2983 matches found
Threat-Intelligence-Alerts
Threat Intelligence Alerts Our Threat Intelligence team uses a range of sources and tools to monitor external reporting and carry out a daily review of this intelligence to identify changes to the threat landscape which requires action internally, whether this is in the form of additional...
NotQuite0DayFriday
This repository documents real bugs in real software. At the time of disclosure the most recent versions were patched. Seeing mistakes that were made in the past can be a useful tool for seeing trends of bugs which make it past all the quality control processes. Understanding what happened, is th...
foolav
foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...
Aruba Instant Access Point (IAP) - Cross-Site Scripting
A remote cross-site scripting xss vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below;...
spyre
Spyre ...a simple, self-contained modular host-based IOC scanner Spyre is a simple host-based IOC scanner built around the YARA pattern matching engine and other scan modules. The main goal of this project is easy operationalization of YARA rules and other indicators of compromise. Users need to...
CVE-2024-48510-PoC
CVE-2024-48510-PoC I write a blog about this vulnerability here: https://havertz2110.github.io/posts/cve-reproduce-cve-2024-48510-dotnetzip/...
Malware in do-wnload-available-mulatu-steps-ahead-ag2jn-fzxotp
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2026-17996 Malicious code in do-wnload-available-mulatu-steps-ahead-ag2jn-fzxotp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e31f44ca1e99435d949ced392e4cd3adbbe5c85754dfc91dd1b9634a2615510a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in do-wnload-available-mulatu-steps-ahead-ag2jn-fzxotp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e31f44ca1e99435d949ced392e4cd3adbbe5c85754dfc91dd1b9634a2615510a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview do-wnload-available-mulatu-steps-ahead-ag2jn-fzxotp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
Exploit for CVE-2023-54391
CVE-2023-54391 – Proxmox VE Authentication Bypass TFA Bypass...
Tandoor Recipes: Permissions, licensing, and access control issues
Versions of Tandoor Recipes prior to 2.6.12 have security vulnerabilities. This vulnerability arises from the fact that the StepViewSet and IngredientViewSet only filter by activity space, and they use role-level CustomIsUser checks instead of private recipe owners or shared predicates. When...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is = U32MAX - 3, then adding “length + 4” can result in an integer overflow. This issue is addressed by breaking the decoding process into multiple steps, ensuring that...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Fixed the bounds check for sx controls. For sx controls, the semantics of the max field are not the usual one; max represents the number of steps, rather than the maximum value. This means that our check in...
dora
dora Características Extremadamente rápido ya que utilizamos ripgrep en el backend Pasos de explotación/PoC para muchas de las claves API, lo que permite redactar un buen informe para la caza de recompensas por errores A diferencia de muchos otros buscadores de claves API, dora también muestra la...
osmedeus
Osmedeus Osmedeus - A Modern Orchestration Engine for Security What is Osmedeus? Osmedeus is a security focused declarative orchestration engine that simplifies complex workflow automation into auditable YAML definitions, complete with encrypted data handling, secure credential management, and...
PT-2026-109535
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference / Missing Authorization in versions up to, and including, 5.7.2. This is due to the publicly reachable steps start and steps load step routes...
CVE-2026-19878
IBM Security Verify Access (versions 10.0 through 10.0.9.2) and IBM Verify Identity Access (versions 11.0 through 11.0.3) are vulnerable to a security flaw that allows a remote authenticated attacker to bypass additional authentication workflow steps. This issue is attributed to CWE-841: Improper...