PT-2026-106678

In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short beacon and probe responses libipw process probe response and the libipw network init call it makes assume the frame contains the full 36-byte beacon and probe response prefix, but the ipw2100 and...

SUSE SLES12 Security Update : cups (SUSE-SU-2026:4447-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4447-1 advisory. This update for cups fixes the following issue: - CVE-2026-41079: crafted SNMP response can lead to stack-based out-of-bounds read and...

Linux Distros Unpatched Vulnerability : CVE-2026-98348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: libipw: reject too-short association responses libipwhandleassocresp reads the capability, status and aid fields of the 30-byte association response prefi...

Linux Distros Unpatched Vulnerability : CVE-2026-98340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: only group hidden BSSes with beacon entries When a probe response for an unknown BSS comes in, cfg80211bssupdate looks for an existing entry wit...

Newer and Bigger, but Safer? A Longitudinal Study of the Functionality-Security Gap in LLM-Generated Code

Large Language Models LLMs are widely used to generate code. Although their functional plausibility keeps improving, the generated code often contains security vulnerabilities. The functionality-security gap captures code that passes functional tests but fails security tests. A recent longitudina...

GHSA-VC2V-76PW-4V95 compression vulnerable to Denial of Service via memory leak on premature response close

Impact A vulnerability in compression 1.8.2 allows an attacker to trigger a Denial of Service DoS by disconnecting while a compressed response is being sent. When the client aborts the connection before the response finishes, the zlib stream created to compress that response is never destroyed, s...

compression vulnerable to Denial of Service via memory leak on premature response close

Impact A vulnerability in compression 1.8.2 allows an attacker to trigger a Denial of Service DoS by disconnecting while a compressed response is being sent. When the client aborts the connection before the response finishes, the zlib stream created to compress that response is never destroyed, s...

DNS-Mayhem-CVE-2026-41096-Deep-Dive

DNS-Mayhem-CVE-2026-41096-Deep-Dive CVE‑2026‑41096 का गहन तकनीकी विश्लेषण, जो Windows DNSAPI.dll में एक गंभीर हीप ओवरफ़्लो है, जो निर्मित DNS प्रतिक्रियाओं के माध्यम से रिमोट कोड निष्पादन को सक्षम बनाता है। इसमें हमले के वेक्टर, पैच अंतर्दृष्टि और सुरक्षा टीमों के लिए रक्षात्मक मार्गदर्शन शामिल ह...

CVE-2026-27944

CVE-2026-27944 - تنزيل وفك تشفير النسخة الاحتياطية دون مصادقة في Nginx UI https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/PoC-Exploit-red استغلال إثبات المفهوم PoC لثغرة CVE‑2026‑27944، وهي ثغرة حرجة في Nginx UI ≤ 2.3.2...

Orion

Orion مستودع قواعد YARA يتم تحديثه باستمرار لمراقبة التهديدات القديمة والجديدة من المقالات واستجابات الحوادث...

siras

SIRAS v3.0 is a modern Security Incident Response Automated Simulation framework designed to manage red teaming exercises as code. You can execute controlled security simulations that test your Incident Response plan in realistic scenarios. The main goal of SIRAS is to provide red teaming exercis...

CVE-2026-105766

The Chainguard Academy (edu) website is vulnerable to an HTTPS to HTTP downgrade attack due to the use of the backend-facing $scheme variable in the nginx.conf trailing-slash directory redirect. This issue exists in versions from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0...

drupal-openai-provider-ssrf-cve-2026-13233

مزود Drupal OpenAI — SSRF / قراءة ملف محلي عبر URL الاستجابة CVE-2026-13233 المورد العلوي غير الموثوق: المزوّد الذي جلب عنوان URL الذي أخبرته به استجابته. مزود OpenAI الخاص بـ Drupal aiprovideropenai · SSRF CWE-918 · CVE-2026-13233 · SA-CONTRIB-2026-053 الحالة: الإفصاح المنسق مكتمل 2026-07-10. تم...

CVE-2026-104712 Apache Struts: Disproportionate response size when rendering BigDecimal request parameters

Asymmetric resource consumption amplification vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal java.math.BigDecimal property that is then rendered through the Struts tag library, the framework can produce a response many orders of magnitude large...

NetScope

NetScope منصة تحقيق واستجابة لشبكات الحاسوب تعمل دون اتصال، مخصصة لنظام ويندوز. NetScope هو تطبيق سطح مكتب لمحللي الأمن، وفرق الاستجابة للحوادث، ولاعبي CTF. يأخذ ملف التقاط الحزم .pcap / .pcapng أو واجهة شبكة حية ويحوّله إلى تحقيق كامل مدعوم بالأدلة — حكم نهائي، وقصة الهجوم، ومؤشرات الاختراق،...

CVE-2018-6389

استغلال CVE-2018-6389 مُتحقّق CVE-2018-6389 — أداة Python صغيرة غير مدمرة تتحقق من مؤشرات ثغرة CVE‑2018‑6389 في ووردبريس عبر إرسال ثلاثة طلبات load-scripts.php مضبوطة وتحليل حجم الاستجابة وزمنها وأنماط رموز JavaScript. ⚠️ إخلاء مسؤولية استخدم هذه الأداة فقط على الأنظمة التي تملكها أو لديك إذن صريح...

Log4Shell

CVE-2021-44228: Log4j / Log4Shell सुरक्षा अनुसंधान सारांश इस रिपॉजिटरी में CVE-2021-44228 और CVE-2021-45046 उर्फ Log4Shell पर हमारी घटना प्रतिक्रिया के दौरान एकत्र किए गए सभी संसाधन शामिल हैं। खतरा खुफिया शमन / सुधार मैलवेयर रिपोर्ट सलाहकार IOCs / कॉलबैक डोमेन / आईपी पते हनीपॉट पेलोड / अस्पष्टीकर...

CVE-2024-47176

CVE-2024-47176 !CAUTION للاستخدام التعليمي/الدفاعي فقط، استخدم فقط حيث يُسمح لك بذلك، الاستخدام على مسؤوليتك الخاصة! كيفية الاستخدام python3 scanner.py CIDR SCANNER IP مثال python3 scanner.py 192.168.0.0/16 192.168.5.100 الوحدات المطلوبة tqdm التثبيت عبر pip3/apt: $ pip3 install tqdm $ sudo apt...

cve-2016-20012

CVE-2016-20012 SSH उपयोगकर्ता नाम गणना स्क्रिप्ट यह Python स्क्रिप्ट एक अमान्य पासवर्ड के साथ कनेक्ट करने का प्रयास करके SSH सर्वर पर मान्य उपयोगकर्ता नामों की गणना करने का प्रयास करती है। यह प्रत्येक उपयोगकर्ता नाम के लिए प्रतिक्रिया समय मापती है ताकि सर्वर व्यवहार के आधार पर संभावित मान्य खातों...

CVE-2023-0669

CVE-2023-0669 GoAnywhere MFT पूर्व-प्रमाणीकरण कमांड इंजेक्शन भेद्यता से ग्रस्त है, जो लाइसेंस प्रतिक्रिया सर्वलेट में एक मनमाना हमलावर-नियंत्रित ऑब्जेक्ट को डिसीरियलाइज़ करने के कारण होता है। 0x00 डॉर्क shodan title:"GoAnywhere" FOFA title="GoAnywhere" 0x01 उपयोग Java संस्करण java -version openjd...