Android-Projector-C2-Malware

Infraestrutura C2 Pré-instalada e Payload RAT em Projetores Android Relatório de Análise Técnica — Pesquisa de Segurança Dispositivos Afetados: Múltiplos projetores Android de marcas como Nonete ex.: Modelo HY260Pro provavelmente também vários projetores da Magcubic, Hotack, Huyukang e muitos...

CVE-2024-3400-

Vulnérabilité d'injection de commandes dans le pare-feu PAN-OS Ce dépôt contient un script Go qui exploite une vulnérabilité d'injection de commandes dans les pare-feux exécutant le système d'exploitation PAN-OS de Palo Alto Networks. La vulnérabilité, identifiée sous le nom de CVE-2024-3400,...

openssh-cve-2024-6387.sh

OpenSSH CVE-2024-6387 在OpenSSH中发现了一个漏洞（CVE-2024-6387）。成功利用此漏洞可使远程未经认证的攻击者以root身份在目标机器上执行任意代码。 所有基于glibc的、暴露了OpenSSH的Linux发行版均受此问题影响。 你应该做什么？ 1. 如果你使用虚拟机、裸金属服务器或运行Linux且可从互联网访问的计算机，请更新可能允许SSH通过TCP通过任意端口的防火墙规则，或将源IP限制为可信网络。 2...

CVE-2026-20131

🚨 CVE-2026-20131 | Критическая RCE в Cisco FMC Неаутентифицированное удаленное выполнение кода в Cisco Secure Firewall Management Center 📌 Обзор Критическая уязвимость десериализации Java до аутентификации , позволяющая удаленным злоумышленникам выполнить код с правами root на устройствах Cisco...

CVE-2021-38647-POC-and-Demo-environment

Details OMIGod - CVE-2021-38647 Open Management Infrastructure OMI, früher bekannt als NanoWBEM ist ein Open-Source-Verwaltungsserver für das Common Interface Model CMI von Microsoft und The Open Group. OMI ist ein Software-Agent, der auf den meisten Linux-VMs von Azure zu finden ist, doch viele...

CVE-2024-32019-Netdata-ndsudo-Privilege-Escalation-PoC

CVE-2024-32019 Netdata ndsudo — повышение привилегий PoC Краткое описание CVE-2024-32019 — это локальная уязвимость повышения привилегий в SUID-помощнике ndsudo из Netdata, позволяющая локальному пользователю выполнить произвольные программы от root через ненадёжный путь поиска перехват PATH...

CVE-2024-3400

CVE-2024-3400 Beschreibung Eine Befehlsinjizierung infolge einer Schwachstelle zur Erstellung beliebiger Dateien in der GlobalProtect-Funktion der PAN-OS-Software von Palo Alto Networks für bestimmte PAN-OS-Versionen und bestimmte Funktionskonfigurationen kann es einem nicht authentifizierten...

haxx

haxx 在 iOS 14 - iOS 14.8.1 上以 root 权限实现未绑定 + 未沙盒化的代码执行 haxx。 基于 CoreTrustDemo，另外请注意证书不受版权保护。 使用 注意：需要 macOS + 已越狱设备 启动与运行 此方法适用于 14.0-14.6。14.7 14.7b1-14.8.1 需要替换 launchd（参见 launchd.c），安全性较低。 1. 确保你拥有来自 Procursus Team 的 ldid。 2. 根据需要修改 haxx.c 以包含你自己的代码。 3. 运行 make 构建。如果你不在 macOS 上，请指定...

CVE-2024-6387-analysis

CVE-2024-6387 OpenSSH-Signal-Race-Condition-Schwachstellenanalyse Schwachstellenübersicht CVE-2024-6387 ist eine Signalverarbeitungs-Race-Condition-Schwachstelle in den OpenSSH-Versionen 8.5p1 bis 9.7p1, die als "regreSSHion" bezeichnet wird. Angreifer können innerhalb von 6-8 Stunden...

CVE-2024-53691

CVE-2024-53691 https://www.qnap.com/en/security-advisory/qsa-24-28 https://vulners.com/cve/CVE-2024-53691 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 8.7 „Bei Ausnutzung könnte die Link-Following-Schwachstelle es entfernten Angreifern, die Benutzerzugriff erlangt haben,...

EUVD-2026-66248

mpSetEnddisc copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp8 command interface. A local user with access to the ppp8 command interface can crash ppp8 or potentially execute arbitrary code as root...

CVE-2026-58095 ppp(8): incorrect length calculation in mp_Enddisc()

mpEnddisc used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a received endpoint option to overflow a global result buffer. A malicious PPP peer can crash ppp8 or potentially execute arbitrary code as root...

CVE-2026-80185 Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as root

BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...

CVE-2026-80185

BlueZ 5.86 contains a type confusion vulnerability in its sdp-xml.c parser. A crafted nested ServiceRecord passed via RegisterProfile corrupts the SDP XML parser stack, causing scalar union data to be misinterpreted as a sequence pointer. This allows an unprivileged local caller or an adjacent LE...

CVE-2017-16524

CVE-2017-16524 Descoberto por Omar Mezrag - 0xFFFFFF Produto Afetado Samsung Gravadores de Vídeo em Rede - Web Viewer 1.0.0.193 no Samsung SRN-1670D Fornecedor do Produto Hanwha / Samsung Security - https://www.hanwhasecurity.com/ Tipo de Vulnerabilidade Vulnerabilidade de upload de arquivo...

EvilAhenk

CVE-2026-6508 EvilAhenk è una vulnerabilità di sicurezza critica nell'architettura del sistema di gestione centralizzata LiderAhenk che consente a tutti i client agenti di eseguire codice con privilegi 'root' gli uni sugli altri Unauthorized RCE & Lateral Movement. Come funziona il sistema In...

CVE-2026-65400

CVE-2026-65400 Pela primeira vez em um bom tempo, temos um RCE no MacOS. Descoberto originalmente por @osxreverser, e posteriormente expandido por bynar.io. Veja https://blog.calif.io/p/no-country-for-old-passwords para mais informações. Isso é derivado principalmente do trabalho de @panchocosil...

CVE-2026-61898

A flaw was found in accountsservice. A local attacker can exploit this by injecting arbitrary shell commands into the user-controlled LANGUAGE entry in the /.pamenvironment file. The Ubuntu-specific language helper scripts process this input unescaped, leading to arbitrary code execution with roo...

pentest-writeups

pentest-writeups Kioptrix Level 1 writeup - CVE-2003-0201 Samba trans2open Kioptrix Level 1 — Writeup di Penetration Testing Autore: Amirbek Raxmatullayev @americo444 Data: 2026-06-17 Piattaforma: VulnHub Difficoltà: Principiante Obiettivo: Ottenere accesso root 1. Configurazione dell'Ambiente...

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...