154 matches found
pyradm
🔮 pyradm Remote administration crossplatfrom tool via telegram Coded with ❤️ python3 + aiogram3 https://t.me/whlab Screenshots Disclaimer All information contained in this repository is provided for educational and research purposes only The author is not responsible for any illegal use of this...
CVE-2025-41244
💻 단계별 기술 프로세스 프로그램 컴파일 bash C 코드를 실행 파일로 컴파일 gcc -o /tmp/httpd /tmp/CVE-2025-41244.c 실행 가능하도록 설정 chmod +x /tmp/httpd 버전 기능 테스트 bash -v 플래그 테스트 버전 출력 후 종료 /tmp/httpd -v -V 플래그 테스트 상세 버전 출력 후 종료 /tmp/httpd -V 4단계: 익스플로잇 실행 bash 프로세스 목록에 나타나도록 백그라운드에서 실행 /tmp/httpd &...
PT-2026-96133
Name of the Vulnerable Software and Affected Versions GoCD versions 13.1.0 through 26.0.0 Description The /go/api/support/process list endpoint fails to enforce administrator-only authorization. This allows an authenticated internal user to query the endpoint during the execution of source contro...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fixed a potential use-after-free issue in irqprocessworklist. The listforeachentry Safe function was used to allow iterating through the list and deleting entries during the iteration process. The descriptors are...
CVE-2026-80158
A flaw was found in the ipagetkeytab module of the community.general Ansible collection. The module's bindpw parameter, used to supply the LDAP simple-bind password when retrieving a Kerberos keytab, is not declared with nolog, unlike the sibling password parameter in the same module. As a...
MAL-2026-5707 Malicious code in ttspc-server-sample (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ea79d9fce12a87d3949dc748617f8077a1ae0822fadab451c27d2c8a2feb9b [email protected] declares postinstall: node index.js in package.json, so on npm install it automatically executes index.js. The script...
Malicious code in events-router (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5482b17f0abd8f4ae8fed4fa5c53ea035a15b252efec406ae65dfe3365a7412 [email protected] impersonates the events EventEmitter polyfill README and Travis badge copied verbatim from browserify/events and ships a...
CVE-2026-33533
A flaw was found in Glances, an open-source system monitoring tool. The Glances XML-RPC server, when activated, sends a wildcard Access-Control-Allow-Origin header and does not validate the Content-Type header. This allows a remote attacker to craft a malicious webpage that can issue a Cross-Orig...
Credential Exposure
Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...
GHSA-7P93-6934-F4Q7 Glances Vulnerable to Cross-Origin System Information Disclosure via XML-RPC Server CORS Wildcard
Summary The Glances XML-RPC server activated with glances -s or glances --server sends Access-Control-Allow-Origin: on every HTTP response. Because the XML-RPC handler does not validate the Content-Type header, an attacker-controlled webpage can issue a CORS "simple request" POST with Content-Typ...
CVE-2016-10821
In cPanel before 55.9999.141, Scripts/addpop reveals a command-line password in a process list SEC-75...
EUVD-2010-4153
Malware in sbrugna...
EUVD-2017-11787
Malware in sbrugna...
EUVD-2020-24212
Malware in sbrugna...
EUVD-2016-5580
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2024-1742
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Invocation of the sqlplus command with sensitive information in the command line in the mkoracle Checkmk agent plugin before Checkmk 2.3.0b4 beta, 2.2.0p24,...
Linux Distros Unpatched Vulnerability : CVE-2020-1753
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all Ansible 2.9.x versio...
CVE-2024-1742
Invocation of the sqlplus command with sensitive information in the command line in the mkoracle Checkmk agent plugin before Checkmk 2.3.0b4 beta, 2.2.0p24, 2.1.0p41 and 2.0.0 EOL allows the extraction of this information from the process list...
CVE-2025-46546
In Sherpa Orchestrator 141851, multiple time-based blind SQL injections can be performed by an authenticated user. This affects api/gui/asset/list, /api/gui/files/export/csv/, /api/gui/files/list, /api/gui/process/export/csv, /api/gui/process/export/xlsx, /api/gui/process/listAll,...