Docker IPsec VPN Server

English | 简体中文 | 繁體中文 | Русский IPsec VPN Server on Docker Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Based on Alpine 3.23 or Debian 12 with Libreswan IPsec VPN software and xl2tpd L2TP daemon. An IPsec VPN encrypts your network traffic, so that nobody betwee...

CVE-2019-11043

CVE-2019-11043 PHP-FPM Remote Code Execution Screencast: https://youtu.be/d6benC5FVZM Overview This zero-day exploit in common PHP-FPM configurations was discovered during the Realworld CTF competition in 2019. A regular expression is used to parse the requested URI, but newline characters %0a ar...

fickling

Fickling Fickling es un descompilador, analizador estático y reescritor de bytecode para serializaciones de objetos pickle de Python. Puedes usar Fickling para detectar, analizar, aplicar ingeniería inversa o incluso crear archivos pickle o basados en pickle maliciosos, incluidos archivos PyTorch...

CVE-2023-4911

PoC of CVE-2023-4911 "Looney Tunables" This is a PoC of CVE-2023-4911 a.k.a. "Looney Tunables" exploiting a bug in glibc dynamic loader's GLIBCTUNABLES environment variable parsing function parsetunables. Code has been tested on Ubuntu 22.04.3 with glibc version 2.35-0ubuntu3.3. No attempts have...

PT-2026-102768

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A heap-buffer-overflow occurs when a TFTP server responds with a short ERROR packet. The client only verifies that the datagram is at least four bytes long, but...

Timing Side-Channel in SM2 Signature Generation

Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidd...

Amazon Linux 2023 : rsync, rsync-daemon (ALAS2023-2026-3131)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3131 advisory. Rsync versions before 3.4.3 contain a time-of-check to time-of-use TOCTOU race condition in daemon file handling that allows attackers to redirect file writes outside intended directories by...

Important: rsync

Issue Overview: Rsync versions before 3.4.3 contain a time-of-check to time-of-use TOCTOU race condition in daemon file handling that allows attackers to redirect file writes outside intended directories by replacing parent directory components with symbolic links. Attackers with write access to ...

PT-2026-102926

Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 21.7.11 Description The PyEnvCfg.write function writes prompt values verbatim to the line-oriented pyvenv.cfg format, while PyEnvCfg. read values parses the file using str.splitlines and accepts the last value for...

FreeBSD: VID-3f11e437-b7cd-11f1-a883-2cf05da270f3 (CVE-2026-4523): Gitlab -- vulnerabilities

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper...

PT-2026-102925

Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 21.7.12 Description The BatchActivator.quote function fails to properly sanitize prompt text before it is inserted into a cmd.exe set statement within the activate.bat file. An attacker capable of influencing the...

CVE-2026-100806: Use of Uninitialized Variable

Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

PT-2026-102657

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description SM2 signature generation uses non-constant-time arithmetic on secret values, creating a timing side-channel. The process computes the signature value using...

PT-2026-102923

Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 21.7.13 Description The generated activate bash and zsh and activate.fish scripts place values already escaped by shlex.quote inside an additional quoted context. In bash and zsh scripts, a crafted virtual...

CVE-2026-77696

Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidd...

CVE-2026-100799: Use of Uninitialized Variable

Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...

UBUNTU-CVE-2026-77696

Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidd...

ROS-20260929-73-0118

The vulnerability of the ocfs2findvictimchain function in the fs/ocfs2/suballoc.c component of the OCFS2 file system support in Linux’s kernel involves the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to cause a service failure...

Fedora 43 : chromium (2026-8729b61cd3)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8729b61cd3 advisory. Update to 154.0.8037.57 CVE-2026-95274: Improper output encoding in DevTools CVE-2026-95275: Incorrect reference resolution in MediaStream...

PT-2026-102956

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description An integer underflow in the IKE daemon iked allows a remote attacker to cause a denial of service. After completing the initial IKEv2 handshake, the attacker can crash the iked...