...

CVE-2026-31431_je_sappelle_RoOt

CVE-2026-31431 - Copy Fail - Je s'appelle ROOT ! 📌 Objetivo del repositorio Este repositorio documenta la vulnerabilidad CVE-2026-31431 , apodada Copy Fail , y propone un procedimiento de remediación defensiva para sistemas Linux potencialmente expuestos. ⚠️ Este repositorio está estrictamente...

EUVD-2026-92295

Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, potentially leading to compromise of the connected P4 Server...

CVE-2026-36436-Public-Reference-Pack

CVE-2026-36436-Public-Reference-Pack Resumen Una vulnerabilidad en Trisolutions BRPerfX versión 1.4.4.0 expone las credenciales LDAP en texto plano dentro de la interfaz de configuración administrativa. Un administrador autenticado puede inspeccionar el código del lado del cliente utilizando las...

KUMO-Domain-Recon-Tool

Dale un dominio a Kumo y este mapea todo lo alcanzable sobre él en una sola pasada: DNS y seguridad de correo , certificados y subdominios de los registros CT, puertos abiertos , huellas de tecnologías , credenciales filtradas e infecciones por infostealer, buckets en la nube , y 358 comprobacion...

macchanger

GNU MAC Changer GNU MAC Changer es una utilidad que facilita la manipulación de direcciones MAC de interfaces de red. Sitio web: http://www.gnu.org/software/macchanger Repositorio: http://github.com/alobbs/macchanger Un saludo, Alvaro Lopez Ortega [email protected]...

CVE-2016-3962-Exploit

CVE-2016-3962, CVE-2016-3989 POC利用 这是针对Meinberg NTP时间服务器Web配置界面V5.30p版本的概念验证利用代码。该利用还利用了CVE-2016-3989提权至root用户。 关于这些漏洞的更多详情，请访问： https://www.securifera.com/advisories/cve-2016-3962-3988-3989/ https://ics-cert.us-cert.gov/advisories/ICSA-16-175-03...

CVE-2026-29519-Lucee-Reflected-XSS

CVE-2026-29519-Lucee-Reflected-XSS Lucee CFML 反射型 XSS 漏洞的概念验证 CVE-2026-29519 框架 0-Day：Lucee CFML URL 解析中的反射型 XSS 影响企业部署（版本 5.3.1.95 至 7.x） 发现者： Fouad Milat lavado 发现日期： 2025 年 12 月 6 日 CVE： CVE-2026-29519 厂商： Lucee Association 产品： Lucee CFML Server 受影响的版本： 从 5.3.1.95 到 7.0.0.395 及 7.x 的 22 个版本 描述...

CVE-2025-14340

XSS para la toma de control de la cuenta de administrador CVE-2025-14340 Una vulnerabilidad de Cross-Site Scripting en la interfaz REST de administración de Payara permite la ejecución de JavaScript controlado por el atacante, lo que provoca la toma de control de la cuenta de administrador. Esto ...

CVE-2025-24016

CVE-2025-24016 此检测方法如何工作？ 此Nuclei HTTP模板通过目标URL（及/app/login页面）检测Wazuh Web界面，利用正则表达式提取wazuhVersion值，并确认页面可访问（200状态）且确实是Wazuh UI（通过标题和关键词匹配）。如果提取的版本位于4.4.0至4.9.0之间（CVE-2025-24016的受影响范围），Nuclei将报告严重发现，表明不安全的反序列化可能导致远程代码执行。 如何运行此脚本？ 1. 从这里下载Nuclei 2. 将模板复制到本地系统 3. 运行以下命令：nuclei -u https://yourHost.co...

CVE-2020-17530-s2-061

CVE-2020-17530-s2-061 s2-061图形化界面的exp，only for fun and practice 使用 python CVE-2020-17530.py 填入目标地址 填入欲执行的系统命令 点击执行 PS：exp中内置了反弹shell函数，但懒得在GUI上添加相应的按钮和配置项，点到为止...

[SECURITY] Fedora 43 Update: cri-o1.36-1.36.6-1.fc43

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 44 Update: cri-o1.36-1.36.6-1.fc44

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

CVE-2018-0296

CVE-2018-0296 测试 CVE-2018-0296 并从 Cisco ASA 中提取用户名。 更多技术细节请参考 https://sekurak.pl/opis-bledu-cve-2018-0296-ominiecie-uwierzytelnienia-w-webinterfejsie-cisco-asa/。 帮助菜单 $ ./CVE-2018-0296 -h 选项: -h, --help 显示帮助信息 -u, --url 目标设备 URL -i Socks 代理 IP -p Socks 代理端口 -t, --time 每次循环之间休眠的秒数 --loop 循环模式 使用指南...