1889 matches found
lst2x64dbg
lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example $...
PrecIR
PrecIR Collection of software and hardware tools, their source code and design files for communicating with infrared based Electronic Shelf Labels. See http://furrtek.free.fr/index.php?a=esl for reverse-engineering of the system, the protocol and electronics. Thanks to @david4599 for infos about...
envizon
envizon - by evait security EOL https://github.com/evait-security/envizon/issues/130 We evait security moved to https://gitlab.com/invuls/pentest-projects/pcf for internal project documentation. network visualization & pentest reporting Version 5.0 This tool is designed, developed and supported b...
POC-CVE-2026-23520
CVE-2026-23520 — Arcane Lifecycle Label RCE OS Command Injection in Arcane Docker Management 1.13.0 Overview Arcane is a modern, web-based Docker management platform. Versions prior to 1.13.0 are vulnerable to an authenticated Remote Code Execution RCE via OS command injection in the updater...
CVE-2026-126348 Addressable display_uri can show misleading hosts with invalid Punycode A-labels
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.0.0 until 2.9.1, the pure-Ruby Addressable::IDNA.tounicode implementation decodes invalid Punycode A-labels instead of returning them unchanged. Labels that decode to ASCII text ...
CVE-2026-126348 Addressable display_uri can show misleading hosts with invalid Punycode A-labels
Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. From 2.0.0 until 2.9.1, the pure-Ruby Addressable::IDNA.tounicode implementation decodes invalid Punycode A-labels instead of returning them unchanged. Labels that decode to ASCII text ...
CVE-2026-126348
The Addressable library (versions 2.0.0 to 2.9.1 ) contains a vulnerability in its pure-Ruby Addressable::IDNA.to_unicode implementation. The flaw allows the library to decode invalid Punycode A-labels instead of returning them unchanged. This can result in Addressable::URI#display_uri showing a ...
UBUNTU-CVE-2026-121885
A flaw was found in Podman. An attacker can trigger a Denial of Service DoS by supplying a container image containing crafted metadata labels. Podman's auto-update mechanism improperly trusts these image labels to determine which system services to restart. If a user runs the malicious container...
CVE-2026-121885
A flaw was found in Podman. An attacker can trigger a Denial of Service DoS by supplying a container image containing crafted metadata labels. Podman's auto-update mechanism improperly trusts these image labels to determine which system services to restart. If a user runs the malicious container...
DRUPAL-CONTRIB-2026-339
This module provides a field type for storing structured data with multiple sub-fields, along with several widgets including a Search - autocomplete widget. The module’s autocomplete endpoint does not sufficiently escape stored field values before returning them as suggestion labels, which can...
CVE-2026-124689 Cross-Site Scripting in Kendo UI for jQuery ActionSheet Header Labels
In Progress Kendo UI for jQuery versions 2026.3.1014 up to, but not including, 2026.4.1110, ActionSheet does not encode title, subtitle, and header button label values before rendering them. An attacker who can influence these values can inject markup that executes as JavaScript when a user opens...
podman: Untrusted image labels allow auto-update to restart arbitrary systemd units
A flaw was found in Podman. An attacker can trigger a Denial of Service DoS by supplying a container image containing crafted metadata labels. Podman's auto-update mechanism improperly trusts these image labels to determine which system services to restart. If a user runs the malicious container...
CLEANSTART-2026-XJ31485 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
CVE-2026-39821 affects multiple packages. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
CVE-2026-63011
Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.167, 25.0.102, and 26.0.27, the Contact/labels JMAP endpoint in GroupOffice accepts a fully attacker-controlled template string tpl parameter that is passed without restriction to...
EUVD-2026-121330
Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.167, 25.0.102, and 26.0.27, the Contact/labels JMAP endpoint in GroupOffice accepts a fully attacker-controlled template string tpl parameter that is passed without restriction to...
CVE-2026-63011
The Group-Office enterprise CRM and groupware tool is vulnerable to arbitrary OS command execution prior to versions 6.8.167, 25.0.102, and 26.0.27 . The vulnerability exists in the Contact/labels JMAP endpoint , which accepts an attacker-controlled tpl parameter passed to TemplateParser::parse()...
CVE-2026-63011 GroupOffice Vulnerable to RCE in TemplateParser eval() via Contact/labels
Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.167, 25.0.102, and 26.0.27, the Contact/labels JMAP endpoint in GroupOffice accepts a fully attacker-controlled template string tpl parameter that is passed without restriction to...
CVE-2026-63011
Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.167, 25.0.102, and 26.0.27, the Contact/labels JMAP endpoint in GroupOffice accepts a fully attacker-controlled template string tpl parameter that is passed without restriction to...
CVE-2026-63011 GroupOffice Vulnerable to RCE in TemplateParser eval() via Contact/labels
Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.167, 25.0.102, and 26.0.27, the Contact/labels JMAP endpoint in GroupOffice accepts a fully attacker-controlled template string tpl parameter that is passed without restriction to...
CVE-2026-63011 GroupOffice Vulnerable to RCE in TemplateParser eval() via Contact/labels
Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.167, 25.0.102, and 26.0.27, the Contact/labels JMAP endpoint in GroupOffice accepts a fully attacker-controlled template string tpl parameter that is passed without restriction to...