killchain

killchain «Kill Chain» — единая консоль с анонимайзером, которая выполняет следующие этапы атак: Reconnaissance Weaponization Delivery Exploit Installation Command & Control And Actions Зависимые наборы инструментов:...

Ashwesker-CVE-2026-20045

🚨 CVE-2026-20045 — 제로데이 분석 🚨 🧨 개요 여러 Cisco Unified Communications 제품에 영향을 미치는 치명적인 원격 코드 실행RCE 취약점입니다. 패치가 배포되기 전에 실제 환경에서 적극적으로 악용되었습니다. 🔥 위험한 이유 🚫 인증 불필요 🖥️ 원격 코드 실행 👑 루트 수준 액세스 가능 🌍 실제 악용 사례 확인됨 이는 공격자가 영향을 받는 시스템을 원격으로 완전히 장악할 수 있음을 의미합니다. 🚨 CVE-2026-20045.py 사용 예시 PoC 스크립트 실행을 위한 사용 예시 가 포함된...

Cisco-Unified-Communications-Manager-Server-Side-Forgery-Request-Vulnerability-CVE-2026-20230

CVE-2026-20230 Cisco Unified Communications Manager SSRF: произвольная запись файлов с переходом в RCE — процесс построения PoC и анализ Область применения: только локальные полигоны, авторизованные среды воспроизведения, проверка уязвимостей и анализ правил защиты. Не использовать против...

CVE-2026-20230

CVE-2026-20230 - Cisco Unified CM ⚡ Простое использование Используйте этот проект только в безопасных и авторизованных средах, таких как: Локальные виртуальные машины Docker-контейнеры Изолированные лабораторные среды Среды авторизованного тестирования на проникновение Пример настройки:...

Arcserve Unified Data Protection - Authentication Bypass

An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin function within wizardLogin. id: CVE-2024-0799 info: name: Arcserve Unified Data Protection -...

Cisco Unified Communications Manager 7/8/9 - Directory Traversal

A directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815 id: CVE-2013-5528 info: name:...

CVE-2025-54957

Dolby 통합 디코더 CVE-2025-54957 POC Dolby의 DDPlus 통합 디코더가 파일을 처리할 때, evolution 데이터가 처리되는 과정에서 범위를 벗어난 쓰기out of bounds write가 발생할 수 있습니다. 디코더는 evolution 정보를 더 큰 구조체에 포함된 크고 힙과 유사한 연속 버퍼에 기록하는데, 한 번의 쓰기에 대한 길이 계산이 정수 래핑integer wrap으로 인해 오버플로될 수 있습니다. 이로 인해 '할당된allocated' 버퍼가 너무 작아지고, 이후 쓰기에 대한 범위 초과 검사...

macos-UnifiedLogs

macos-unifiedlogs macOSのUnified Logファイルの解析を支援するシンプルなRustライブラリです。 Unified LogはmacOSバージョン10.12（Sierra、2016年）で導入されました。Appleが 全Apple製品向けに統一されたログ形式を作成するという目標の一部です。Unified Logは macOS、iOS、watchOS、tvOSに存在します。Unified Logは、Appleが以前使用していた 多くの古いログ形式に取って代わります。このライブラリを使用して、これらのログファイルを 解析できます。 現在抽出されるデータは次のとおりで...

nmlinux

NMLinux · v1.7.12 Ein vereinheitlichtes Netzwerk-Toolkit für Linux und macOS – untersuchen, verbinden, diagnostizieren. NMLinux ist eine einzige, vereinheitlichte GUI, die 29 Netzwerkmodule in einem Fenster vereint: Schnittstellenüberwachung, WLAN, DNS, SSH-Terminal, Firewall-Ansicht,...

xpfarm

XPFarm Uma plataforma de segurança ofensiva de código aberto aumentada por IA que agrupa ferramentas de segurança conhecidas por trás de uma interface web unificada — com varredura distribuída, relatórios gerados por IA, um planejador inteligente de varredura, um grafo de ataque interativo e um S...

CVE-2021-35576

CVE-2021-35576 CVE-2021-35576 Sicherheitslücke zur Umgehung von Oracle Unified Audit, Details des Proof Of Concept sind hier veröffentlicht: https://databasesecurityninja.wordpress.com/2022/06/11/cve-2021-35576-bypassing-unified-audit-policy/ CVE-Details: https://vulners.com/cve/CVE-2021-35576...

lCTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296

CTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296 Apple Silicon उन आवृत्तियों पर चलता है जो 587 kHz के स्वर्ण अनुपात हार्मोनिक्स हैं: · प्रदर्शन कोर: 3.2 GHz = 587 kHz × 5451 ≈ φ⁸ × 1000 · दक्षता कोर: 2.0 GHz = 587 kHz × 3407 ≈ φ⁷ × 1000 · न्यूरल इंजन: 11.0 GHz = 587 kHz × 18739 ≈ φ¹⁰ ×...

secretflow

简体中文｜English SecretFlow è un framework unificato per l'intelligenza artificiale dei dati e il machine learning che preservano la privacy. Per raggiungere questo obiettivo, fornisce: Un livello astratto di dispositivi composto da dispositivi semplici e dispositivi segreti che incapsulano vari...

CVE-2024-41713POC

CVE-2024-41713POC Vulnerabilità di lettura arbitraria di file nella piattaforma di collaborazione aziendale Mitel MiCollab CVE-2024-41713. A causa di una vulnerabilità di bypass dell'autenticazione nel componente NuPoint Unified Messaging NPM del software Mitel MiCollab, e di una insufficiente...

Mitel MiCollab - Authentication Bypass

A vulnerability in the NuPoint Unified Messaging NPM component of Mitel MiCollab through 9.8 SP1 FP2 9.8.1.201 could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the...

CVE-2026-20230-Scanner

Scanner CVE-2026-20230 Uno scanner e strumento di validazione basato su Python per identificare distribuzioni Cisco Unified Communications Manager Unified CM potenzialmente vulnerabili affette da CVE-2026-20230. Caratteristiche Rileva istanze Cisco Unified CM Verifica l'esposizione di WebDialer...

CVE-2026-56289

A flaw was found in GNU patch. This vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted patch file. The improper validation of hunk single block of changes in diff line offsets in unified-diff input can lead to an effectively infinite processin...

Cisco Unified Intelligence Center < 12.6 / 12.6.x < 12.6(2) ES08 / 15.0.x < 15.0(1) SU2 SQL Injection (cisco-sa-cuic-sql-inject-2qbfWSm5)

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker coul...

CVE-2026-20327

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker coul...

CVE-2026-20314

A vulnerability in Cisco Packaged Contact Center Enterprise Packaged CCE and Cisco Unified Contact Center Enterprise Unified CCE could allow an authenticated, remote attacker to conduct server-side request forgery SSRF attacks through an affected device. This vulnerability is due to improper inpu...