Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in zstd-jni

Summary IBM SPSS Modeler is affected by multiple vulnerabilities in zstd-jni. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-87795 DESCRIPTION: zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress...

Security Bulletin: IBM SPSS Modeler is affected by vulnerabilities in Apache OpenNLP

Summary IBM SPSS Modeler is affected by vulnerabilities in Apache OpenNLP. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-63317 DESCRIPTION: Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions...

Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty

Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-10571 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3...

AfterLife

AFTERLIFE Revocation Persistence Detection Lab When the password reset succeeds but the attacker never leaves. A local red/blue lab for one vulnerability class: the credential that outlives the event that was supposed to kill it. It ships the exploit, the root cause, the fix, a three-rule detecti...

alibi

alibi Cross-check the views of your attack surface and find the endpoints that cannot corroborate each other. An endpoint should be able to account for itself. It is in the code, so a contract should describe it. It is in the contract, so something should implement it. It takes real traffic, so i...

OpenSSL_1.0.1g_After

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

ShuckNT

🔐 ShuckNT : Shuck hash before trying to crack it | Shuck.sh's script ShuckNT is the script of Shuck.sh online service for on-premise use try it online!. It is design to dowgrade, convert, dissect and shuck authentication token based on Data Encryption Standard DES. Algorithms / formats supported ...

DEFCON-31-Syscalls-Workshop

Indirect Syscalls: A journey from high to low RedOps | Red Team Village | DEF CON 31 Getting Started All the theory and playbooks for the exercises can be found in the wiki, which together with the prepared POCs is the heart of this project. The POCs for the exercises can be found here on the mai...

Percino

Percino Evasive Golang Loader Percino is a Golang loader that execute shellcode utilizing the process hollowing technique with anti-sandbox and anti-analysis measures. The shellcode is encrypted with the Triple DES 3DES encryption algorithm. Full EDR bypass with any C2 Framework. Tested with Coba...

Security Bulletin: Due to use of Apache Http Server, IBM Cloud Pak System is affected by HTTP Response splitting [CVE-2024-24795]

Summary HTTP Response splitting vulnerability has been identified in Apache HTTP Server. This vulnerability was addressed by IBM Cloud Pak System 2.3.6.2 Vulnerability Details CVEID:CVE-2024-24795 DESCRIPTION: HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker th...

Security Bulletin: IBM WebSphere Application Server Liberty prior to 26.0.0.10, bundled with IBM Enterprise Application Runtimes, is affected by multiple vulnerabilities

Summary IBM WebSphere Application Server Liberty prior to 26.0.0.10, which is bundled with IBM Enterprise Application Runtimes, is affected by multiple vulnerabilities. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...

Security Bulletin: IBM WebSphere Application Server Liberty prior to 26.0.0.10, bundled with IBM Cloud Pak for Applications, is affected by multiple vulnerabilities

Summary IBM WebSphere Application Server Liberty prior to 26.0.0.10, which is bundled with IBM Cloud Pak for Applications, is affected by multiple vulnerabilities. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected...

Security Bulletin: IBM WebSphere Application Server Liberty prior to 26.0.0.10, bundled with IBM WebSphere Hybrid Edition, is affected by multiple vulnerabilities

Summary IBM WebSphere Application Server Liberty prior to 26.0.0.10, which is bundled with IBM WebSphere Hybrid Edition, is affected by multiple vulnerabilities. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected...

Triage-CVE-2021-26855-ProxyLogon---Microsoft-Exchange-

Triage: CVE-2021-26855 ProxyLogon - Microsoft Exchange For this lab, the goal was to practice triaging a well-known real-world vulnerability the way a security team might: reading the CVE details, understanding the CVSS score, and reasoning through how risky it actually is depending on the...

Triage-CVE-2017-0144

Triage: CVE-2017-0144 EternalBlue / SMBv1 — associated with WannaCry spread For this lab, the goal was to triage another well-known real-world vulnerability, this time EternalBlue, the SMBv1 flaw that was famously exploited by the WannaCry ransomware outbreak. Step 1: Open the CVE in NVD I went t...

Security Bulletin: A vulnerability within WebSphere Application Server Liberty, affect IBM Tivoli Monitoring.

Summary A vulnerability within KCCI WebSphere Liberty Server which is included as part of IBM Tivoli Monitoring ITM portal server have been addressed. Vulnerability Details CVEID:CVE-2025-36047 DESCRIPTION: IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable to a deni...

MIPS-CVE-2014-9222

Disclaimer Tutorials are for informational and educational purposes only. I believe that ethical hacking, information security and cyber security should be familiar subjects to anyone using digital information and computers. I believe that it is impossible to defend yourself from hackers without...

CVE-2025-49493

Akamai CloudTest XXE Exploit CVE-2025-49493 Overview This is a Python-based exploit for CVE-2025-49493 , which affects Akamai CloudTest versions before 60 2025.06.02 12988. The vulnerability allows for XML External Entity XXE injection through the SOAP service endpoint. Vulnerability Details CVE ...

Triage-CVE-2021-44228-Log4Shell-Log4j-

Triage: CVE-2021-44228 Log4Shell / Log4j For this lab, the goal was to triage another well-known real-world vulnerability, Log4Shell, one of the most widely exploited vulnerabilities in recent years due to how common the affected library was across enterprise software. Step 1: Open the CVE in NVD...

OpenSSL-1_0_1g_CVE-2016-0702

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...