gardyn-hack

Краткое описание В феврале 2025 года я провел исследование безопасности устройства Gardyn Home 4.0. В ходе исследования я обнаружил множественные уязвимости и низкий уровень безопасности. Используя эти уязвимости, злоумышленник может получить доступ к устройству Gardyn на уровне системы и...

DNSStager

Qu'est-ce que DNSStager ? DNSStager est un projet open source basé sur Python utilisé pour cacher et transférer votre payload en utilisant DNS. DNSStager va créer un serveur DNS malveillant qui gère les requêtes DNS vers votre domaine et renvoie votre payload en réponse à des demandes...

Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0011)

Before Kentico Xperience 13 Hotfix 173, this vulnerability can be exploited with any username provided. For Hotfix = 173 and = 173 and 178, this vulnerability can be exploited only if you provide a valid Staging Service username default: admin impact: | Unauthenticated attackers can bypass...

kentico-xperience13-AuthBypass-wt-2025-0006

WT-2025-0006 CVE еще не присвоен Kentico Xperience 13 CMS — проверка обхода аутентификации в Staging Service Демонстрация работы python3 watchTowr-vs-kentico-xperience13-AuthBypass-wt-2025-0006.py -H http://labcms / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | /...

FOLLINA-CVE-2022-30190

FOLLINA-CVE-2022-30190 Реализация FOLLINA-CVE-2022-30190 Этот репозиторий содержит инструмент эксплуатации для уязвимости FOLLINA-CVE-2022-30190 Отказ от ответственности Этот инструмент разработан для целей тестирования безопасности и исследований. Клонируя / форкая этот инструмент, исходный...

ransomware-simulator

QuickBuck - Simulateur de ransomware / \ / / / / / / // // // // // // '// |/ // // // '/ \\,/// ///\// ,/ ///\ Nextron Systems GmbH Le but de ce dépôt est de fournir un moyen simple et inoffensif de vérifier la protection de votre antivirus contre les ransomwares. Cet outil simule le...

Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0006)

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through...

kentico-xperience13-AuthBypass-wt-2025-0011

WT-2025-0011 CVE ещё не назначен Kentico Xperience 13 CMS — проверка обхода аутентификации в службе Staging Service Обнаружение в действии python3 .\watchTowr-vs-kentico-xperience13-AuthBypass-wt-2025-0011.py -H http://labcms -u admin / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ |...

krustyloader-analysis

Анализ KrustyLoader Этот репозиторий содержит ресурсы, связанные с анализом KrustyLoader, описанным в этой записи блога: https://www.synacktiv.com/publications/krustyloader-rust-malware-linked-to-ivanti-connectsecure-compromises. Python-скрипт для извлечения и расшифровки URL, используемого...

CVE-2018-10467

CVE-2018-10467 Хронология 2018-04-06: Обнаружено 2018-04-13: Повторное тестирование в промежуточной среде 2018-04-16: Внутренняя коммуникация 2018-04-27: Уведомление поставщика 2018-04-27: Обратная связь от поставщика 2018-05-27: Технические уточнения по продукту 2018-05-03: Добавлены инструкции ...

CVE-2018-10715

CVE-2018-10715 Хронология 2018-04-06: Обнаружено 2018-04-13: Повторное тестирование промежуточной среды 2018-04-16: Внутренняя коммуникация 2018-05-03: Уведомление вендора 2018-05-03: Ответ вендора 2018-05-XX: Технические уточнения о продукте 2018-05-XX: Добавлены инструкции по устранению проблем...

CVE-2026-80430

A flaw was found in kitty. An attacker running a program within the terminal can create arbitrary files and directories outside the staging area in any location writable by the user. This issue occurs because the drag-and-drop staging mechanism improperly resolves symbolic links symlinks pointing...

CVE-2026-100076

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmitframe/xmitbuf leaks on mgnt-frame error paths issuebeacon, issueprobersp and issueasocrsp obtain a management xmitframe together with its xmitbuf from the driver's fixed-size management-TX pools via...

CVE-2026-100076

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmitframe/xmitbuf leaks on mgnt-frame error paths issuebeacon, issueprobersp and issueasocrsp obtain a management xmitframe together with its xmitbuf from the driver's fixed-size management-TX pools via...

SUSE CVE-2026-93279

In the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing taskletkill in cvmocttxshutdown The TX cleanup tasklet can be scheduled by the watchdog IRQ handler to execute cvmocttxdocleanup. There can be a pending tasklet in the queue which might run after the...

CVE-2026-93223

In the Linux kernel, the following vulnerability has been resolved: staging: media: tegra-video: fix ofnodeput on VIP parse errors tegravipchannelofparse initializes np from dev-ofnode without taking a reference, but its error paths drop one through the errnodeput label. This underflows the...

PT-2026-97965

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free crash occurs in the octeon staging driver. The cvm oct rx shutdown function calls free irq and netif napi del without first disabling the NAPI instance. Since free irq...

PT-2026-97966

In the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing tasklet kill in cvm oct tx shutdown The TX cleanup tasklet can be scheduled by the watchdog IRQ handler to execute cvm oct tx do cleanup. There can be a pending tasklet in the queue which might run...

CVE-2026-7006

Sublime Text for Windows through Build 4192 Sublime Text 4 and Build 3207 Sublime Text 3 contains a local privilege escalation vulnerability that allows unprivileged local attackers to execute arbitrary code with elevated privileges by abusing the update staging mechanism. Attackers can place a...

CVE-2026-7006 Sublime Text 4192/3207 Local Privilege Escalation via Update Staging Mechanism

Sublime Text for Windows through Build 4192 Sublime Text 4 and Build 3207 Sublime Text 3 contains a local privilege escalation vulnerability that allows unprivileged local attackers to execute arbitrary code with elevated privileges by abusing the update staging mechanism. Attackers can place a...