12752 matches found
The vulnerability of the Serial Wire Debug interface (SWD) in the highly integrated wireless system on chip (SoC) Realtek RTL8762C allows a hacker to circumvent existing security restrictions and expose sensitive information.
The vulnerability of the Serial Wire Debug SWD interface in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to improper protection against voltage and clock failures. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and...
The vulnerability affects the embedded energy-independent single-write eFUSE memory module in Realtek RTL8762C, a highly integrated wireless system on chip (SoC). This module allows a hacker to circumvent existing security restrictions and expose sensitive information.
The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...
Starlette - Improper Validation of Unsafe Equivalence in Input
A flaw was found in Starlette, a lightweight ASGI Asynchronous Server Gateway Interface framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP Host request header. This malformed header could cause the request.url to be incorrectly reconstructed, leading...
Adobe Experience Manager ≤ 6.5.23.0 - XML Injection
Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an XML Injection vulnerability that could result in a Security feature bypass. id: CVE-2025-54251 info: name: Adobe Experience Manager ≤ 6.5.23.0 - XML Injection author: DhiyaneshDK,assetnote severity: medium description: |...
SolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control Bypass
SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality. id: CVE-2025-40536 info: name: SolarWinds Web Help Desk 12.8.8 Hotfix 1 HF1 - Security...
Spring4Shell
Spring4Shell En este desafío, analicé la vulnerabilidad Spring4Shell CVE-2022-22965, investigué evasiones de seguridad y redacté un Informe de Análisis Post-Mortem del Incidente detallando la detección, el impacto y la resolución del ataque. También implementé una regla de firewall en Python para...
CVE-2017-16245
CVE-2017-16245 Código fuente para CVE-2017-16245 bypass de Avecto Defendpoint originalmente divulgado por Nettitude La implementación en PowerShell de CVE-2017-16245 puede y debe copiarse y pegarse directamente en PowerShell. Si PowerShell está bloqueado, intente ejecutar powershell.exe desde el...
TeleShadow3
TeleShadow3 Teleshadow3- ¡Avanzado secuestrador de sesiones de Telegram de escritorio! Descarga Haz clic AQUÍ para descargar la última versión. Captura de pantalla ¡Robar Telegram de escritorio nunca ha sido tan fácil! Configura los detalles del correo electrónico y del remitente y destinatario, ...
Invisi-Shell
Invisi-Shell ¡Oculta tu script de powershell a plena vista! Invisi-Shell evita todas las características de seguridad de Powershell registro de ScriptBlock, registro de módulos, transcripción, AMSI mediante el enganche de ensamblados .Net. El enganche se realiza a través de la API de CLR Profiler...
CVE-2026-59639
A flaw was found in Bouncy Castle for Java. The library's Cryptographic Message Syntax CMS component, which handles digital signature verification, incorrectly validates data that has no signers. This means that even if data is not digitally signed, the system might still consider it legitimate...
LOLBins
LOLBins Aplicación PyQT para listar todos los Binarios y Scripts Living Off The Land para Windows desde LOLBAS y binarios Unix que pueden usarse para evitar restricciones de seguridad locales en sistemas mal configurados desde GTFOBins. Windows Linux...
powerob
Powerob An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity. This only obfuscates functions and removes found in PowerShell scripts. Roadmap includes bfuscating variables. Pull requests and collaborative welcomed. About This was built out of the need ...
Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Security Bypass
Summary golang.org/x/crypto is used by IBM Storage Fusion Data Foundation, which could cause Security Bypass. CVE-2022-30636, CVE-2024-45337, CVE-2025-22869, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181. Vulnerability Details CVEID:CVE-2022-30636 DESCRIPTION: httpTokenCacheKey uses path.Base to...
CVE-2026-41847
CVE-2026-41847...
CVE-2026-62388
NLTK (Python Natural Language Processing toolkit) versions before 3.10.0 ship with an insecure default in pathsec.py : the ENFORCE flag is set to False, causing all security validation functions to emit warnings rather than raising exceptions. This means path traversal and pickle deserialization ...
EUVD-2026-64336
NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit warnings instead of raising exceptions. Attackers can bypass path traversal and pickle deserialization protections by exploiting the disabled security controls that are only activ...
Linux Distros Unpatched Vulnerability : CVE-2026-62388
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit warnings instead of raising exceptions...
CVE-2026-50288
CVE-2026-50288 affects @asymmetric-effort/specifyjs , a declarative TypeScript UI framework, prior to version 0.2.136 . The vulnerability resides in the assertSecureUrl function (core/src/shared/secure-fetch.ts:42-45). When new URL() throws a parse error, the catch block silently returned instead...
CVE-2026-62313
Incus (system container and VM manager) prior to 7.3.0 contains a bypass of the project-level restriction restricted.containers.privilege=isolated. The check only rejects an explicitly set security.idmap.isolated=false or empty value, but does not enforce the restriction when the key is omitted e...