staekka

Stækka Metasploit - 扩展 Metasploit 此 Msf 插件扩展了 Metasploit，补充了一些缺失的功能和模块，允许与其他/自定义的利用方式/获取 shell 访问的方法进行交互。当前的重点是 Linux/Unix 支持。 核心功能 TTY 支持：从 Metasploit 启动一个 shell，允许与 TTY 支持交互，并将会话迁移到 Metasploit 中。这允许自定义获取 shell 的方式（私有非 Metasploit 利用方式），并将此 shell 用作 Metasploit 会话以执行后渗透模块。还有另一个 SSH 模块，可在与会话交互时使用 T...

CVE-2024-47176

CUPS Browsd 데몬은 Linux/Unix 시스템에서 허용되는 경우 기본적으로 root로 실행되며, 네트워크의 모든 장치에서 새 프린터를 생성할 수 있도록 원격 연결을 허용합니다. python post 서버를 시작한 다음 프린터 추가 요청을 보내면, 프린터를 추가하기 위해 root로 HTTP 서버에 연결되는 것을 확인할 수 있습니다...

Linux Distros Unpatched Vulnerability : CVE-2026-73198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18nmessages endpoint by sending an arbitrarily large...

Linux Distros Unpatched Vulnerability : CVE-2026-76219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython versions before 3.1.58 contain an arbitrary file overwrite vulnerability in IndexFile.fromtree, IndexFile.reset, and IndexFile.mergetree methods that...

Linux Distros Unpatched Vulnerability : CVE-2026-74987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another...

Linux Distros Unpatched Vulnerability : CVE-2026-23933

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Zabbix 7.4 the cryptographic key used for signing Frontend sessions has been erroneously written to the database seed. Currently the only known exploitation...

GO-2024-2914 vulnerabilities

Vulnerabilities for packages: rancher-machine, docker-machine-driver-harvester...

Linux Distros Unpatched Vulnerability : CVE-2026-63296

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration. When migrating an...

EUVD-2026-57619

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files...

Linux Distros Unpatched Vulnerability : CVE-2026-70622

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::appenddirall function that allows attackers to read files outside t...

Linux Distros Unpatched Vulnerability : CVE-2026-18663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in 389-ds-base. The getldapmessagecontrolsext function frees the parsed controls array on the Session Tracking critical-control rejection path...

Linux Distros Unpatched Vulnerability : CVE-2026-71287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti's sanitizesqlcolumn lib/functions.php sanitizes user-supplied ORDER BY column names using the regex . Because this allowlist retains letters, digits,...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a missing bounds check in smartcardunpackreadsizealign libfreerdp/utils/smartcardpack.c:1703 allowed a malicious RDP server to crash the FreeRDP client through a reachable WINPRASSERT → abort mechanism. This...

Astra Linux – Vulnerability in Firefox and Thunderbird

A use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.0, the gdisurfacebits function processed SURFACEBITSCOMMAND messages sent by the RDP server. When these commands were processed using NSCodec, the bmp.width and bmp.height values provided by the server were not...

Linux Distros Unpatched Vulnerability : CVE-2026-19404

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in 389 Directory Server. The CleanAllRUV and Abort CleanAllRUV replication-maintenance extended operations perform no authorization check,...

Linux Distros Unpatched Vulnerability : CVE-2026-59090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the blockrem variable, occurs when a user opens a...

SUSE CVE-2026-19138

Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

[SECURITY] Fedora 43 Update: samba-4.23.10-1.fc43

Samba is the standard Windows interoperability suite of programs for Linux and Unix...

Linux Distros Unpatched Vulnerability : CVE-2026-19137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially...