SirepRAT

SirepRAT - RCE as SYSTEM on Windows IoT Core SirepRAT Features full RAT capabilities without the need of writing a real RAT malware on target. Context The method is exploiting the Sirep Test Service that’s built in and running on the official images offered at Microsoft’s site. This service is th...

Enumprotections_BOF

Enumprotections BOF This BOF can be used to enumerate system processes and identify the protection level of each one. Additional information, like service relation, user, session, and path, are also returned. This information in combination can be used to identify good candidates to explore for...

CVE-2024-31317-Deployer

CVE-2024-31317 Deployer 🔒 Security Research Statement This project is intended solely for security research and educational purposes. Using this tool for unauthorized testing is illegal. The author is not responsible for any misuse or damage. 📋 Overview CVE-2024-31317 is a critical security...

CVE-2026-126473

OpenEMR before 8.4.0 contains OAuth scope canonicalization and containment flaws that allow unauthenticated attackers to obtain unapproved system-level FHIR access. Attackers can register a colon-form system:Patient.read client that bypasses approval, then request unregistered system/Patient.writ...

CVE-2026-23520

CVE-2026-23520 MCP API Remote Command Execution RCE PoC 📌 Overview This repository contains a Proof-of-Concept PoC exploit for a Remote Command Execution RCE vulnerability affecting applications that expose a vulnerable MCP API endpoint commonly /api/mcp/connect. The vulnerability allows executio...

Multiple vulnerabilities have been addressed in Citrix Secure Access Client, NetScaler ADC, NetScaler Gateway, and NetScaler Console.

Citrix has addressed multiple vulnerabilities in Citrix Secure Access Client, NetScaler ADC, NetScaler Gateway, and NetScaler Console. These vulnerabilities have been assigned CVSS v4.0 scores ranging from 6.9 to 9.5. They include memory corruption, improper authentication, and improper privilege...

A hidden backdoor put 1.3 million set-top boxes to work for criminals

.kadence-column4841751ef361-88 .kt-inside-inner-colpadding-top:20px;padding-right:20px;padding-bottom:10px;padding-left:20px;.kadence-column4841751ef361-88 .kt-inside-inner-colcolumn-gap:var--global-kb-gap-sm, 1rem;.kadence-column4841751ef361-88...

Gen Digital Norton Antivirus backlink vulnerability

Versions prior to Gen Digital Norton Antivirus 26.5.10933, Avast Antivirus 26.5.10933, and AVG Internet Security 26.5.10933 contain a post-link vulnerability. This vulnerability stems from a link-following flaw in the Data Shredder component, allowing local attackers with low privileges to delete...

CVE-2026-93865

A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administrative actions by sending a specially crafted request to the FireCluster management IP when the clustering feature is...

EUVD-2026-111162

A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administrative actions by sending a specially crafted request to the FireCluster management IP when the clustering feature is...

CVE-2026-93865: Missing Authentication for Critical Function

A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administrative actions by sending a specially crafted request to the FireCluster management IP when the clustering feature is...

WatchGuard Fireware OS authorization issue vulnerability

Security vulnerabilities exist in WatchGuard Fireware OS versions from 2025.1 up to and including 2026.4, as well as versions from 12.0 up to and including 12.12.4 and from 12.0 up to and including 12.5.22. These vulnerabilities stem from the FireCluster synchronization daemon lacking...

PT-2026-126646

A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administrative actions by sending a specially crafted request to the FireCluster management IP when the clustering feature is...

CVE-2026-63618

Exposure of Sensitive Information system level configuration info to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue...

CVE-2026-63618 Apache Kylin: Low-Privilege Config Exposure

Exposure of Sensitive Information system level configuration info to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue...

CVE-2026-63618

Apache Kylin versions 4 through 5.0.4 are vulnerable to a vulnerability where system-level configuration information is exposed to an unauthorized actor. This exposure occurs due to improper access controls, potentially allowing an attacker to view sensitive configuration details. To remediate th...

EUVD-2026-102851

Exposure of Sensitive Information system level configuration info to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue...

CVE-2026-63618

Exposure of Sensitive Information system level configuration info to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue...

CVE-2026-63618 Apache Kylin: Low-Privilege Config Exposure

Exposure of Sensitive Information system level configuration info to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue...

PT-2026-115600

Name of the Vulnerable Software and Affected Versions Apache Kylin versions 4 through 5.0.4 Description An issue exists that allows an unauthorized actor to gain access to sensitive system-level configuration information. Recommendations Upgrade to version 5.0.5...