680 matches found
SmmBackdoor
SMM-бэкдор для платформ на основе UEFI !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Это устаревший заброшенный проект, за актуальной версией бэкдора обратитесь к странице проекта SMM Backdoor Next Gen и его документации: https://github.com/Cr4sh/SmmBackdoorNg...
root-my-webos-tv
Root my webOS TV Простой скрипт на Python, который запускает telnet-сервер на уязвимых устройствах webOS с правами root. Проверенные телевизоры webOS 4.9.7 - 5.30.40 модель LG43UM7000PLA webOS 5.5.0 - 04.50.51 модель OLED55CXPUA webOS 6.3.3-442 kisscurl-kinglake - 03.36.50 модель OLED48C1PUB webO...
CVE-2026-9645-ScadaBR-Analysis
CVE-2026-9645 — ScadaBR 취약점 분석 오픈소스 ScadaBR SCADA/HMI 플랫폼 에 영향을 미치는 CVE-2026-9645 에 대한 기술적 취약점 분석 및 CVE 브리핑입니다. 개요 CVE-2026-9645 는 ScadaBR의 치명적인 인증된 원격 코드 실행 취약점입니다. 준비된 브리핑에 따르면: 심각도: 치명적Critical CVSS v3.1: 9.9 취약점 유형: 인증된 원격 코드 실행 CWE: CWE-78 — OS 명령 주입 영향을 받는 제품: ScadaBR 요구되는 접근 권한: 낮은 권한의 인증된...
cve-2026-31431
CVE-2026-31431 Copy Fail Тест Этот репозиторий содержит файл workflow для GitHub Actions, чтобы проверить, затронут ли runner действий уязвимостью CVE-2026-31431. Вы можете провести тест самостоятельно: просто создайте репозиторий по этому шаблону и запустите workflow test.yml вручную не забудьте...
GNU-Inetutils-telnet-CVE-2026-24061-
CVE-2026-24061 Инструмент обнаружения обхода аутентификации GNU Inetutils Telnetd 📋 Обзор проекта Это продвинутый инструмент для обнаружения уязвимости обхода аутентификации GNU Inetutils Telnetd CVE-2026-24061. Уязвимость имеет оценку CVSS 9.8, и злоумышленник может получить root-доступ без...
CVE-2025-20393
CVE-2025-20393 📌 Aperçu CVE-2025-20393 est une vulnérabilité critique d'exécution de commande à distance RCE affectant les appliances Cisco Secure Email Gateway SEG et Cisco Secure Email and Web Manager SEWM exécutant Cisco AsyncOS. La vulnérabilité existe en raison d'une validation d'entrée...
Rocky Linux 8 [CIQ] Security Update: open-vm-tools / open-vm-tools-debuginfo / open-vm-tools-debugsource / etc (crlsa-2022_6357)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20226357 advisory. open-vm-tools: local root privilege escalation in the virtual machine CVE-2022-31676 Tenable has extracted the preceding description block directly from the CIQ...
FreePBX-CVE-2025-57819
FreePBX CVE-2025-57819 — SQLi non authentifié à RCE racine Sévérité: Critique Type: Injection SQL non authentifiée → Exécution de code à distance Logiciel concerné: FreePBX module endpoint Testé sur: FreePBX sous CentOS 7, Apache 2.4, PHP 7.4, MariaDB 5.5 Aperçu Une vulnérabilité d'injection SQL...
CVE-2026-91841 Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection
A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege...
D-Link DIR820LA1_FW105B03 'ping_addr' - OS Command Injection
OS Command injection vulnerability in D-Link DIR820LA1FW105B03 allows attackers to escalate privileges to root via a crafted payload with the pingaddr parameter to ping.ccp. id: CVE-2023-25280 info: name: D-Link DIR820LA1FW105B03 'pingaddr' - OS Command Injection author: pussycat0x severity:...
Security Bulletin: This Power System update is being released to address CVE-2026-52943, CVE-2026-43373, and CVE-2026-43194
Summary An unauthenticated attacker on the BMC's local network can cause loss of service. Vulnerability Details CVEID:CVE-2026-52943 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix missing zerocopy reference in pskbcarve helpers...
CVE-2026-96808
A flaw was found in Flatpak. A malicious local user in an active local session could exploit a symlink traversal vulnerability in the revokefs writer. This flaw allows an attacker to modify files belonging to a different revokefs session after they have been validated. Consequently, an attacker...
DEBIAN-CVE-2026-96808
In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by rejecting literal .. components but did not prevent symlink traversal. A malicious local user in an active local session could obtain two...
CVE-2026-96808
In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by rejecting literal .. components but did not prevent symlink traversal. A malicious local user in an active local session could obtain two...
CVE-2026-96808
In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by rejecting literal .. components but did not prevent symlink traversal. A malicious local user in an active local session could obtain two...
CVE-2026-96808
In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by rejecting literal .. components but did not prevent symlink traversal. A malicious local user in an active local session could obtain two...
PT-2026-97418
Name of the Vulnerable Software and Affected Versions Flatpak versions prior to 1.18.1 Description The revokefs writer, utilized by the flatpak-system-helper to receive repository data from unprivileged callers, fails to prevent symlink traversal despite rejecting literal .. components in file...
CVE-2026-20306
CVE-2026-20306 affects the REST API of Cisco ISE and ISE-PIC , where improper validation of user-supplied input allows an authenticated attacker with valid administrative credentials to send crafted commands to the web-based management interface, leading to command injection on the underlying ope...
CVE-2026-20242: Deserialization of Untrusted Data
A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Jav...
