sslscan

sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...

aggressor_snippets

aggressorsnippets A collection of random small Aggressor snippets that don't warrant their own repo locate This Aggressor alias will call the underlying Linux OS command 'locate'. The envisioned use for this is when a custom defined alias is being used in CobaltStrike which requires the full path...

The vulnerability of the `ovs_netdev_tunnelDestroy()` function in the `net/openvswitch/vport-netdev.c` module, which supports Open vSwitch routers in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ovsnetdevtunnelDestroy function in the net/openvswitch/vport-netdev.c module, which supports Open vSwitch routers in the Linux operating system, is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow an attacker to compromise th...

Astra Linux – Vulnerability in Chromium

In ANGLE, reading outside the bounds of the allowed area in Google Chrome on Linux before version 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: Medium...

CVE-2026-25292

The CVE-2026-25292 issue is a memory corruption vulnerability in the fastboot command handler used for audio framework configuration in Automotive Linux OS. The root cause, as described, is processing untrusted user input, leading to memory corruption with high impact on confidentiality, integrit...

Exploit for CVE-2025-49132

CVE-2025-49132 Proof of Concept PoC This repository contain...

CVE-2025-47322

CVE-2025-47322 involves a memory corruption (use-after-free) flaw in IOCTL handling to set mode in Qualcomm embedded platform firmware/ MSM kernel components. Affected: Qualcomm embedded platform firmware; root cause: use-after-free leading to memory corruption. Impact: potential arbitrary code e...

EUVD-2019-10211

Malware in sbrugna...

EUVD-2010-4269

Malware in sbrugna...

EUVD-2016-1493

Malware in sbrugna...

EUVD-2014-9557

Malware in sbrugna...

EUVD-2025-2128

Malicious code in bioql PyPI...

Set Linux OS Identifier

Establishes a unique identifier for Linux machines that we can use going forward to determine if the machine attributes fit Linux checks. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid240164; scriptversion"1.1"; scriptsetattributeattribute:"pluginmodificationdate...

CVE-2024-51491

notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. The issue was identified during Quarkslab's security audit on the Certificate Revocation List CRL based revocation check feature. After retrieving the CRL, notation-go...

CVE-2025-21437 Use After Free in Automotive Linux OS

Memory corruption while processing memory map or unmap IOCTL operations simultaneously...

CVE-2025-21437 Use After Free in Automotive Linux OS

Memory corruption while processing memory map or unmap IOCTL operations simultaneously...

CVE-2025-21437

The connected sources describe CVE-2025-21437 as a race condition in Qualcomm chipset memory management: when processing memory map and unmap IOCTLs concurrently, a use-after-free causes memory corruption. Root cause is a missing synchronization between hfastrpc mem map and mem unmap operations, ...

CVE-2025-21425 Improper Access Control in Automotive Linux OS

Memory corruption may occur due top improper access control in HAB process...

CVE-2025-21425 Improper Access Control in Automotive Linux OS

Memory corruption may occur due top improper access control in HAB process...

CVE-2025-21425

CVE-2025-21425 affects Qualcomm chipsets (HAB process) with memory corruption caused by improper access control. Impact is high (confidentiality, integrity, availability per sources). Exploitation status not indicated in the provided documents; details on affected versions are not consistently pr...