EUVD-2026-80287

In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones zonemd-check: yes which are located below but not at a trust anchor allow for an attack window where tampered with zone contents are served or stored to disk prior to the ZONEMD integrity check. Th...

CVE-2026-77955

In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones zonemd-check: yes which are located below but not at a trust anchor allow for an attack window where tampered with zone contents are served or stored to disk prior to the ZONEMD integrity check. Th...

Linux Distros Unpatched Vulnerability : CVE-2026-82717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and...

Linux Distros Unpatched Vulnerability : CVE-2026-77955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones zonemd-check: yes which are located below but not at a trust...

Linux Distros Unpatched Vulnerability : CVE-2026-81634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet...

Linux Distros Unpatched Vulnerability : CVE-2026-78227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLnet Labs Unbound 1.22.0 up to and including 1.26.1, has a use-after-free vulnerability when compiled for DNS-over-QUIC support with '--with-libngtcp2'. Each D...

Linux Distros Unpatched Vulnerability : CVE-2026-82720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with '--with-libnghttp2'. Durin...

Linux Distros Unpatched Vulnerability : CVE-2026-85501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. These result in degradation of service wh...

lab_xz_backdoor

Laboratoires de la porte dérobée XZ CVE-2024-3094 Des laboratoires pratiques et sécurisés pour comprendre la porte dérobée dans la chaîne d'approvisionnement de xz-utils — conçus pour les défenseurs, les étudiants et les équipes bleues. !WARNING Ce projet manipule un véritable logiciel malveillan...

CVE-2018-4121

CVE-2018-4121 - Exploit POC RCE des sections Wasm de Safari par MWR Labs c 2018 Détails cet exploit de preuve de concept ne cible que les versions Safari 11.0.3 13604.5.6 sur macOS 10.13.3 17D47 compiler le payload de votre choix en tant que dylib avec un constructeur exécuter python...

Google-chrome-zero-day

Google Chrome Zero-Day — Parcours de sécurité web Apprenez, pratiquez et défendez — éthiquement. Ce dépôt contient des supports de cours et des laboratoires pour le module Sécurité Web. Utilisez-les uniquement dans des environnements contrôlés et légaux VM, réseaux de laboratoire et suivez le Gui...

third-thoughts

Troisièmes Pensées Un projet de recherche de Lightless Labs étudiant le comportement des agents IA à grande échelle grâce à une analyse de corpus multidisciplinaire en gros, jeter des trucs contre le mur et voir ce qui colle. Nommé d'après le concept de Tiffany Aching du Disque-Monde : premières...

EUVD-2026-77773

A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand of the file src/capabilities/permissions.ts of the component Shell Command Execution. The manipulation results in incorrect behavior order: validate before canonicalize. The...

CVE-2026-90811

cosmicstack-labs mercury-agent (versions up to 1.2.0 ) contains an information disclosure weakness in the Shell Permission Manifest component, specifically in the PermissionManager.checkShellCommand function within mercury-agent/src/capabilities/permissions.ts. The attack requires local execution...

EUVD-2026-77766

A weakness has been identified in cosmicstack-labs mercury-agent up to 1.2.0. This affects the function PermissionManager.checkShellCommand of the file mercury-agent/src/capabilities/permissions.ts of the component Shell Permission Manifest. Executing a manipulation can lead to information...

CVE-2026-90810 cosmicstack-labs mercury-agent Shell Command Permission Check permissions.ts PermissionManager.checkShellCommand improper authorization

A security flaw has been discovered in cosmicstack-labs mercury-agent up to 1.1.13. The impacted element is the function PermissionManager.checkShellCommand of the file mercury-agent/src/capabilities/permissions.ts of the component Shell Command Permission Check. Performing a manipulation results...

FREAK-Attack-CVE-2015-0204-Testing-Script

Script de test pour l'attaque FREAK CVE-2015-0204 Script BASH basique pour automatiser les tests basés sur OpenSSL pour l'attaque FREAK CVE-2015-0204 comme conseillé par Akamai. C'est un logiciel libre et ne nécessite pas l'utilisation d'un serveur tiers. Votre serveur doit obtenir un score A+ au...

DFIR-LABS

О проекте DFIR LABS — это сборник заданий, направленных на отработку навыков от простых до продвинутых концепций в следующих областях: цифровая криминалистика, реагирование на инциденты, анализ вредоносного ПО и охота за угрозами. Проект ориентирован на профессионалов, исследователей безопасности...

labs

...

CVE-2026-85188

Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager Free, Pro 12.1.0, Conditional Content Free, Pro 8.0.0, Content Templater Pro 14.2.0, ReReplacer Pro 16.2.0 for Joomla - The Conditions editor creates a default Condition Set name from the item to which the se...