Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal through the restore path handling in lib/backup/actions/restore.go, lib/backup/common/part.go, and lib/backup/fslocal/fslocal.go. An attacker can write or overwrite files outside the configured -storageDataPath by...

CVE-2026-53804

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...

CVE-2026-53804

OTRS Community Edition is affected by an authenticated OS command injection in the PGP encryption module . The root cause is that administrator-supplied configuration values (PGP binary path and command options) are concatenated into a shell command without sanitization , enabling arbitrary comma...

CVE-2026-53804 OTRS Community Edition OS Command Injection via PGP Configuration

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...

CVE-2026-53804 OTRS Community Edition OS Command Injection via PGP Configuration

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...

EUVD-2026-63662

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...

CVE-2026-53804 OTRS Community Edition OS Command Injection via PGP Configuration

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...

CVE-2026-74379

A flaw was found in the Linux kernel's dax/kmem module. This vulnerability occurs when the system attempts to remove a memory resource that was not fully initialized, leading to an attempt to access a null pointer. A local attacker could potentially trigger this condition, causing the system to...

sadcloud

Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...

CVE-2026-74370

A flaw was found in the Linux kernel's liveupdate module. This vulnerability involves a Time-of-check to Time-of-use TOCTOU race condition within the luosessionretrieve function. A concurrent thread could release and free a session after it has been looked up but before a necessary mutex lock is...

WindowsFirewallHookDriverEnumeration

Enumerazione dei driver hook del firewall di Windows Strumenti per enumerare i driver hook del firewall di Windows su Windows 2000, XP e 2003. Abbiamo visto un campione di codice malevolo che utilizza questa tecnica. La tecnica di hooking La funzionalità Windows Firewall Hook nella tecnica XP/200...

Find-WSUS

🧭 Find-WSUS Entdecken Sie WSUS-Serverkonfigurationen in Gruppenrichtlinienobjekten GPOs – einschließlich versteckter Gruppenrichtlinienpräferenzen GPP. Find-WSUS ist ein PowerShell-Skript, das für Sicherheitsexperten und Systemadministratoren entwickelt wurde, um alle über GPOs konfigurierten...

R4venzCl4w

R4venzCl4w ◣◢ノ-=≡≡卍 Ein modulares Framework für Pentester und Bug Hunter , geschrieben in Python3. Inhaltsverzeichnis R4venzCl4w ◣◢ノ-=≡≡卍 Technologien & Werkzeuge Anforderungen Funktionen Funktionsimplementierung Installation Konfiguration Verwendung Optionen Beispiel Aufgaben Beitragen Lizenz 🔧...

hsm

zhsm Una libreria Hardware Security Module HSM per Zig che fornisce accesso PC/SC a token PIV , CAC e YubiKey. Stato Aspetto| Informazioni ---|--- Stabilità API| Sviluppo Versione Zig| 0.16.0 Piattaforme| Linux, macOS, Windows Licenza| MIT Caratteristiche Supporto PIV NIST SP 800-73-4 Recupero...

CVE-2025-12135

WPBookit getparam'csscode'; $jscode= $request-getparam'jscode'; updateoption 'wpbcustomcodedata', 'csscode' = $csscode, 'jscode' = $jscode ; Codeausführung aus /core/shortcodes/cla...

erica

Erica Ein Nachbar für das GreatFET One, der die 315/433/868/915-MHz-Bänder abdeckt. Dieser Nachbar ist kein Design von GreatScottGadgets. Wenn es also nicht funktioniert, gib nicht GSG die Schuld, sondern mir. Name Die Zweige der Pflanze Erica erinnern mich ein wenig an Antennen. Und genau darum...

crypto/x509: Incorrect enforcement of email constraints in crypto/x509

A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly...

Important: Red Hat Security Advisory: golang security update

An update for golang is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy

A flaw was found in the Go command cmd/go. A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the go command may then download and execute without proper verification...

Lime-RAT

Obsoleto. Archivialo invece di eliminarlo LimeRAT v0.1.9 Strumento di Amministrazione Remota per Windows Descrizione Semplice ma potente RAT per macchine Windows. Questo progetto è semplice e facile da capire, dovrebbe darti una conoscenza generale sui malware dotNET e su come si comportano...