Dahua Smart Park Management - Arbitrary File Upload

Dahua wisdom park integrated management platform is a comprehensive management platform, a park operations,resource allocation, and intelligence services,and other functions, including/emap/devicePointaddImgIco?. id: CVE-2023-3836 info: name: Dahua Smart Park Management - Arbitrary File Upload...

EternalLiberty

EternalLiberty Descrição Este repositório contém todos os aliases de Atores de Ameaças usados por diferentes empresas de Inteligência de Ameaças em seus relatórios. Objetivos Isso permite encontrar os Atores de Ameaças que você deseja investigar ou pesquisar, obtendo o nome usado por diferentes...

should-i-trust

should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...

should-i-trust

should-i-trust Riepilogo should-i-trust è uno strumento per valutare i segnali OSINT per un dominio. Requisiti should-i-trust richiede chiavi API dalle seguenti fonti: Censys.io - Gratuito per le prime 250/richieste al mese VirusTotal - Gratuito GrayHatWarFare - Gratuito con risultati limitati...

CVE-2026-5800

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...

CVE-2026-4378

A Stored Cross-Site Scripting (XSS) vulnerability in Akilli Ticaret Software Technologies Ltd. 's E-Commerce Pack (versions 4.5.001 through 28082026) is caused by improper neutralization of input during web page generation . The CVSS 3.1 score is 5.4 (MEDIUM) with a changed scope, indicating a lo...

EUVD-2026-67722

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...

CVE-2017-9841-EXPLOIT

CVE-2017-9841 - Execução Remota de Código RCE no PHPUnit Esta vulnerabilidade afeta as versões do PHPUnit anteriores a 4.8.28 e todas as versões 5.x anteriores a 5.6.3. Ela permite que atacantes executem código PHP arbitrário em servidores onde o PHPUnit está exposto. O problema existe no arquivo...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

CVE-2023-38120

Exploit: Dies ist ein POC für einen Bug, den ich im SmartRG-Router gefunden habe CVE-2023-38120. Es wurde bereits vom Hersteller behoben...

Linux Distros Unpatched Vulnerability : CVE-2026-80707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: j1939: transport: j1939sessionfreshnew: initialize receive buffer Zero the allocated buffer in j1939sessionfreshnew to ensure it contains no residual data...

Linux Distros Unpatched Vulnerability : CVE-2026-80684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airqivcreate can return NULL on failure, but the return value was never checked. If it fails...

Linux Distros Unpatched Vulnerability : CVE-2026-80694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ethernet: mtkethsoc: pass eth to mtkhandleirqrx in pollcontroller mtkhandleirqrx expects a struct mtketh matching the requestirq cookie, but...

advisories

Sicherheitshinweise Sicherheitshinweise von Kelly Kaoudis @kaoudis und Freunden. Im Allgemeinen veröffentliche ich hier erst, nachdem der Hersteller den Patch bereitgestellt hat, oder 90 Tage nach Entdeckung der Schwachstelle. Viel Spaß beim Lesen! Die Advisories werden in der Reihenfolge der...

CVE-2018-12598

CVE-2018-12598 CVE-2018-12598 Chronologie ================ 2018-06-08 : Découverte 2018-06-11 : Nouveau test sur l'environnement de préproduction 2018-06-12 : Nouveau test sur l'environnement en production 2018-06-19 : Communication interne 2018-06-21 : Notification au fournisseur 2018-06-XX :...

Credential-and-breach-monitoring

Breach / Stealer-Log / Identity Exposure Services Comparison with Scoring Questo documento confronta breach intelligence, monitoraggio del dark web e servizi di esposizione dell'identità su dimensioni pratiche rilevanti per i moderni team di sicurezza. Si concentra su: Profondità del corpus di...

poc

Proof of Concepts Come risultato della scrittura di plugin o semplicemente della caccia ai bug, i ricercatori di Tenable si imbattono spesso in vulnerabilità nuove e interessanti. Queste vulnerabilità vengono condivise con la community sul nostro blog aziendale, Medium, o tramite i nostri advisor...

owasp-cstg

OWASP Cloud Security Testing Guide Der Cloud Security Testing Guide CSTG ist ein umfassendes, anbieterneutrales Handbuch zum Testen der Sicherheit von Cloud-Umgebungen. Es richtet sich an Penetrationstester, Cloud- und Plattformingenieure, Sicherheitsarchitekten, Detection-Engineers und Auditoren...

buyer-eval-skill

Buyer Eval – Die Rotten Tomatoes der B2B-Software Ein kostenloses, quelloffenes Claude-Skill, das B2B-Anbieter bewertet, indem es mit deren KI-Agenten spricht, jede Behauptung mit unabhängigen Quellen abgleicht und bewertet, was verifiziert ist und was nur optimistisches Marketing ist. Neu in v3....

Linux Distros Unpatched Vulnerability : CVE-2026-77117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - glibc - None Red Hat Enterprise Linux - glibc: Non-progress DoS in SHIFTJISX0213 - CVE-2026-77117 Note that Nessus relies on the presence of the...