CVE-2026-111212

A security flaw exists in ImprintLab Medical-SAM-Adapter versions 0.1.0-alpha and 0.1.0 . The vulnerability is located within the AutoBackend Model Loading component, specifically in the session.get_modelmeta.custom_metadata_map function of the file models/MobileSAMv2/ultralytics/nn/autobackend.p...

CVE-2026-111212 ImprintLab Medical-SAM-Adapter AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection

A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by this issue is the function session.getmodelmeta.custommetadatamap of the file models/MobileSAMv2/ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the...

EUVD-2026-102550

A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by this issue is the function session.getmodelmeta.custommetadatamap of the file models/MobileSAMv2/ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the...

CVE-2026-111212 ImprintLab Medical-SAM-Adapter AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection

A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by this issue is the function session.getmodelmeta.custommetadatamap of the file models/MobileSAMv2/ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the...

CVE-2026-111212: Improper Neutralization of Directives in Dynamically Evaluated Code

A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by this issue is the function session.getmodelmeta.custommetadatamap of the file models/MobileSAMv2/ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol RDP. Prior to version 2.7.0, server-side authentication against a SAM file might succeed with invalid credentials if the server had configured an invalid SAM file path. Clients based on FreeRDP are not affected by this issue. However...

SAMDump

SAMDump Extrae archivos SAM y SYSTEM de Windows usando el Servicio de Copia de Sombra de Volumen VSS con múltiples opciones de exfiltración y ofuscación XOR: Lista las copias de sombra de volumen usando VSS y crea una si es necesario Extrae los archivos SAM y SYSTEM de la copia de sombra Utiliza...

go-secdump

go-secdump Descrizione Il pacchetto go-secdump è uno strumento progettato per estrarre da remoto gli hash dal registro SAM, nonché i segreti LSA e gli hash memorizzati nella cache dell'hive SECURITY, senza alcun agente remoto e senza toccare il disco. Lo strumento si basa sulla libreria go-smb e ...

Exploit for Insufficient Granularity of Access Control in Microsoft

BlueHammer Defender Compromise-Audit A defensive Metasplo...

PrettyPrague

PrettyPrague GenDigital Avast Antivirus ゼロデイ権限昇格の脆弱性 アンチマルウェアベンダーにおけるもう一つのゼロデイ脆弱性です。確信はありませんが、この脆弱性は他のGenDigital製品（AVG、Nortonなど）にも影響する可能性があると考えています。 現時点では、PoCはAvast Antivirusの任意のバージョンと互換性があります。 このPoCは、Avast Sandboxの脆弱性を悪用してSAMデータベースをダンプし、完全なSYSTEMシェルを起動します。本稿執筆時点では、このPoCは完全にパッチ適用済みのAvast Antiviru...

CVE-2026-82964: Improper Preservation of Permissions

Improper preservation of permissions in the Avast sandbox minifilter driver aswSnx.sys on Windows allows a local, low-privileged attacker executing inside the sandbox to escape file isolation and escalate to SYSTEM. When the sandbox virtualizes a file it copies the original security descriptor, b...

diap-sdk (>=0.1.4, <=0.1.5), p2pclient (>=0.1.2, <=0.1.3) +1 more potentially affected by CVE-2026-73568 via libp2p (>=0.1.1, <=0.7.0)

libp2p PYPI version =0.1.1, =0.1.4, =0.1.2, =0.1.0a28, =0.1.0a36 Source cves: CVE-2026-73568 Source advisory: OSV:PYSEC-2026-3681...

SMB Backup Operator Hive Dump

Uses Backup Operators-capable credentials to save SAM/SYSTEM/SECURITY hives via reg save over SMB exec, then downloads them NetExec backupoperator inspired. Optional secretsdump if impacket is installed. Does not dump NTDS.dit online — use a shell VSS module for full NTDS. !/usr/bin/env python3 -...

diap-sdk (>=0.1.4, <=0.1.5), p2pclient (>=0.1.2, <=0.1.3) +1 more potentially affected by CVE-2026-73568 via libp2p (>=0.1.1, <=0.7.0)

libp2p PYPI version =0.1.1, =0.1.4, =0.1.2, =0.1.0a28, =0.1.0a36 Source cves: CVE-2026-73568 Source advisory: GHSA-HMJ8-5XMH-5573...

diap-sdk (>=0.1.4, <=0.1.5), p2pclient (>=0.1.2, <=0.1.3) +1 more potentially affected by unknown CVE via libp2p (>=0.1.1, <=0.7.0)

libp2p PYPI version =0.1.1, =0.1.4, =0.1.2, =0.1.0a28, =0.1.0a36 Source cves: unknown CVE Source advisory: SNYK:PYTHON-LIBP2P-18313058...

diap-sdk (>=0.1.4, <=0.1.5), p2pclient (>=0.1.2, <=0.1.3) +1 more potentially affected by CVE-2026-73568 via libp2p (>=0.1.1, <=0.7.0)

libp2p PYPI version =0.1.1, =0.1.4, =0.1.2, =0.1.0a28, =0.1.0a36 Source cves: CVE-2026-73568 Source advisory: OSV:GHSA-HMJ8-5XMH-5573...

SAMR user enumeration

Enumerate SAM accounts through MS-SAMR / NetUserEnum on port 445 without LDAP or Impacket. !/usr/bin/env python3 -- coding: utf-8 -- """ Enumerate domain/local SAM accounts via native SAMR/NetAPI port 445, no LDAP bind. """ from kittysploit import from lib.protocols.samr import SamEnumerationErro...

tc-sam-cli (>=0.0.7, <=0.0.10) potentially affected by CVE-2025-3047 via aws-sam-cli (0.17.0)

aws-sam-cli PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - tc-sam-cli =0.0.7, =0.0.10 Source cves: CVE-2025-3047 Source advisory: OSV:PYSEC-2026-1207...

better-lambda-deploy (>=0.2.2, <=0.5.9) potentially affected by CVE-2025-3047 via aws-sam-cli (0.41.0)

aws-sam-cli PYPI version 0.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - better-lambda-deploy =0.2.2, =0.5.9 Source cves: CVE-2025-3047 Source advisory: OSV:PYSEC-2026-1207...

better-lambda-deploy (>=0.0.4, <=0.2.1) potentially affected by CVE-2025-3047 via aws-sam-cli (0.40.0)

aws-sam-cli PYPI version 0.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - better-lambda-deploy =0.0.4, =0.2.1 Source cves: CVE-2025-3047 Source advisory: OSV:PYSEC-2026-1207...