Linux Distros Unpatched Vulnerability : CVE-2026-110111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to become global administrator by abusing the...

Linux Distros Unpatched Vulnerability : CVE-2026-89096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service DoS by sending repeated state notification requests to an...

SUSE SLES15 Security Update : kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4708-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4708-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: -...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792243434)

"The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792243434 advisory. - In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hnsdsafmisc: fix a possible array...

Amazon Linux 2023 : mariadb1011, mariadb1011-backup, mariadb1011-client-utils (ALAS2023-2026-3234)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3234 advisory. A flaw was found in MariaDB. An authenticated user with permission to use the CONNECT storage engine can exploit an incorrect boundary check when handling DOS table types to write beyond the...

Debian dsa-6569 : apache2 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6569 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6569-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-111880

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset...

Amazon Linux 2023 : mariadb123, mariadb123-backup, mariadb123-client-utils (ALAS2023-2026-3237)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3237 advisory. A flaw was found in MariaDB. An authenticated user with permission to use the CONNECT storage engine can exploit an incorrect boundary check when handling DOS table types to write beyond the...

Rocky Linux 9.6 [TuxCare] Security Update: compat-openssl11 (ALMALINUX9.6:CLSA-2026:1792183929)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792183929 advisory. - Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD...

SUSE SLED15: libsoup-2_4-1 / libsoup2-devel / libsoup2-lang / etc (SUSE-SU-2026:4703-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4703-1 advisory. - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy...

SUSE SLED15 / SLES15 Security Update : python-urllib3 (SUSE-SU-2026:4704-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4704-1 advisory. - CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override bsc1283908. -...

SLiMS 9.8.0 Admin Bibliography SQL Injection

SLiMS version 9.8.0 contains an SQL injection vulnerability in its admin bibliography module via unquoted opachide and promoted GET parameters, allowing authenticated staff users to extract database information. https://packetstorm.news/download/236103...

SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4706-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4706-1 advisory. The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security...

SUSE SLES12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:4687-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4687-1 advisory. The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: -...

ImgBackdoor

| | | \ | | | | | | | | | | | | | | | | ' \ / | / |/ | |/ / |/ \ / | '| | || | | | | | | | | | | | | | | | | | ||| || ||, |/ ,|||\,|/ /|| / | |/ Version release: v1.0 Stable Author: Ferdi S Kennedy kennedy69 Distros Supported : Linux Ubuntu, Kali, Mint, Parrot OS Legal Disclamer: The author...

RazerEoP

RazerEoP PoC for arbitrary file delete/move in Razer Synapse 3 Macro module. This module allows user to export created macros to file on disk and file operation is done via razer service that runs as nt authority\system. I tried to report this to razer using their BB program and i got response th...

hwbp4mw

This article was origininally for VX-Underground Black Mass Halloween Edition 2022. Hooking Engines: Multi-thread safe x86/x64 hwbp hooking engine c PAGEGUARD/hwbp Breakpoint Library c++20 hwbp Library DLL example c++20 Generic x64 user-land evasion technique utilizing debug registers:...

kavanoz

🫙 kavanoz 🫙 Kavanoz jar in turkish is a tool to statically unpack common android banker malware. Do you ever wanted to get payload from packed malware without running android emulator ? Me neither : But here is a tool anyway. 👀 Installation pip install kavanoz To install from source, clone the...

CVE-2021-43258

CVE-2021-43258 ChurchInfo 1.2.13-1.3.0 Remote Code Execution Exploit Full title| ChurchInfo 1.2.13-1.3.0 Remote Code Execution Exploit ---|--- Date add| 21-11-2022 Category| remote exploits Platform| php Risk| Security RiskCritical Description| This Metasploit module exploits the logic in the...

CVE-2024-55591

CVE-2024-55591 PoC This repository contains an PoC Proof of Concept for CVE-2024-55591 , a critical authentication bypass vulnerability discovered in Fortinet's FortiOS and FortiProxy products. Vulnerability Overview CVE-2024-55591 is an authentication bypass vulnerability caused by an alternativ...