Lucene search
+L

9134 matches found

Kitploit
Kitploit
added 2026/09/01 12:08 p.m.172 views

santa

Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...

6.1AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/01 1:54 a.m.6 views

wargame-turkey_in_2

wargame 1. flag file divide 2. Brute force prevent - delay 50005s 3. logging 4. password hashing -wargame-turkeyin2...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 2:43 p.m.7 views

keepass_poc

CVE-2022-0725 POC for KeePass CVE-2022-0725 Steps to Reproduce: Step 1: Run "journalctl -f" in a terminal window. Step 2: Double click a password in KeePass. Step 3: Wait for the clear timeout to trigger. Actual results: See your plain text password logged in the terminal window Expected results:...

7.5CVSS7.2AI score0.02451EPSS
SaveExploits1
NVD
NVD
added 2026/08/31 9:17 a.m.13 views

CVE-2026-82863

@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring...

8.7CVSS0.00145EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/31 8:46 a.m.7 views

EUVD-2026-68451

@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring...

8.7CVSS5.9AI score0.00145EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/31 8:46 a.m.17 views

CVE-2026-82863

@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. An attacker with appropriate access can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring....

8.7CVSS5.9AI score0.00145EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/31 8:46 a.m.5 views

CVE-2026-82863 @hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection

@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring...

8.7CVSS5.9AI score
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-18702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the enti...

6.4CVSS5.9AI score0.00209EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/29 5:17 p.m.7 views

UBUNTU-CVE-2026-82474

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging...

8.5CVSS5.9AI score0.00131EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/08/28 10:26 p.m.13 views

free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

Summary The AUSF component of free5GC compares authentication response values with normal Go equality helpers instead of constant-time cryptographic comparison functions. Two authentication flows are affected in internal/sbi/processor/ueauthentication.go: 1. 5G-AKA confirmation compares RES and...

8.7CVSS6.8AI score0.00652EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/08/28 10:26 p.m.11 views

GHSA-FP46-6VFW-GC9C free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

Summary The AUSF component of free5GC compares authentication response values with normal Go equality helpers instead of constant-time cryptographic comparison functions. Two authentication flows are affected in internal/sbi/processor/ueauthentication.go: 1. 5G-AKA confirmation compares RES and...

3.7CVSS6AI score0.00284EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/28 10:25 p.m.40 views

CVE-2026-55785 free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the AUSF component performs cryptographic authentication comparisons in internal/sbi/processor/ueauthentication.go with ordinary equality helpers. Auth5gAkaComfirmRequestProcedure compares RES and XRES with...

3.7CVSS0.00284EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/28 10:25 p.m.16 views

EUVD-2026-68017

free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the AUSF component performs cryptographic authentication comparisons in internal/sbi/processor/ueauthentication.go with ordinary equality helpers. Auth5gAkaComfirmRequestProcedure compares RES and XRES with...

3.7CVSS5.9AI score0.00284EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/28 8:16 a.m.14 views

CVE-2026-80704

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging The same as the rest of the code, getssinfofromatombios uses calcpllcs-ctx-logger for logging. But calcpllcs-ctx is initialized only later in calcpllmaxvcoconstruct. Therefore, any...

0.00159EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/08/28 6:53 a.m.13 views

CVE-2026-80704

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging The same as the rest of the code, getssinfofromatombios uses calcpllcs-ctx-logger for logging. But calcpllcs-ctx is initialized only later in calcpllmaxvcoconstruct. Therefore, any...

5.8AI score0.00159EPSS
SaveExploits0
OSV
OSV
added 2026/08/28 6:53 a.m.13 views

CVE-2026-80704 drm/amd/display: use proper context for logging

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging The same as the rest of the code, getssinfofromatombios uses calcpllcs-ctx-logger for logging. But calcpllcs-ctx is initialized only later in calcpllmaxvcoconstruct. Therefore, any...

5.8AI score
SaveExploits0References7
CVE
CVE
added 2026/08/28 6:52 a.m.23 views

CVE-2026-80689

CVE-2026-80689 affects the Linux kernel in the tracing/mmiotrace subsystem. The root cause is a NULL pointer dereference : when mmio_trace_rw() or mmio_trace_mapping() are invoked while mmio_trace_array is NULL (e.g., before initialization or after the tracer is disabled), the call chain into __t...

5.8AI score0.00168EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/08/28 6:52 a.m.13 views

CVE-2026-80689

In the Linux kernel, the following vulnerability has been resolved: tracing/mmiotrace: Add NULL check for mmiotracearray in logging functions mmiotracerw and mmiotracemapping retrieve mmiotracearray into tr and pass it to tracemmiotracerw and tracemmiotracemap. If these functions are invoked whil...

5.8AI score0.00168EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/08/28 12:00 a.m.9 views

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: jboss-logging (UTSA-2026-031578)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031578 advisory. It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non- default configurations. This could allows attackers with...

10CVSS6.4AI score0.99999EPSS
SaveExploits370References4
Tenable Nessus
Tenable Nessus
added 2026/08/28 12:00 a.m.11 views

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: jboss-logging (UTSA-2026-031579)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031579 advisory. Apache Log4j2 versions 2.0-alpha1 through 2.16.0 excluding 2.12.3 and 2.3.1 did not protect from uncontrolled recursion from self-referential lookups. This allows an...

5.9CVSS6.9AI score0.99999EPSS
SaveExploits21References4
Rows per page
Query Builder