aura-botnet

Aura Botnet C2 Server The botnet's C2 server utilizes the Django framework as the backend. It is far from the most efficient web server, but this is offset by the following: Django is extremely portable and therefore good for testing/educational purposes. The server and database are contained...

ZimaOS <= v1.2.4 - Sensitive Information Disclosure

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all prior versions, the API endpoints in ZimaOS, such as http:///v1/users/image?path=/var/lib/casaos/1/apporder.json and http:///v1/users/image?path=/var/lib/casaos/1/system.json,...

CVE-2026-70157

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...

CVE-2026-70157

A Heap-based buffer overflow vulnerability exists in the Windows System Information Console . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as CRITICAL with a CVSS score of 9.8, impacting confidentiality, integrity, and ...

Microsoft Trace Data Helper Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally...

Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

Windows System Information Console Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...

Windows Cryptographic Services Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

Windows Clipboard User Service Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally...

Windows Hello Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70157: Windows System Information Console Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...

Astra Linux – Vulnerability in Zabbix

Users who do not have permission for any host can access and view the number of hosts along with other statistics through the System Information Widget in the Global View Dashboard...

MAL-2026-17453 Malicious code in gocommunity.io/orderedbtree (Go)

Part of the Graphalgo campaign. The module, first published around 2026-08-11, contains a second-stage remote access trojan in plaintext that runs automatically. The RAT collects system information, executes decrypted Go or JavaScript payloads, and polls two command-and-control channels every 3-1...

PT-2026-95672

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A hardcoded credentials issue exists within the hardware assess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, which may lead to...

CVE-2026-80239: Exposure of Sensitive System Information Due to Uncleared Debug Information

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability. An unauthenticated attacker with physical access could potentially exploit this...

CVE-2026-81394

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-81387

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-69406

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...

EUVD-2026-73856

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-69315

Windows License Manager is affected by an information disclosure vulnerability (CVE-2026-69315) where sensitive system information is exposed to an unauthorized control sphere, allowing an authorized local attacker to disclose information. The vulnerability requires low privileges and local acces...