DirtyFrag

Escalada de privilégio local / Escape de contêiner CVE-2026-43284 / CVE-2026-43500 Uso: CGOENABLED=0 go build -ldflags="-s -w" -o dirtyfrag . ./dirtyfrag Versões afetadas: Ubuntu 24.04.4 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS 14.04 LTS RHEL 8.x,9.x,10.1 CentOS 8,9,10 Rocky Linux...

CVE-2024-23897-Jenkins-Arbitrary-Read-File-Vulnerability

Jenkins ist ein Open-Source-Automatisierungsserver. Er hilft dabei, die Teile der Softwareentwicklung zu automatisieren, die mit dem Erstellen, Testen und Bereitstellen zusammenhängen, und erleichtert kontinuierliche Integration und kontinuierliche Bereitstellung. CVE-2024-23897Schwachstelle zum...

CVE-2023-43494

CVE-2023-43494 Jenkins 2.50 bis 2.423 jeweils inklusive, LTS 2.60.1 bis 2.414.1 jeweils inklusive Dateilesen Referenzen: https://www.jenkins.io/security/advisory/2023-09-20/SECURITY-3261 http://www.openwall.com/lists/oss-security/2023/09/20/5...

[SECURITY] [DLA 4754-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4754-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 25, 2026 https://wiki.debian.org/LTS -...

CVE-2022-34963

OpenTeknik LLC OSSN RÉSEAU SOCIAL OPEN SOURCE v6.3 LTS Explication de la vulnérabilité : OpenTeknik LLC OSSN RÉSEAU SOCIAL OPEN SOURCE v6.3 LTS a été découvert comme contenant une vulnérabilité de script intersite stocké XSS via le module News Feed. Vecteurs d'attaque : L'attaquant doit publier...

CVE-2022-34962

OpenTeknik LLC OSSN REDE SOCIAL DE CÓDIGO ABERTO v6.3 LTS Explicação da Vulnerabilidade: OpenTeknik LLC OSSN REDE SOCIAL DE CÓDIGO ABERTO v6.3 LTS foi descoberto por conter uma vulnerabilidade de cross-site scripting XSS armazenado através do módulo Group Timeline. Vetores de Ataque: O atacante...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

rita

RITA Real Intelligence Threat Analytics If you get value out of RITA and would like to go a step further with hunting automation, futuristic visualizations, and data enrichment, then take a look at AC-Hunter. Brought to you by Active Countermeasures. Sponsored by BHIS. RITA is an open source...

ssj

SSJ - Your everyday Linux distribution gone Super Saiyan. Introduction SSJ is a silly little script that makes use of Docker installed on your everyday Linux distribution Ubuntu, Debian, etc. and magically arms it with hundreds of penetration testing and forensic tools. Technical Details SSJ pull...

Debian dla-4754 : thunderbird - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4754 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4754-1 [email protected]...

dr_checker

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...

ad-honeypot-autodeploy

ad-honeypot-autodeploy Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically. Runs on self-hosted virtualization using libvirt with QEMU/KVM but it can be customized easily for cloud-based solutions. Used for painlessly set up a small Windows Domai...

[SECURITY] [DLA 4750-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4750-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 21, 2026 https://wiki.debian.org/LTS -...

CVE-2026-77506

Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS...

CVE-2026-77506

Znuny before LTS 6.5.22 is affected by a template XSS vulnerability in the AgentTicketEmailResend component. An attacker with high privileges and requiring user interaction can inject malicious content through the template, leading to low-impact cross-origin confidentiality and integrity compromi...

PT-2026-79119

Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS...

[SECURITY] [DLA 4745-1] linux-6.12 security update

Debian LTS Advisory DLA-4745-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings August 18, 2026 https://wiki.debian.org/LTS Package : linux-6.12 Version : 6.12.101-1deb12u1 CVE ID : CVE-2025-40098 CVE-2026-45897 CVE-2026-45901 CVE-2026-53078 CVE-2026-53090...

BIT-JENKINS-2026-70430

Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can be instantiated as part of the project naming strategy configuration, allowing attackers with Overall/Manage permission to instantiate arbitrary types related to configuration, including those...

Debian dla-4736 : python-django-doc - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4736 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4736-1 [email protected]...

EUVD-2026-54726

In Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series, sensitive key material held by the AES and DESede engines, the SP 800-90A DRBGs, SymmetricSecretKey and the PBKD and scrypt parameter classes was zeroised on garbage collection by...