10489 matches found
CVE-2022-34962
OpenTeknik LLC OSSN RED SOCIAL DE CÓDIGO ABIERTO v6.3 LTS Explicación de la vulnerabilidad: Se descubrió que OpenTeknik LLC OSSN RED SOCIAL DE CÓDIGO ABIERTO v6.3 LTS contiene una vulnerabilidad de cross-site scripting XSS almacenado a través del módulo Group Timeline. Vectores de ataque: El...
ssj
SSJ - Your everyday Linux distribution gone Super Saiyan. Introduction SSJ is a silly little script that makes use of Docker installed on your everyday Linux distribution Ubuntu, Debian, etc. and magically arms it with hundreds of penetration testing and forensic tools. Technical Details SSJ pull...
rita
RITA Real Intelligence Threat Analytics If you get value out of RITA and would like to go a step further with hunting automation, futuristic visualizations, and data enrichment, then take a look at AC-Hunter. Brought to you by Active Countermeasures. Sponsored by BHIS. RITA is an open source...
dr_checker
DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...
ad-honeypot-autodeploy
ad-honeypot-autodeploy Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically. Runs on self-hosted virtualization using libvirt with QEMU/KVM but it can be customized easily for cloud-based solutions. Used for painlessly set up a small Windows Domai...
CVE-2022-34963
OpenTeknik LLC OSSN RED SOCIAL DE CÓDIGO ABIERTO v6.3 LTS Explicación de la vulnerabilidad: Se descubrió que OpenTeknik LLC OSSN Red Social de Código Abierto v6.3 LTS contiene una vulnerabilidad de cross-site scripting XSS almacenado a través del módulo News Feed. Vectores de ataque: El atacante...
exist
EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS : Python vulnerabilities (USN-8744-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8744-1 advisory. It was discovered that Python's...
exploit-CVE-2025-39946
README Este es un exploit para CVE-2025-39946. Funcionará en la instancia kCTF lts-6.12.48 pero no es 100% fiable. Escribí una publicación en mi blog analizando esta vulnerabilidad en detalle. Mírala aquí! Adaptación para otras versiones del kernel La única modificación que el exploit debería...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS : OpenSSH vulnerabilities (USN-8721-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / Pro Realtime 22.04 LTS / Pro Realtime 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8721-1 advisory. It was discovered that OpenSSH's ssh-agent incorrectly handled interactions...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 26.04 LTS : ImageMagick vulnerabilities (USN-8739-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8739-1 advisory. It was discovered that ImageMagick incorrectly handled certain images. An attacker could...
Ubuntu 16.04 LTS : PHP vulnerabilities (USN-8734-1)
The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8734-1 advisory. It was discovered that PHP incorrectly handled Apache map decoding in SOAP servers with a typemap configured. A remote attacker could use this issue to...
CVE-2024-23897-Jenkins-Arbitrary-Read-File-Vulnerability
Jenkins es un servidor de automatización de código abierto. Ayuda a automatizar las partes del desarrollo de software relacionadas con la compilación, las pruebas y el despliegue, facilitando la integración continua y la entrega continua. CVE-2024-23897 Vulnerabilidad de lectura arbitraria de...
CVE-2023-43494
CVE-2023-43494 Jenkins 2.50 hasta 2.423 ambos inclusive, LTS 2.60.1 hasta 2.414.1 ambos inclusive Lectura de archivos Referencias: https://www.jenkins.io/security/advisory/2023-09-20/SECURITY-3261 http://www.openwall.com/lists/oss-security/2023/09/20/5...
DirtyFrag
本地提权 / 容器逃逸 CVE-2026-43284 / CVE-2026-43500 使用方式: CGOENABLED=0 go build -ldflags="-s -w" -o dirtyfrag . ./dirtyfrag 影响版本: Ubuntu 24.04.4 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS 14.04 LTS RHEL 8.x,9.x,10.1 CentOS 8,9,10 Rocky Linux 8,9,10 Oracle Linux 8,9...
Debian dla-4773 : libssh2-1 - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4773 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4773-1 [email protected]...
Linux Distros Unpatched Vulnerability : CVE-2026-84256
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An argument parsing issue in OpenVPN 2.1rc10 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows remote authenticated users to execute arbitrary comman...
Linux Distros Unpatched Vulnerability : CVE-2026-78043
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and...
Linux Distros Unpatched Vulnerability : CVE-2026-84226
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenVPN version 2.5.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network...
[SECURITY] [DLA 4771-1] chromium security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4771-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 04, 2026 https://wiki.debian.org/LTS -...