Schwarze-Sonne-RAT

Schwarze-Sonne-RAT SS-RAT Schwarze-Sonne-Remote-Access-Trojan...

CVE-2020-13159

CVE-2020-13159 - Artica Proxy before 4.30.000000 Community Edition allows Multiple OS command injection. Product Description: Artica Tech offers a powerful but simple-to-use solution, usually the preserve of Large and Multinational companies. With a starting price of just 99€ and more than 62 000...

Atlassian Bitbucket - Remote Command Injection

Atlassian Bitbucket Server and Data Center is susceptible to remote command injection. Multiple API endpoints can allow an attacker with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request, thus making it possible to obtain...

TRAI-001-Critical-RCE-Vulnerability-in-Apache-Parquet-CVE-2025-30065-Simulation

TRAI-001 CVE-2025-30065: Apache Parquet Remote Code Execution RCE Exploit Simulator Demo Screenshot Simulator interface demonstrating the exploit chain 📌 Overview This repository contains an educational simulation of CVE-2025-30065, a critical Remote Code Execution vulnerability in Apache Parquet...

CVE-2026-112116

An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical memory through crafted device control requests, ultimately resulting in a complete compromise of the affected system. Refer to the ' Security...

EUVD-2026-116689

An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical memory through crafted device control requests, ultimately resulting in a complete compromise of the affected system. Refer to the ' Security...

CVE-2026-112116

The ASUS System Control Interface contains an exposed IOCTL with insufficient access control. This vulnerability allows a local, low-privileged user to perform arbitrary read and write operations on physical memory by sending crafted device control requests. If successfully exploited, this flaw c...

Hitachi Energy CoreTec 5 command injection vulnerability

Versions 5.3.0 through 5.0.0 of Hitachi Energy CoreTec and versions 3.0.0 through 3.4.0 of CoreTec contain a command injection vulnerability. This vulnerability arises because the configuration daemon’s time synchronization handler, when processing updates to timezone configurations, concatenates...

EUVD-2026-108548

The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted into a shell command. An authenticated web user with access to this function can embed characters to execute arbitrary...

CVE-2026-107861

The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted into a shell command. An authenticated web user with access to this function can embed characters to execute arbitrary...

CVE-2026-107861 Kiloview E3 NDI Encoder OS Command Injection

The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted into a shell command. An authenticated web user with access to this function can embed characters to execute arbitrary...

CVE-2026-107861 Kiloview E3 NDI Encoder OS Command Injection

The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted into a shell command. An authenticated web user with access to this function can embed characters to execute arbitrary...

CVE-2026-107861

The Kiloview E3 NDI encoder is vulnerable to an OS command injection flaw within its firmware. The system control service fails to properly sanitize the hostname parameter accepted by the device naming endpoint, which is subsequently passed unquoted into a shell command. An authenticated web user...

PT-2026-121682

The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted into a shell command. An authenticated web user with access to this function can embed characters to execute arbitrary...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues related to the Deployment SEC component and may allow unauthenticated attackers to gain access to the infrastructure hosting JD Edwards EnterpriseOne...

Oracle SOA Suite authorization issue vulnerabilities

The Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 contain vulnerabilities related to authorization. These vulnerabilities stem from issues with the Fabric Layer component, which may allow unauthenticated attackers to gain control of the system through HTTP network access...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Business Interlink component. Unauthorized attackers may gain access through the HTTP network, allowing PeopleSoft Enterprise PeopleTools to take control o...

Astra Linux – vulnerability in linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: Firmware: armscpi: Fix string overflow in SCPI genpd driver Without the bounds checks on scpipd-name, it could lead to a buffer overflow when copying the SCPI device name from the corresponding device tree node; the name string i...

Astra Linux – vulnerability in linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Firmware: armscmi: Check mailbox/SMT channel for consistency Upon receiving a completion interrupt, the shared memory area is accessed first to retrieve the message header; if the message sequence number indicates a transaction...

CVE-2026-68006

A flaw was found in Puma. An attacker could exploit a vulnerability within the HTTP parser component to execute arbitrary code. This could allow the attacker to take control of the affected system. Mitigation Mitigation for this issue is either not available or the currently available options do...