PcanExploit

CVE-2024-44610: Exploit autenticato per root su gateway PEAK PCAN-Ethernet Gateway FD DR Cos'è? Questo repository contiene un exploit Proof-of-Concept PoC che esegue codice come root sui gateway Ethernet Peak. Richiede che tu conosca le credenziali dell'interfaccia web. Come risolverlo? Il...

elastic-peak-dashboards

PEAK Baseline Threat Hunt Dashboards Kibana / Security Onion 3.0 — Stufe 1 & ICS-Protokollanalyse Importierbare Kibana Saved-Object-Dashboards, die die Splunk PEAK Baseline Threat Hunt-Methodik für Cyber Threat Hunt CTH und Incident Response IR-Operationen implementieren. Erstellt und validiert...

SUSE CVE-2026-74457

In the Linux kernel, the following vulnerability has been resolved: can: peakusb: add bounds check for USB channel index The channel control index ctrlidx is derived from rx-len which comes directly from a device USB payload. The mask 0x0f allows values 0-15, but the array size of usbif-dev is on...

CVE-2026-57831 Joomla Extension - digital-peak.com - Unauthenticated blind SQL injection in DP Calendar 8.18.0 - 10.11.2

Joomla Extension - digital-peak.com - Unauthenticated blind SQL injection in DP Calendar 8.18.0 - 10.11.2 - The Joomla extension DP Calendar is vulnerable to an unauthenticated SQL injection...

CVE-2026-57831

CVE-2026-57831 describes an unauthenticated SQL injection in the Joomla extension DP Calendar (digital-peak.com) versions 8.18.0 through 10.11.2. The entry lists a high CVSS score (8.7) with network attack vector and no user interaction, indicating a potentially severe impact to confidentiality. ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: can: peakusb: fix use after free bugs After calling peakusbnetifrxniskb, dereferencing skb is unsafe. In particular, the canframe function, which aliases skb memory, is accessed after peakusbnetifrxni. Reordering the lines of cod...

MINI-R75M-38HP-7VPP

Bulletin has no description...

The vulnerability of the peak_usb_update_ts_now() function in the drivers/net/can/usb/peak_usb/pcan_usb_core.c file of the Linux network device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the peakusbupdatetsnow function in the drivers/net/can/usb/peakusb/pcanusbcore.c file of the Linux network device driver module is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Bluetooth RFCOMM 1.1 Signal-Triggered Air-Gap Interaction

This project demonstrates how Flipper Zero can be used to interact with devices in an Air-Gap context using Bluetooth RFCOMM signals. The system monitors RSSI signal strength and uses statistical peak detection Z-Score analysis to identify significant signal spikes from target devices. When a pea...

Observing the Anatomy of Peak Traffic

...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004381)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004381 advisory. In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbfd.c driver, aka...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004050)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004050 advisory. In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbpro.c driver, aka...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: can: peakusb: fix shift-out-of-bounds issue The driver explicitly uses a 64-bit constant when the number of bits used for shifting is 32 as is the case with PC CAN FD interfaces supported by this driver. mkl: update subject, appl...

CVE-2019-16101

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by sending incorrect JSON data to the REST API, such as the rest/json/banners URI...

CVE-2019-16099

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows CSRF via JSON data to a .swf file...

CVE-2019-16105

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI...

CVE-2019-16102

Silver Peak EdgeConnect SD-WAN before 8.1.7.x has an SNMP service with a public value for rocommunity and trapcommunity...

CVE-2019-16100

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client-side HTTP traffic from a single source...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000465)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000465 advisory. In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbpro.c driver, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000376 advisory. In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbfd.c driver, aka...