Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: USB: Host: isp116x: Check the return value after calling platformgetresource. This will cause a null-ptr-deref if platformgetresource returns NULL; therefore, we need to check the return value...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 114. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox versions prior to 115...

Astra Linux – Vulnerability in pyasn1

pyasn1 is a generic ASN.1 library for Python. Prior to version 0.6.3, the pyasn1 library was vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion during the decoding of ASN.1 data with deeply nested structures. An attacker could provide a crafted payload containing...

Astra Linux – Vulnerability in hdf5

A issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5Fgetnrefs located in H5Fquery.c. This allows an attacker to cause a Denial of Service attack...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: hwmon: coretemp Simplified platform device handling Coretemp’s platform driver is unconventional. All the actual processing is performed globally by the initcall and CPU hotplug notifiers. The “driver” essentially just wraps t...

CVE-2026-76172

creationtimestamp| type| source ---|---|--- 2026-08-24 10:11:24+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mtt2uomns22b...

escort-network-osint

Indagine OSINT su Rete di Escort Panoramica Questo progetto analizza una rete di annunci relativi a escort su più piattaforme, identificando modelli di infrastruttura condivisa, riutilizzo dell'identità e coordinamento centralizzato. Obiettivi Identificare relazioni tra profili, numeri di telefon...

CVE-2022-3552

CVE-2022-3552 BoxBilling=4.22.1.5 - Esecuzione Remota di Codice RCE Utilizzo root@kitploit: python3 .\CVE-2022-3552.py -d http://192.168.228.143 -u [email protected] -p [email protected]...

firefox: thunderbird: Mitigation bypass in the Storage: Cache API component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Storage: Cache API component...

firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: WebAssembly component...

gerobug

Gerobug: A Primeira Plataforma de Bug Bounty Open Source. Gerobug A primeira plataforma de bug bounty open source autogerenciada. Você é uma empresa, planejando ter seu próprio programa de bug bounty, com orçamento mínimo? NÓS TE AJUDAMOS! Estamos cientes de que algumas organizações têm dificulda...

probo

Probo Open-Source-GRC-Plattform für Ingenieure. Probo ist eine selbst hostbare Governance-, Risiko- und Compliance-Plattform GRC, die für Engineering- und Sicherheitsteams entwickelt wurde. Sie deckt den gesamten GRC-Lebenszyklus ab: Risikoidentifizierung, Kontrollverfolgung, Lieferantenrisiko,...

xurlfind3r

xurlfind3r xurlfind3r is a command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly...

frida-ios-hook

Frida iOS hook 📍 A tool that helps you can easy using frida. It support script for trace classes, functions, and modify the return values of methods on iOS platform. 👉 For Android platform: frida-android-hook 👉 For Intercept Api was encrypted on iOS application: frida-ios-intercept-api Env OS...

BoxPwnr-Traces

BoxPwnr-Traces Traces et résultats de benchmark de BoxPwnr sur plusieurs plateformes de sécurité. Chaque trace comprend l'interaction complète avec le LLM, les commandes exécutées, un rapport markdown + un graphique d'attaque, les statistiques et la configuration utilisée. Parcourez les...

prey-android-client

Qui troverai tutto il codice sorgente delle release attuali e in fase di sviluppo del client Prey per dispositivi Android. Prey è una piattaforma SaaS per il tracciamento dei dispositivi, il monitoraggio, la protezione dei dati e la gestione dei dispositivi. Il suo agente open-source gira sugli...

Termix-research

Termix-Sicherheitsforschung Schwachstellenforschung zu Termix, einer webbasierten SSH- und Serververwaltungsplattform 13k+ Sterne. CVE| Schwachstelle| Schweregrad| Behoben| Sicherheitsempfehlung ---|---|---|---|--- CVE-2026-45746| Session-Hijacking → RCE| 9.0 Kritisch| v2.3.2| GHSA-cx2r-843c-vww8...

statecraftcyber

Statecraft Cyber Intelligence Plataforma de threat intelligence em português construída do zero como projeto pessoal de Blue Team. Agrega dados de fontes abertas globais e os transforma em briefings técnicos, notícias classificadas, CVEs enriquecidos e IOCs estruturados — tudo em PT-BR, atualizad...

aisecplus-week01-servicenow-ai-security-incident

AISec Plus Week01 - Die Bedrohung kartieren KI-Sicherheitsvorfall-Forschung: ServiceNow Virtual Agent Schwachstelle CVE-2025-12420 Was ist passiert? Eine kritische Schwachstelle wurde in der ServiceNow KI-Plattform entdeckt, die es einem nicht authentifizierten Angreifer ermöglichte, sich als...

ServiceNow UI Macros - Template Injection

ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted...