706 matches found
CVE-2026-54160 Network UPS Tools: A PWN Request in make-dist workflow can execute PR-controlled code with write-scoped GITHUB_TOKEN
Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. Prior to commits 658b24e and 1aa31d1, the GitHub Actions script used to prepare NUT tarballs and update GitHub Checks statuses and PR comments about it was...
CVE-2026-54160 Network UPS Tools: A PWN Request in make-dist workflow can execute PR-controlled code with write-scoped GITHUB_TOKEN
Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. Prior to commits 658b24e and 1aa31d1, the GitHub Actions script used to prepare NUT tarballs and update GitHub Checks statuses and PR comments about it was...
CVE-2026-54160
The Network UPS Tools (NUT) software contains a vulnerability in its GitHub Actions script used for the make-dist workflow. Due to a misconfiguration that mixed privileged code (a write-scoped GITHUB_TOKEN ) with untrusted inputs from PR source branches, a malicious pull request from a fork could...
CVE-2026-54160: Inclusion of Functionality from Untrusted Control Sphere
Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. Prior to commits 658b24e and 1aa31d1, the GitHub Actions script used to prepare NUT tarballs and update GitHub Checks statuses and PR comments about it was...
offensive-security-writeups
Offensive Security Write-ups from the CTF challenges tackled...
PT-2026-83791
Name of the Vulnerable Software and Affected Versions D-Link DNS-320L versions prior to 20260717 D-Link DNS-327L versions prior to 20260717 D-Link DNS-340L versions prior to 20260717 D-Link DNS-345 versions prior to 20260717 Description A remote OS command injection exists within the CGI Handler...
metasploitable2-pentest-series
Metasploitable2 Penetration Testing Series A series of vulner...
CVE-2026-54161
upsmon: remote OS command injection RCE via attacker-controlled ups.alarm in NOTIFYCMD execution...
PT-2026-56558
Name of the Vulnerable Software and Affected Versions Network UPS Tools affected versions not specified Description A remote OS command injection allows an attacker to execute arbitrary commands as root. This occurs when upsmon executes the NOTIFYCMD using an attacker-controlled ups.alarm variabl...
EUVD-2026-40166
ruoyi-vue-pro through 2026.05, fixed in commit c779a47, contains a missing authorization vulnerability in the CRM module's GET /admin-api/crm/follow-up-record/get endpoint that allows authenticated users to read any follow-up record by iterating sequential numeric IDs. Attackers can exploit this ...
Linux Distros Unpatched Vulnerability : CVE-2026-39199
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file. CVE-2026-39199 Note that Nessus relies on the presence of the package a...
CVE-2026-39199
snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file...
DEBIAN-CVE-2026-39199
snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file...
CVE-2026-39199
snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file...
UBUNTU-CVE-2026-39199
snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file...
CVE-2026-39199: Out-of-bounds Write
snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file...
CVE-2026-39199
snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file...
CVE-2026-39199
snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file...
PT-2026-50249
Name of the Vulnerable Software and Affected Versions snes9x version 1.63 Description An out-of-bounds write occurs when loading a ROM alongside a crafted .ups patch file, which can lead to a denial of service and cause the emulator to crash. Recommendations At the moment, there is no information...
