Moderate: Red Hat Security Advisory: assertj-core security update

An update for assertj-core is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

assertj: AssertJ: Information disclosure and denial of service via XML External Entity (XXE)

A flaw was found in AssertJ. An XML External Entity XXE vulnerability exists in the XmlStringPrettyFormatter component, which is used by the isXmlEqualToCharSequence assertion. If an application processes untrusted XML input using these methods, a remote attacker could exploit this flaw to read...

Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can...

Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can lead to...

CVE-2013-1965

CVE-2013-1965 CVE-2013-1965 भेद्यता के लिए एक प्रूफ ऑफ कॉन्सेप्ट एक्सप्लॉइट जो Apache Struts 2 को प्रभावित करता है।...

cve-2018-8120

CVE-2018-8120 win7 x64 Riferimenti https://github.com/unamer/CVE-2018-8120 https://github.com/FuzzySecurity/PSKernel-Primitives...

CVE-2023-49606

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Chiediamo il ritorno sicuro di tutti i cittadini che sono stati presi in ostaggio dal gruppo terroristico Hamas. Non ci fermeremo finché ogni ostaggio non sarà rilasciato e non tornerà a casa sano e salvo. Puoi aiutare a riportarli a...

CVE-2022-25636

CVE-2022-25636 Escalation dei privilegi del kernel netfilter toc Panoramica della vulnerabilità ID vulnerabilità: CVE-2022-25636 Prodotto vulnerabile: linux kernel - netfilter Versioni interessate: linux kernel 5.4 Impatto: scrittura heap out-of-bounds nel modulo kernel netfilter, può portare a...

phpstress

phpstress Night Lion Security proof of concept denial of service / stress tester per siti web PHP eseguiti con sistemi Apache e NGINX PHP-FPM e PHP-CGI Utilizzando una connessione via cavo/DSL standard, questo attacco può saturare la CPU e la RAM di un server web Linux usando richieste HTTP...

CVE-2017-0037

CVE-2017-0037 माइक्रोसॉफ्ट ब्राउज़र मेमोरी भ्रष्टाचार भेद्यता यह दस्तावेज़ CVE-2017-0037- माइक्रोसॉफ्ट ब्राउज़र मेमोरी भ्रष्टाचार भेद्यता के बारे में है। इसमें पहले रिमोट कोड निष्पादन RCE क्या है, इसका परिचय दिया जाएगा और फिर कुछ तकनीकी विवरणों पर चर्चा की जाएगी। रिमोट कोड निष्पादन क्या है? एक...

poc-cve-2023-2868

CVE-2023-2868: Befehlsinjektion in Barracuda ESG Für vollständige Details lesen Sie unsere AttackerKB Analysis. Verwendung Setzen Sie die LHOST- und RHOST-Variablen auf Ihren Listener. ruby poccve20232868.rb Dadurch wird eine Reverse Shell gestartet...

Log4J-RCE-Proof-Of-Concept

Log4J-RCE-Proof-Of-Concept CVE-2021-44228 Questa è una proof of concept della RCE di log4j. Ecco alcuni link per la CVE-2021-44228: https://www.lunasec.io/docs/blog/log4j-zero-day https://github.com/advisories/GHSA-jfh8-c2jp-5v3q https://github.com/apache/logging-log4j2/pull/608...

7-Zip-CVE-2025-0411-POC

7-Zip-CVE-2025-0411-POC Dettagli CVE-2025-0411 "Questa vulnerabilità Punteggio CVSS 7.0 consente a un utente malintenzionato remoto di bypassare il meccanismo di protezione Mark-of-the-Web nelle installazioni interessate di 7-Zip. È richiesta l'interazione dell'utente per sfruttare questa...

poc_CVE-2025-24016

Questo repository non contiene un README...

TP-Link-WDR-Router-Command-injection_POC

Questo repository non contiene un README...

log4shell4shell

log4shell4shell Log4j - Multitool. Trova & ripara possibili vulnerabilità CVE-2021-44228 - fornisce un ambiente completo di test/attacco LOG4SHELL Funzionalità Controlla il tuo sistema Linux/Mac/BSD e Windows per vulnerabilità CVE-2021-44228 Ripara il tuo sistema eliminando la classe java log4j /...

Log4j_dos_CVE-2021-45105

Log4j2 DOS CVE-2021-45105 Poc root@kitploit: $$::-$::-$$::-$ Betroffene Versionen: alle Versionen von 2.0-beta9 bis 2.16.0 Diese Anwendung basiert auf einer Spring Boot Webanwendung, die anfällig für CVE-2021-45105 ist Sie verwendet Log4j 2.16.0 Ausführen der Anwendung Führen Sie es aus:...

CVE-2026-79658

Ech0 before 5.0.1 does not impose any size or shape limit on the Accept-Language header processed by its i18n middleware, which runs on every HTTP request. The header is passed unfiltered to go-i18n's NewLocalizer, which internally calls golang.org/x/text/language.ParseAcceptLanguage. The...

CVE-2026-77996

Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 - Lack of escaping in the location custom field lead to a XSS vector...

Low: Red Hat Security Advisory: httpd security update

An update for httpd is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...