5048270 matches found
CVE-2026-73173
Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to invoke critical device-management functions, including...
voron-crypto
Voron 加密/协议库 — 评审请求 这是一个小型 E2EE 即时通讯项目的加密与消息协议核心，被单独提取出来供外部评审。它不是 完整产品——Android 客户端和部署配置被有意排除在外；这只是需要接受审查的部分。 这里包含什么 common/ — 库本身： e2ee/ — X3DH-lite（异步密钥协商）+ 其上的 Double Ratchet，基于 Curve25519/ChaCha20-Poly1305/Ed25519/HKDF 构建（JDK 提供的原语，该层没有任何手写实现）。 crypto/ — 对这些 JDK 原语的薄封装。 group/ — 通过 sender-key...
CVE-2026-54520
CVE-2026-54520 ai-agent-automation workflow file step path traversal allowed read/write outside the expected directory. Primary advisory: GHSA-cm8g-8jfq-887p Researcher credit: @chaitanyagarware At a Glance...
CVE-2026-50131
CVE-2026-50131 Fedify incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allowed special-use IPv4 ranges. Primary advisory: GHSA-xw9q-2mv6-9fr8 Official CVE record: CVE-2026-50131 Researcher credit: @chaitanyagarware At a Glance...
Pixel_GPU_Exploit
Mali GPU Kernel LPE This article provides an in-depth analysis of two kernel vulnerabilities within the Mali GPU, reachable from the default application sandbox, which I independently identified and reported to Google. It includes a kernel exploit that achieves arbitrary kernel r/w capabilities...
CVE-1999-0524-POC
ICMP 时间戳扫描器 — CVE-1999-0524 root@kitploit: ╔══════════════════════════════════════════════════════════════════╗ ║ ██╗ ██████╗███╗ ███╗██████╗ ████████╗███████╗ ║ ║ ██║██╔════╝████╗ ████║██╔══██╗ ██╔══╝██╔════╝ ║ ║ ██║██║ ██╔████╔██║██████╔╝ ██║ ███████╗ ║ ║ ██║██║ ██║╚██╔╝██║██╔═══╝ ██║ ╚════██║ ...
alterx
AlterX Features • Installation • Usage • Running AlterX • Join Discord root@kitploit: Fast and customizable subdomain wordlist generator using DSL. Features Fast and Customizable Automatic word enrichment Pre-defined variables Configurable Patterns Pattern Mining - Automatically discover subdomai...
burpgpt
!IMPORTANT Announcing the launch of BurpGPT Pro, the edition specifically tailored to meet the needs of professionals and cyber boutiques. Discover a host of powerful features and a user-friendly interface that enhances your capabilities and ensures an optimal user experience. To access these...
CVE-2026-73172
Nozomi Networks Labs identified an OS Command Injection (CWE-78) vulnerability in the edgserver management service of the Advantech EKI-1242EIMS industrial Ethernet switch, running firmware version V1.06.01 . A remote, unauthenticated attacker can execute arbitrary OS commands with root privilege...
EUVD-2026-80728
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the edgserver management service of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to execute...
CVE-2026-73172
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the edgserver management service of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to execute...
RpcInvestigator
RPC Investigator 请阅读我们的博客文章公告。 RPC Investigator RPCI 是一个基于 .NET/C 的 Windows Forms 用户界面应用程序，为 Windows RPC 端点提供高级发现和分析接口。该工具围绕 NtApiDotNet 平台现有的核心 RPC 功能提供了可视化界面，包括： 枚举所有活动 ALPC RPC 服务器 从任何 PE 文件中解析 RPC 服务器 从进程及其加载的模块（包括服务）中解析 RPC 服务器 从符号服务器拉取符号信息 将 RPC 服务器定义导出为序列化的 .NET 对象，供您自己的脚本使用 除了这些核心功能，RPCI...
CVE-2026-34160
CVE-2026-34160 — Unauthenticated SSRF in Chamilo LMS via PENS plugin pens.php Severity : High CVSS 8.6 CWE : CWE-918 Server-Side Request Forgery Affected : chamilo/chamilo-lms 2.0-RC.2 Fixed in : 2.0-RC.3 Advisory : GHSA-g2xj-4cch-j276 NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-34160 Credit ...
chiasmodon
Chiasmodon Chiasmodon is an OSINT tool that allows users to gather information from various sources and conduct targeted searches based on domains, Google Play applications, email addresses, IP addresses, organizations, URLs, and more. It provides comprehensive scanning capabilities, customizable...
CGA-R66W-RC2F-H84R
Bulletin has no description...
CGA-6FF9-7C74-5P97
Bulletin has no description...
CGA-QCGW-RWJQ-MGG3
Bulletin has no description...
CGA-H7W8-XQCM-4R82
Bulletin has no description...