WebSphere-WSIF-gadget

WSIF Gadget para WebSphere CVE-2020-4464 / CVE-2020-4450 Esto se basa en las excelentes entradas de blog de ZDI informe original de @tint0: https://www.thezdi.com/blog/2020/7/20/abusing-java-remote-protocols-in-ibm-websphere...

ZeroLogon-CVE-2020-1472-lab

ZeroLogon-CVE-2020-1472 ZeroLogon CVE-2020-1472 漏洞的说明与演示 本实验的目的严格限于教育用途。 不建议在生产环境或非您拥有的环境中执行。 关于漏洞 漏洞背景 此漏洞允许网络犯罪分子接管域控制器（DC）。攻击方式是通过更改或移除控制器上服务账户的密码。恶意攻击者可能仅仅造成服务拒绝，或者完全控制并拥有整个网络。 微软已于2020年8月发布补丁。 严重性：10.0（严重）CVSS v3.1 受影响组件：微软 Netlogon 远程协议 MS-NRPC 受影响 Windows 版本： Windows Server 2008 R2 2012 /...

CVE-2025-43504

当好用的 /bin 变坏：LLDB 的 debugserver 中存在一个远程预认证缓冲区溢出漏洞 简介 小时候，我总喜欢在当地沃尔玛翻找 DVD 箱子。我发现很多相同的电影都堆在上面，但如果你真的往深处翻，就能找到更有意思、更小众的片子。 当一个程序发生缓冲区溢出时，基本上就是你在翻它的“打折箱”。取决于你翻得多深，那些 DVD——或者说，内存中被覆盖的结构——会随之改变。 今天要说的“打折箱”是 CVE-2025-43504：我在 LLDB 的 debugserver 中发现的一个远程预认证全局缓冲区溢出漏洞。 我们是如何走到这一步的？ 在应用程序开发过程中，开发者常常需要在物理 i...

CVE-2026-59919

A flaw was found in the netty-codec-haproxy component, part of the Netty network application framework. This vulnerability allows a remote attacker to perform protocol-level injection attacks by crafting malformed HAProxy protocol frames that contain embedded carriage return CR and line feed LF...

CVE-2026-13325

CVE-2026-13325 entry is rejected/not used and does not represent an active vulnerability.

SAP NetWeaver ABAP Platform 安全漏洞

SAP NetWeaver ABAP Platform is an integrated technology platform developed by the German company SAP. There is a security vulnerability in SAP NetWeaver ABAP Platform, which stems from improper validation of RFC protocols. This vulnerability allows unauthorized attackers to send specially crafted...

CVE-2026-21404

NAVTOR NavBox (versions up to 4.16.1.20) contains hard-coded credentials in its Windows Communication Foundation (SOAP) implementation. When SOAP is enabled, a local attacker can extract credentials and bypass the intended transfer workflow. Successful authentication to the SOAP interface grants ...

EUVD-2026-23270

An issue in the Bluetooth Low Energy BLE control interface of the Yamaha SR-B30A sound bar firmware 2.40 Mobile App: Sound Bar Remote / version: 2.40 allows remote attackers within BLE radio range to connect without authentication via the Sound Bar Remote protocol...

CVE-2026-37100

An issue in the Bluetooth Low Energy BLE control interface of the Yamaha SR-B30A sound bar firmware 2.40 Mobile App: Sound Bar Remote / version: 2.40 allows remote attackers within BLE radio range to connect without authentication via the Sound Bar Remote protocol...

CVE-2026-5344

A security vulnerability has been detected in Textpattern up to 4.9.1. Affected by this vulnerability is the function mtuploadImage of the file rpc/TXPRPCServer.php of the component XML-RPC Handler. The manipulation of the argument file.name leads to path traversal. Remote exploitation of the...

NewStart CGSL MAIN 6.06 (SP) : p11-kit Multiple Vulnerabilities (NS-SA-2026-0024)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has p11-kit packages installed that are affected by multiple vulnerabilities: - An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit...

CVE-2026-25959

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfcliprdrprovidedata passes freed pDstData to XChangeProperty because the cliprdr channel thread calls xfcliprdrserverformatdataresponse which converts and uses the clipboard data without holding any lock,...

EUVD-2021-20434

Malware in sbrugna...

EUVD-2022-27069

Malicious code in bioql PyPI...

EUVD-2022-27080

Malicious code in bioql PyPI...

EUVD-2022-27081

Malicious code in bioql PyPI...

EUVD-2024-28011

Malicious code in bioql PyPI...

RLSA-2025:10635 Moderate: gnome-remote-desktop security update

GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment. Security Fixes: gnome-remote-desktop: Uncontrolled Resource Consumption due to Malformed RDP PDUs CVE-2025-5024 For more details about the security issues, including the impact, a CVSS score,...

git: Git arbitrary file writes

A bundled uri handling flaw was found in Git. When cloning a repository, Git knows to optionally fetch a bundle advertised by the remote server, which allows the server side to offload parts of the clone to a CDN. The Git client does not perform sufficient validation of the advertised bundles,...

git: Git arbitrary file writes

A bundled uri handling flaw was found in Git. When cloning a repository, Git knows to optionally fetch a bundle advertised by the remote server, which allows the server side to offload parts of the clone to a CDN. The Git client does not perform sufficient validation of the advertised bundles,...