CVE-2026-67445

In Mailpit versions prior to 1.30.4, the SMTP command reader in internal/smtpd/smtpd.go uses bufio.Reader.ReadString before enforcing the RFC 5321 512-octet limit, allowing an unauthenticated remote attacker to send oversized command lines (including auth continuation lines) and exhaust memory, r...

CVE-2026-67445 Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection

Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit reads SMTP commands through internal/smtpd/smtpd.go session.readLine using bufio.Reader.ReadString before session.parseLine parses the verb or the RFC 5321 512-octet command-line limit is enforced. An unauthenticate...

CVE-2026-53804

OTRS Community Edition is affected by an authenticated OS command injection in the PGP encryption module . The root cause is that administrator-supplied configuration values (PGP binary path and command options) are concatenated into a shell command without sanitization , enabling arbitrary comma...

CVE-2026-53804 OTRS Community Edition OS Command Injection via PGP Configuration

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...

CVE-2026-53804 OTRS Community Edition OS Command Injection via PGP Configuration

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...

EUVD-2026-63662

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...

CVE-2026-53804 OTRS Community Edition OS Command Injection via PGP Configuration

OTRS Community Edition contains an authenticated OS command injection vulnerability in the PGP encryption module that allows administrators to execute arbitrary operating-system commands by supplying crafted values for the PGP binary path and command options. Administrator-supplied configuration...

asafw

asafw Nota preliminar: recomendamos que você use isto como parte de asatools, mas também pode ser usado de forma independente. asafw é um conjunto de scripts para lidar com firmware Cisco ASA. Ele permite que alguém descompacte o firmware necessário ao depurar com gdb, bem como...

DIBF

DIBF Suite di strumenti IOCTL per driver Windows. DIBF Brute-forcer dinamico di Ioctl e fuzzer Questo strumento comprende due funzionalità distinte. Indovina i valori IOCTL accettati dal driver e anche i relativi limiti di dimensione validi e salva i risultati in un file per un uso futuro. La...

lightweight_static_analysis

Leichtgewichtige statische Analyse Dieses Repo enthält den PoC-Code für einen Vortrag auf der ShellCon 2019, „Rolling Your Own: How to Write Custom, Lightweight Static Analysis Tools“ Folien. Kurz gesagt zeigt dieses Repo ein paar konkrete Beispiele, wie du interessante statische Analysen mit...

faraday v5.23.2

Open Source Vulnerability Manager Security has two difficult tasks: designing smart ways of getting new information, and keeping track of findings to improve remediation efforts. With Faraday, you may focus on discovering vulnerabilities while we help you with the rest. Just use it in your termin...

dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

dracut: dracut: Root code execution via DHCP options command injection

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic Host Configuration Protocol options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and...

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-74389

A flaw was found in the Linux kernel's RDMA/hns component. When the hardware experiences an abnormality, the hnsrocecmdmbox command interface can fail. This failure leads to an uncontrolled flood of error messages, which can consume system resources and ultimately cause a system crash, resulting ...

WhoWasI

WhoWasI Questa applicazione è in grado di impersonare qualsiasi utente con sessione attiva ed eseguire comandi nel contesto dell'utente impersonato. Rilasciato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato da: Chris Thomas, chris dot Thomas at nccgroup dot com...

WMIcmd

Das Problem Bei Untersuchungen mit geringer Auswirkung und ähnlichen Aktivitäten möchte man möglicherweise minimieren, was auf die Festplatte geschrieben wird / offensichtlich ist. Dieses Tool ermöglicht es uns, Befehle über WMI auszuführen und Informationen zu erhalten, die über diesen Kanal son...

POC-CVE-2026-56164-exploit

CVE-2026-56164 — Exploit di bypass dell'autenticazione di Microsoft SharePoint Server Critico CVSS 9.8 — Escalation di privilegi non autenticata ad Amministratore Farm in Microsoft SharePoint Server Indice Panoramica Dettagli della vulnerabilità Versioni interessate Diagrammi di architettura...

grade-server-ctf

grade server ctf a black-box penetration test of a deliberate...

CVE-2026-53413

cve-id Doar Ajude a manter este projeto com PayPal ou escaneando o código QR abaixo. ⚡ Uso Simples Use este projeto apenas em ambientes seguros e autorizados, como: Máquinas virtuais locais Contêineres Docker Configurações de laboratório isoladas Ambientes autorizados de teste de penetração Exemp...