aura-botnet

Aura Botnet C2 Server The botnet's C2 server utilizes the Django framework as the backend. It is far from the most efficient web server, but this is offset by the following: Django is extremely portable and therefore good for testing/educational purposes. The server and database are contained...

ZimaOS <= v1.2.4 - Sensitive Information Disclosure

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the API endpoints in ZimaOS, such as http:///v1/users/image?path=/var/lib/casaos/1/apporder.json and http:///v1/users/image?path=/var/lib/casaos/1/system.json,...

ASUS motherboard buffer error vulnerability

The ASUS motherboard has a buffer error vulnerability caused by an untrusted pointer dereference. Users with kernel-level privileges can use I/O commands to supply arbitrary memory addresses, potentially leading to system information tampering or system crashes...

Sebastian Hildebrandt systeminformation input validation error vulnerability

Versions of Sebastian Hildebrandt System Information prior to 5.33.13 contain an input validation error vulnerability. This vulnerability arises because the networkStats function in lib/network.js uses a caller-controlled interface name index to access the network cache on FreeBSD, OpenBSD, and...

Sebastian Hildebrandt systeminformation command injection vulnerability

Versions of Sebastian Hildebrandt System Information prior to 5.33.16 contain a command injection vulnerability. This vulnerability arises because the services function inserts the caller-supplied service name into the PowerShell Get-CimInstance filter. During cleanup, only ASCII quotes are remov...

CVE-2026-70157

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...

CVE-2026-70157

A Heap-based buffer overflow vulnerability exists in the Windows System Information Console . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as CRITICAL with a CVSS score of 9.8, impacting confidentiality, integrity, and ...

EUVD-2026-99870

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...

Windows Cryptographic Services Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

Windows System Information Console Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...

Microsoft Trace Data Helper Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally...

Windows Clipboard User Service Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally...

Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

Windows Hello Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally...

PT-2026-112262

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...

CVE-2026-70157: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70157: Windows System Information Console Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...

PT-2026-112668

Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally...

PT-2026-112184

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information...

Malicious code in gocommunity.io/orderedbtree (Go)

Part of the Graphalgo campaign. The module, first published around 2026-08-11, contains a second-stage remote access trojan in plaintext that runs automatically. The RAT collects system information, executes decrypted Go or JavaScript payloads, and polls two command-and-control channels every 3-1...