CVE-2024-3094

xz-utils Vulnerability Check and Update Utility This script is designed to check for vulnerabilities in the installed version of xz-utils on your system. If a vulnerable version is detected, the script offers to automatically download and install a stable version to mitigate potential security...

Linux---Security---Detect-and-Mitigate-CVE-2024-3094

Linux- Security- Detect and Mitigate CVE-2024-3094 It was determined that malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. It was determined that only certain operating systems and operating system versions were affected by this vulnerability. This repo...

CVE-2022-30190

CVE-2022-30190 Mitigation for CVE-2022-30190 Script requires to be run as Adminstrator. This script has been tested with Connectwise Automate RMM tool for deployment. I found this solution cleaner than backup up and deleting anything from the registry, as this can simply update the DWORD key valu...

log4j2-rce-recap

Little recap of the log4j2 remote code execution CVE-2021-44228 Requirements maven = 3 java = 8 no running ldap on 127.0.0.1:1389 Usage Build with maven. mvn test The surefire plugin will be executed two times: ExploitabilityTest proofs the expolitability of the bug. MitigationTest will be execut...

Artica Web Proxy 4.30 - Authentication Bypass/SQL Injection

Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter in fw.login.php. id: CVE-2020-17506 info: name: Artica Web Proxy 4.30 - Authentication Bypass/SQL Injection author:...

cve-2019-17240

Bludit = 3.9.22 - Bruteforce Mitigation Bypass This is small project where I rewrite this python script into golang. Purpose of this project was to learn Golang and understand how this exploit work. Usage $ ./brutepass -sdasds flag provided but not defined: -sdasds Usage of ./brutepass: -c int...

secuimag3a

Based on a flaw or vulnerability either proposed by the instructor or chosen by you which must be related to the proposed theme: Specify which service or program is compromised, and what type of compromise it is Explain the vulnerability, describe the mechanism used to exploit it Does this flaw...

SUSE SLED15 / SLES15 Security Update : go1.27 (SUSE-SU-2026:4863-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4863-1 advisory. Update to go 1.27.3 bsc1272545: - CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific...

HP Device Manager - Security Update

Potential vulnerabilities have been identified in the HP Device Manager. HP has released a mitigation patch for PHP. This will be included by default in the next release 5.0.18. Mitigation is now available...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-guard Scanner, interim-mitigation and incident-hunt...

Security update for go1.27

This update for go1.27 fixes the following issues: Update to go 1.27.3 bsc1272545: CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority bsc1286317, bsc1286261. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

Cacti v1.2.8 - Remote Code Execution

Cacti v1.2.8 is susceptible to remote code execution. This vulnerability could be exploited without authentication if "Guest Realtime Graphs" privileges are enabled. id: CVE-2020-8813 info: name: Cacti v1.2.8 - Remote Code Execution author: gy741 severity: high description: Cacti v1.2.8 is...

Ruby Dragonfly <1.4.0 - Remote Code Execution

Ruby Dragonfly before 1.4.0 contains an argument injection vulnerability that allows remote attackers to read and write to arbitrary files via a crafted URL when the verifyurl option is disabled. This may lead to code execution. The problem occurs because the generate and process features mishand...

VMware Aria Operations for Logs - Unauthenticated Remote Code Execution

VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for Logs may be able to execute arbitrary code as root. id: CVE-2023-20864 info: name: VMware Aria Operations for Logs - Unauthenticated Remo...

Craft CMS - Remote Code Execution via Template Path Manipulation

This template identifies a critical Remote Code Execution RCE vulnerability in Craft CMS, identified as GHSA-2p6p-9rc9-62j9. The vulnerability exists due to improper handling of the --templatesPath query parameter, allowing attackers to execute arbitrary code by referencing malicious Twig...

Exploit for CVE-2026-109618

PHP 8.0.30: CVE-2026-109618 / CVE-2026-109619 EnglishREADM...

CVE-2026-31431-patch

CVE-2026-31431-patch A temporary mitigation for CVE-2026-31431 vulneribility git clone https://github.com/rshosting/CVE-2026-31431-patch.git cd CVE-2026-31431-patch sh checkaead.sh Once server is back from reboot execute below script: sh completeaead.sh...

Important: Red Hat Security Advisory: golang security, bug fix, and enhancement update

An update for golang is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: golang security, bug fix, and enhancement update

An update for golang is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: golang security, bug fix, and enhancement update

An update for golang is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...