keimpx

Introduction keimpx is an open source tool, released under the Apache License 2.0. It can be used to quickly check for valid credentials across a network over SMB. Credentials can be: Combination of user / plain-text password. Combination of user / NTLM hash. Combination of user / NTLM logon...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell CVE-2026-109618 CVE-2026-109619 php2shell CVE-202...

php2shell

php2shell vulnerabilities CVE-2026-109618, CVE-2026-109619 Operational information last significant change: 21 October 2026 17:25 CEST Software list last status update: 22 October 2026 17:23 CEST TLP:CLEAR This repository contains operational information regarding the critical PHP vulnerabilities...

php2shell-poc

PHP2Shell Patch-Management Lab — CVE-2026-109618 / CVE-2026-10...

CVE-2026-20236

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2026-20291

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2026-20356

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2026-20043

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

EUVD-2026-107380

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

EUVD-2026-107377

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

EUVD-2026-107372

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2026-92162 Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstream

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on systems where at least one OCI remote is configured most common on Fedora systems, a malicious local user in an active local session could use a crafted architecture na...

CVE-2026-92162

The Flatpak application deployment framework is vulnerable to a path traversal vulnerability in the DeployAppstream D-Bus method. The issue stems from the flatpak-system-helper process failing to validate the arch parameter, allowing a malicious local user to supply ../ components. This can trick...

CVE-2026-92162 Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstream

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on systems where at least one OCI remote is configured most common on Fedora systems, a malicious local user in an active local session could use a crafted architecture na...

CVE-2026-34008

Notes Station 3 is vulnerable to a Privilege Escalation flaw caused by an incorrect permission assignment for a critical resource. Specifically, a world-writable crontab path is monitored and executed by a root-owned process. A local attacker with user-level access can exploit this to compromise ...

domi-owned

Domi-Owned Resumen Domi-Owned es una herramienta utilizada para comprometer servidores IBM/Lotus Domino. Probado en IBM/Lotus Domino 8.5.2, 8.5.3, 9.0.0 y 9.0.1 ejecutándose en Windows y Linux. Requisitos Domi-Owned usa Python 3, el cual puede instalarse a través del gestor de paquetes de su...

CVE-2026-62179: Missing Authorization

PraisonAI is a multi-agent teams system. In praisonai-platform prior to version 0.1.9, issue dependency deletion can be authorized against the wrong side of a dependency edge. A workspace member cannot delete a dependency through the owner-created issue endpoint, but can delete the same dependenc...

Security Bulletin: Kernel privilege escalation and disclosure Vulnerabilities in Linux in IBM Cloud Pak System[CVE-2026-46300, CVE-2026-46333, CVE-2026-43284]

Summary Multiple vulnerabilities in the Linux kernel affect the underlying operating system used by Platform system Manager PSM and OS Image for Red Hat Enterprise Linux Systems shipped with Cloud Pak System, . These issues include a local privilege escalation flaw in the networking subsystem...

MikroTik RouterOS Path Traversal (CVE-2026-67281)

RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that the file- serving path dereferences...

Rocky Linux 8 [CIQ] Security Update: kernel-rt-debug-debuginfo / kernel-rt-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_19664)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619664 advisory. kernel: Fragnesia is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation LPE vulnerability in the Linux kernel...