nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

DIRT

DIRT: Driver Initial Reconnaissance Tool I'm writing this tool to learn C++ and get an initial assessment of drivers installed on a Windows system e.g. master images developed by OEMs or enterprises. It's supposed to help with target selection, finding low-hanging fruit, and some assistance with...

Nmap-Cheat-Sheet

Nmap-Cheat-Sheet Nmap Target Selection Scan a single IP nmap 192.168.1.1 Scan a host nmap www.testhostname.com Scan a range of IPs nmap 192.168.1.1-20 Scan a subnet nmap 192.168.1.0/24 Scan targets from a text file nmap -iL list-of-ips.txt Nmap Port Selection Scan a single Port nmap -p 22...

Host Attack Graph for Botnet Propagation

Botnets represent the backbone of most modern cybersecurity attacks through which botmasters deploy distributed denial of service and advanced persistent threats against legitimate computer networks. In this paper we introduce the Host Attack Graph model and propose two botnet propagation...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the browser tool's node target selection, which fails to enforce the allowHostControl=false configuration for sandboxed sessions. An attacker with control over...

Needles at Scale: LLM-Assisted Target Selection for Windows Vulnerability Research

The attack surface of a modern operating system is a haystack: thousands of signed binaries and millions of functions, almost none relevant to any given vulnerability. A human analyst or an LLM agent must pick the function worth reading before analyzing it. At whole-OS scope, this target selectio...

PT-2026-42473

Name of the Vulnerable Software and Affected Versions libheif versions 1.19.0 through 1.21.2 Description libheif, a HEIF and AVIF file format decoder and encoder, contains a heap out-of-bounds OOB read. This occurs in the ImageItem Grid::decode grid tile function due to a tile-coordinate underflo...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:0617-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0617-1 advisory. The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: -...

Unbreakable Enterprise kernel security update

5.4.17-2136.344.4.3 - Add Zen34 clients Borislav Petkov AMD Orabug: 38129026 CVE-2024-36350 CVE-2024-36357 - x86/process: Move the buffer clearing before MONITOR Kim Phillips Orabug: 38129026 CVE-2024-36350 CVE-2024-36357 - KVM: SVM: Advertize TSA CPUID bits to guests Borislav Petkov AMD Orabug:...

SUSE-SU-2025:02030-1 Security update for xen

This update for xen fixes the following issues: Security fixes: - CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection ITS XSA-469 bsc1243117 Other fixes: - Upstream bug fixes bsc1027519...

Security update for xen

This update for xen fixes the following issues: Security fixes: CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection ITS XSA-469 bsc1243117 Other fixes: Upstream bug fixes bsc1027519 Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: T...

Security update for xen

This update for xen fixes the following issues: CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection ITS XSA-469 bsc1243117 CVE-2024-53241: Fixed Xen hypercall page unsafe against speculative attacks XSA-466 bsc1234282 CVE-2025-1713: Fixed deadlock potential with VT-d and legacy PCI device...

Security update for xen

This update for xen fixes the following issues: CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection ITS XSA-469 bsc1243117 CVE-2024-53241: Fixed Xen hypercall page unsafe against speculative attacks XSA-466 bsc1234282 CVE-2025-1713: Fixed deadlock potential with VT-d and legacy PCI device...

Oracle Linux 9 : Unbreakable Enterprise kernel (ELSA-2025-20368)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20368 advisory. - selftest/x86/bugs: Add selftests for ITS Pawan Gupta Orabug: 37945459 CVE-2024-28956 - x86/its: Align RETs in BHB clear sequence to avoid thunking Pawan Gupt...

[SECURITY] [DSA 5924-1] intel-microcode security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5924-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 23, 2025 https://www.debian.org/security/faq -...

Debian dsa-5924 : intel-microcode - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5924 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5924-1 [email protected] https://www.debian.org/securit...

Missing Linux Kernel mitigations for 'Indirect Target Selection (ITS)' hardware vulnerability (INTEL-SA-01153)

The remote host is missing one or more known mitigations on Linux Kernel side for the referenced SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

CVE-2024-28956

Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

Oracle Linux 9 : Unbreakable Enterprise kernel (ELSA-2025-20318)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-20318 advisory. - selftest/x86/bugs: Add selftests for ITS Pawan Gupta Orabug: 37863725 CVE-2024-28956 - x86/its: Align RETs in BHB clear sequence to avoid thunking Pawan Gupt...

x86: Indirect Target Selection

ISSUE DESCRIPTION Researchers at VU Amsterdam have released Training Solo, detailing several speculative attacks which bypass current protections. One issue, which Intel have named Indirect Target Selection, is a bug in the hardware support for prediction-domain isolation. The mitigation for this...