security_articles

securityarticles- Vulnerabilities in Connected V16 Beacons Article where I explain several vulnerabilities found in the Help Flash IoT V16 beacon. These vulnerabilities affect the beacon's communications and a WiFi software update mechanism. DEC-2025...

CVE-2007-3830

CVE-2007-3830 IBM Proventia Sensor Appliance - Múltiples vulnerabilidades de validación de entrada Publicación de Exploit-db en https://www.exploit-db.com/exploits/30290/ Documento de Exploit-db en:...

DVWA

DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Application DVWA is a PHP/MariaDB web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of...

CVE-2018-7211-PoC

CVE-2018-7211-PoC The PoC||GTFO of CVE-2018-7211 Reference: https://membership.backbox.org/idashboards-9-6b-multiple-vulnerabilities/ Requirements None, only Python Usage Run the script root@kitploit: $ git clone https://github.com/bowline90/CVE-2018-7211-PoC.git $ cd CVE-2018-7211-PoC $ chmod +x...

liferay-ga4-rce-research

Liferay CE 7.0.3 GA4 — Investigación de Vulnerabilidades RAPTOR Loop-Hunt Una auditoría de seguridad de Liferay Portal CE 7.0.3 GA4 git tag 7.0.3-ga4, commit b2d7cc68a realizada con la metodología RAPTOR loop-hunt : reconocimiento determinista → 25 agentes generadores aislados leyendo el código...

advisories

advisories "Testing can prove the presence of bugs, but not their absence." -- Edsger W. Dijkstra A collection of my public security advisories. See also https://github.com/hnsecurity/vulns https://hnsecurity.it/blog/author/marco-ivaldi/ Advisories Linux CVE-2006-1242. Linux kernel IP ID...

CVE-2018-16509

CVE-2018-16509 Ghostscript contiene múltiples vulnerabilidades de omisión del sandbox -dSAFER Ejecución root@kitploit: $ docker run -d --name cve-2018-16509 -p 9000:9000 cve-2018-16509...

CVE-2001-0932

CVE-2001-0932 Cooolsoft PowerFTP Server 2.0 3/2.10 - Múltiples vulnerabilidades de denegación de servicio 1 Publicación en Exploit-db en https://www.exploit-db.com/exploits/21162/ CVE-2001-0932 Cooolsoft PowerFTP Server 2.0 3/2.10 - Múltiples vulnerabilidades de denegación de servicio 2 Publicaci...

cisco-security-research

Cisco Security Research Researcher: 0xReadingSteiner Contact: [email protected] Vendor: Cisco Systems, Inc. Vendor Notified: 2026-08-04 Cisco PSIRT, ZDI, SSD Vendor Response: None Why This Exists Independent security research on commercially available Cisco products has identified critical...

nf-tables-lpe

nf-tables-lpe Exploits de Team Orca de Sea Security y Qrious Secure para múltiples vulnerabilidades en el módulo nftable de Netfilter...

GLSA-202609-02 : Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202609-02 Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi. Please review the CVE identifier...

Fedora 45 : mongo-c-driver (2026-83792d666c)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-83792d666c advisory. libmongoc 2.5.2 Fixes - Fix OCSP error handling. CVE-2026-84964 - Fix unsafe casts during JSON parsing. CVE-2026-84965 - Fix possible unsafe...

nbox-pwnage

nbox-pwnage root@kitploit: Here comes the paintrain! . lol . lol . lol o o ==== OO|nn. || | nbox | oo oo oo 'oo OOOO-| oo\ | +--+--+--+--+--+--+--+--+--+-$1-+--+--+--+--+--+--+ 1. Crea tu propio appliance de nbox: vagrant up 2. Accede por SSH al appliance con vagrant ssh 3. Comprueba algunas de...

Fedora 45 : freerdp2 (2026-20b7d49f70)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-20b7d49f70 advisory. Backport several CVE fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

Oracle Linux 9 : ELSA-2026-65153-0: / osbuild-composer (ELSA-2026-651530)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-651530 advisory. 175-1.0.2 - Rebuild to fix CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499, CVE-2026-42504, CVE-2026-56853, CVE-2026-56858,...

Fedora 43 : libevent (2026-728dd9f704)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-728dd9f704 advisory. Update to 2.1.13. The following security vulnerabilites are fixed in this update: - GHSA-fj29-64w6-73h6 CVE-2026-63383 - GHSA-45c6-qx49-89m8...

Security update for containerized-data-importer1.65 (important)

openSUSE security update: security update for containerized-data-importer1.65 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21824-1 Rating: important References: bsc1238699 bsc1239322 bsc1241838 bsc1248946 bsc1251495 bsc1251689 bsc1253506 bsc12537...

openSUSE 16 Security Update : hauler (openSUSE-SU-2026:21816-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21816-1 advisory. Changes in hauler: Update to 2.1.0 bsc1265425, CVE-2026-41888, bsc1278584, CVE-2026-56855,CVE-2026-56854,CVE-2026-78662, . Tenable has extracted...

ImageMagick < 6.9.13-51 / 7.x < 7.1.2-26 Multiple Vulnerabilities

The remote host has a version of ImageMagick installed that is prior to 6.9.13-51, or 7.x prior to 7.1.2-26. It is, therefore, affected by multiple vulnerabilities: - ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in color transformation to the log colorspace: when the operation...

CVE-2026-0309

creationtimestamp| type| source ---|---|--- 2026-09-10 05:17:42+00:00| seen| https://www.hkcert.org/security-bulletin/palo-alto-products-multiple-vulnerabilities20260910 2026-09-11 03:48:57+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117250361733177057...