rtl_433

rtl433 rtl433 despite the name is a generic data receiver, mainly for the 433.92 MHz, 868 MHz SRD, 315 MHz, 345 MHz, and 915 MHz ISM bands. The official source code is in the https://github.com/merbanan/rtl433/ repository. See also a list of software that works with rtl433 in the wiki. For more...

The_Shelf

The Shelf The Shelf is a place where Trustedsec places capabilities that are being retired from our standard usage. Capabilities uploaded to the shelf are unsupported and AS IS. This repo will not accept pull requests either and they will be closed without comment. Layout You will see the folders...

CVE-2023-4220

CVE-2023-4220 Exploit for CVE-2023-4220 This is an exploit to exploit the vulnerability CVE-2023-4220 To execute the exploit, use it as follows: python3 exploit.py-u 'http:///main/inc/lib/javascript/bigupload/inc/bigUpload.php?action=post-unsupported' -f 'archivoasubir'...

CVE-2026-125332

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.3, a forge.tls client accepts a ServerHello compressionmethod that it did not offer. When the client later handles ServerHelloDone, tls.createConnectionState rejects the unsupported...

CVE-2026-125332

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.3, a forge.tls client accepts a ServerHello compressionmethod that it did not offer. When the client later handles ServerHelloDone, tls.createConnectionState rejects the unsupported...

CVE-2026-65652

A flaw was found in github.com/temporalio/tchannel-go. A remote attacker can exploit this vulnerability by sending a malformed TChannel call request with an unsupported checksum type. This lack of validation causes the application to terminate due to an unrecovered Go panic, leading to a denial o...

DRUPAL-CONTRIB-2026-278

Integration with GroupEx PRO system, decoupled from Open Y. The module does not sufficiently validate user inputs in some scenarios, potentially leading to arbitrary remote code execution. Note: This project was marked as Unsupported by the Drupal Security Team on 2026-10-28 but a fix was release...

GroupEx PRO ( Daxko ) integration - Critical - PHP object injection - SA-CONTRIB-2026-278

Integration with GroupEx PRO system, decoupled from Open Y. The module does not sufficiently validate user inputs in some scenarios, potentially leading to arbitrary remote code execution. Note: This project was marked as Unsupported by the Drupal Security Team on 2026-10-28 but a fix was release...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: avoid a NULL dereference with unsupported widgets If an IPC4 topology contains an unsupported widget, its .moduleinfo field will not be set; consequently, sofipc4routesetup will trigger a kernel Oops by attempting to...

CVE-2026-118564

Vulnerability in Drupal PayUmoney for Drupal Commerce. This issue affects PayUmoney for Drupal Commerce versions:...

DRUPAL-CONTRIB-2026-276

The Drupal Security Team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on becoming the maintainer of a project that is unsupported for security...

CacheFlush - Critical - Unsupported - SA-CONTRIB-2026-276

The Drupal Security Team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on becoming the maintainer of a project that is unsupported for security...

PayUmoney for Drupal Commerce - Critical - Unsupported - SA-CONTRIB-2026-277

The Drupal Security Team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on becoming the maintainer of a project that is unsupported for security...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unsupported HTTP methods on static paths

A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service DoS by sending requests with unsupported or non-canonical HTTP methods to an existing static path. Because the application encounters an unhandled panic before authentication is evaluated, these...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unsupported HTTP methods on static paths

A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service DoS by sending requests with unsupported or non-canonical HTTP methods to an existing static path. Because the application encounters an unhandled panic before authentication is evaluated, these...

CLSA-2024-1707478061 kernel: Fix of 12 CVEs

netfilter: nftables: reject QUEUE/DROP verdict parameters CVE-2024-1086 - RDMA/core: Refactor rdmabindaddr CVE-2023-2176 - RDMA/cma: Do not change route.addr.srcaddr outside state checks - RDMA/cma: Ensure rdmaaddrcancel happens before issuing more requests - drm/amdgpu: Fix potential fence...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix null pointer dereference when IPv6 is not enabled When we attempt to add an IPv6 nexthop parameter, and IPv6 is not enabled !CONFIGIPV6, we encounter a NULL pointer dereference in the error path of nhcreateipv6...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: assert requested protocol is valid The protocol is used in a bit mask to determine whether the protocol is supported. Asserting that the provided protocol is less than the maximum defined value prevents potential...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unsupported HTTP methods on static paths

A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service DoS by sending requests with unsupported or non-canonical HTTP methods to an existing static path. Because the application encounters an unhandled panic before authentication is evaluated, these...

ida-pro-mcp

IDA Pro MCP !IMPORTANT Consiglio invece di usare l'Official Hex-Rays IDA MCP Server! Consulta il post di annuncio sul blog per maggiori informazioni. Semplice MCP Server per consentire il vibe reversing in IDA Pro. https://github.com/user-attachments/assets/6ebeaa92-a9db-43fa-b756-eececce2aca0 I...