636 matches found
authelia
!OpenSSF Scorecardhttps://shieldcn.dev/badge/dynamic/json.svg?url=https://img.shields.io/ossf-scorecard/github.com/authelia/authelia.json&query=$.message&label=openssf%20scorecard&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmc...
CVE-2026-42978-PoC-Research
CVE-2026-42978 PoC e Investigación — Use-After-Free en Notificaciones Push de Windows Condición de carrera en el servicio de Notificaciones Push de Windows WpnService que se ejecuta como NT AUTHORITY\SYSTEM. Un atacante con acceso local puede desencadenar un use-after-free durante el apagado de l...
hermes-the-messenger
Hermes el mensajero Un PoC para lograr persistencia mediante notificaciones push en Windows Para más detalles técnicos y contexto, lee nuestro artículo del blog aquí: https://www.persistent-security.net/post/beacon-on-demand-abusing-push-notifications-for-persistence Uso Antes que nada, necesitas...
PrivExchange
PrivExchange POC tools accompanying the blog Abusing Exchange: One API call away from Domain Admin. Requirements These tools require impacket. You can install it from pip with pip install impacket, but it is recommended to use the latest version from GitHub. privexchange.py This tool simply logs ...
CVE-2026-102666
The Joyland AI app contains hard-coded credentials for the GeTui push notification service . This vulnerability allows an attacker to access the GeTui REST API to send push notifications with arbitrary content to any individual user, specific groups, or the entire user base of the app. No specifi...
EUVD-2026-91023
The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of users, or all users of the app at once...
Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2023_4952)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20234952 advisory. Mozilla: Memory corruption in IPC CanvasTranslator CVE-2023-4573 Mozilla: Memory corruption in IPC ColorPickerShownCallback CVE-2023-4574 Mozilla: Memory...
crackerjack
!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...
CVE-2026-100675
stoatchat versions before 0.15.5 contain a denial of service vulnerability in the acknowledgement worker that processes mass mention messages. Authenticated users can send five crafted role-mention messages to terminate all acknowledgement workers, disabling push notifications and mention badges...
CVE-2026-100675 stoatchat before 0.15.5 Denial of Service via mass mentions
stoatchat versions before 0.15.5 contain a denial of service vulnerability in the acknowledgement worker that processes mass mention messages. Authenticated users can send five crafted role-mention messages to terminate all acknowledgement workers, disabling push notifications and mention badges...
EUVD-2026-87769
stoatchat versions before 0.15.5 contain a denial of service vulnerability in the acknowledgement worker that processes mass mention messages. Authenticated users can send five crafted role-mention messages to terminate all acknowledgement workers, disabling push notifications and mention badges...
CVE-2026-100675 stoatchat before 0.15.5 Denial of Service via mass mentions
stoatchat versions before 0.15.5 contain a denial of service vulnerability in the acknowledgement worker that processes mass mention messages. Authenticated users can send five crafted role-mention messages to terminate all acknowledgement workers, disabling push notifications and mention badges...
CVE-2026-100675 stoatchat before 0.15.5 Denial of Service via mass mentions
stoatchat versions before 0.15.5 contain a denial of service vulnerability in the acknowledgement worker that processes mass mention messages. Authenticated users can send five crafted role-mention messages to terminate all acknowledgement workers, disabling push notifications and mention badges...
CVE-2026-100631 Parse Server 9.0.0 Unauthenticated Installation Deletion via Operator Injection
Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-alpha.9, the device token deduplication logic for installation records does not validate the type of client-supplied installation fields before using them to build database querie...
CVE-2026-42978-PoC-Research
CVE-2026-42978 Módulo de Notificaciones Push de Windows para la Herramienta de Seguridad con IA Ecosistema de Seguridad con IA de Nueva Generación, Terminal Multiprotocolo y Suite de Agentes Autónomos Sitio web · Documentación del producto · Aplicación anfitriona · Chat de la comunidad Navegación...
PT-2026-99346
Name of the Vulnerable Software and Affected Versions stoatchat versions prior to 0.15.5 Description A denial of service issue exists in the acknowledgement worker responsible for processing mass mention messages. Authenticated users can send five specially crafted role-mention messages to...
Exploit for Use After Free in Microsoft
CVE-2026-42978-PoC-Research CVE-2026-4...
CVE-2026-69300
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...