sh4d0wup

sh4d0wup % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low level tampering,...

CVE-2021-41160

CVE-2021-41160 FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client...

CVE-2020-11097-POC

crash FreeRDP using CVE-2020-11097 POC start server as python3 test.py connect to server by follwoing command xfreerdp /v:127.0.0.1:3389 /u:user /p:pass /gt:127.0.0.1 /log-level:DEBUG...

CVE-2024-52510

Nextcloud X-E2EE-SIGNATURE Bypass POC Summary During normal operation of Nextcloud's E2EEv2 protocol, clients cryptographically sign folder-metadata before uploading to the server. This ensures the metadata has not been tampered with when it is re-fetched for the purposes of file-sharing or synci...

libssh2-Exploit

libssh2-Exploit Create an exploit to libssh2 vulnerabulity described in CVE-2019-13115 Goals 1. Establish an openssh server. // Complete by Oct 20 2. Create a libssh2 cpp client and establish connectivity to server. // Complete by Oct 20 3. Modify the server to trigger a crash in client. //...

JetBrains Toolbox App < 3.9 Insufficient Login Dialog Warning

The version of JetBrains Toolbox App installed on the remote host is prior to 3.9. It is, therefore, affected by a vulnerability: - In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server. CVE-2026-123320 Note that Nessus has not teste...

CVE-2026-125334

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.3, a forge.tls client can pass a handshake record to tls.handleHandshake while the connection has no session, including after a closenotify alert, after the application calls close, or...

CVE-2026-123320

In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server...

CVE-2026-123320

In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server...

CVE-2026-123320

In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server...

CVE-2026-123320

The JetBrains Toolbox App versions prior to 3.9 are susceptible to a security issue where an insufficient warning in the login dialog could allow a user to connect to a malicious server . This vulnerability is associated with CWE-357 (Insufficient UI Warning of Dangerous Operations). No specific ...

PT-2026-137966

Name of the Vulnerable Software and Affected Versions JetBrains Toolbox App versions prior to 3.9 Description An insufficient warning in the login dialog allows the application to connect to a malicious server. Recommendations Update JetBrains Toolbox App to version 3.9 or later...

CVE-2026-123320: JetBrains Toolbox App: In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server

In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server...

Astra Linux – Vulnerability in Firefox

By using XSL Transforms, a malicious webserver could serve a user an XSL document that would continue to execute JavaScript within the bounds of the same-origin policy even after the tab was closed. This vulnerability affects Firefox versions earlier than 97...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in Reader Mode in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page and a malicious server...

Astra Linux – vulnerability in curl

This flaw enables a malicious HTTP server to set “super cookies” in curl that are subsequently forwarded to multiple origins beyond what is normally permitted or possible. As a result, a site can set cookies that are then sent to different and unrelated sites and domains. This can be achieved by...

Linux Distros Unpatched Vulnerability : CVE-2026-110923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash- only path, or a .. basename that sftp uses as the local...

PT-2026-103071

Name of the Vulnerable Software and Affected Versions JupyterLab Desktop versions prior to 4.6.2-1 Description Remote-server URLs are inserted into the server-selection dialog and Welcome view without safe encoding. An attacker can convince a user to submit a crafted URL to execute JavaScript in...

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to a real service, the SDK's maintainers said in a security advisory. Affected versions sent the client secret, the authorization code, and the PKCE pro...

DEBIAN-CVE-2026-86334

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...