unbound: Unbound: Denial of service due to memory corruption under specific configurations.

A flaw was found in Unbound, a validating, recursive, and caching Domain Name System DNS resolver. When configured with specific modules and under heavy load, a memory corruption vulnerability can occur due to improper handling of view names during subquery processing. This issue could lead to a...

SAP Document Builder 安全漏洞

SAP Document Builder is a content-driven cross-application solution from SAP. An authorization issue vulnerability exists in SAP Document Builder that stems from not performing required authorization checks for certain modules. An attacker could exploit the vulnerability to cause unauthorized...

Metasploit Weekly Wrap-Up

Capture Plugin Capturing credentials is a critical and early phase in the playbook of many offensive security testers. Metasploit has facilitated this for years with protocol-specific modules all under the auxiliary/server/capture. Users can start and configure each of these modules individually,...

Block Content Revision UI - Moderately critical - Access bypass - SA-CONTRIB-2021-017

This module provides a revision UI to Block Content entities. The module doesn't sufficiently respect access restrictions to certain entities when used in conjunction with specific modules. This vulnerability is mitigated by the fact that an attacker must have a role with any of the permissions...

REXT - Router Exploitation Toolkit

Small toolkit for easy creation and usage of various python scripts that work with embedded devices. core - contains most of toolkits basic functions databases - contains databases, like default credentials etc. interface - contains code that is being used for the creation and manipulation with...