2914995 matches found
APT-Individual-Combat-Guide
目录 第一章：APT 用于发起假旗攻击的代码和命令 第二章： 侦查 用于信息收集的工具、代码和命令 第三章： WEB漏洞进阶 常见APT组织使用的Web漏洞进阶技巧 第四章： 服务漏洞进阶 APT组织使用的服务漏洞以及在攻击中的常见技巧 第五章： 木马 APT组织编写的木马方式 第六章： 恶意软件技巧 APT攻击中使用的恶意软件技巧实现 第七章： C2 学习APT攻击者构建自己的C2 第八章： 木马投递 APT攻击中使用的木马投递技巧 第九章： 后渗透 APT攻击中所使用的后渗透方法...
AMSI-Bypass
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 テロ組織ハマスに人質として拘束されたすべての市民の安全な帰還を要求します。すべての人質が解放され、無事に帰宅するまで私たちは休みません。あなたも彼らを家に連れ帰る手助けができます。https://stories.bringthemhomenow.net/ AMSI Write Raid 0day 脆弱性 🛡️ はじめに このリポジトリには、OffSec のテクニカルトレーナーである Victor Khoury（Vixx）氏によって発見された AMSI Write Raid 0day...
UBUNTU-CVE-2026-88059
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.1, Angular's @angular/common HttpTransferCache can cache an authenticated response when Server-Side Rendering SSR and hydration u...
UBUNTU-CVE-2026-88060
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.30, 21.2.22, and 22.1.4, Angular server-side rendering SSR in @angular/platform-server serializes untrusted input inside template content nested in...
CVE-2026-88057
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.28, 21.2.20, and 22.1.0, Angular's compiler and runtime in @angular/core and @angular/compiler could omit or select an incorrect sanitizer for...
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 31, 2026 to September 6, 2026)
Last week, there were 295 vulnerabilities disclosed in 196 WordPress Plugins and 7 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 159 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...
CVE-2026-89046
creationtimestamp| type| source ---|---|--- 2026-09-10 19:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6qffx5pc2s...
CVE-2026-68006
An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/pumahttp11/http11parser.rl file...
CVE-2026-88054
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Plumbing::DeSerialize in src/lstm/plumbing.cpp rejects excessively large network stacks but accepts a zero-length stack for NTSERIES, NTPARALLEL, or NTREVERSED layers in a crafted .traineddata model. During LSTMRecognizer...
UBUNTU-CVE-2026-88051
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independent int32 fields reserved and sizeused from a .traineddata model without a cap or an invariant check. reservereserved allocates the backin...
UBUNTU-CVE-2026-89044
Netty versions 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final fail to properly validate the final transfer coding in the Transfer-Encoding header, allowing attackers to smuggle requests by using malformed encoding declarations. Attackers can split Transfer-Encoding...
CVE-2026-65638
creationtimestamp| type| source ---|---|--- 2026-09-10 17:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6mgkkl3b2j 2026-09-10 18:08:54+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv6ni7alcf2n 2026-09-10 18:08:55+00:00| seen|...
CVE-2026-52098
An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/ endpoint...
CVE-2026-88048
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserialized layer scalars ni and no against the weight-matrix dimensions. During FullyConnected::Forward, MatrixDotVector in...
UBUNTU-CVE-2026-88050
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length but accepts negative code values from a crafted .traineddata recoder component. UnicharCompress::ComputeCodeRange in src/ccutil/unicharcompress.cpp can...
CVE-2026-87994
creationtimestamp| type| source ---|---|--- 2026-09-10 16:35:10+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-fmqh-xp37-5hr8...
CVE-2026-88014
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.0 until 1.75.1, the archive ZIP backend method Fs.readZip in backend/archive/zip/zip.go accepts archive/zip.File.Name values from an untrusted central directory and exposes...
CVE-2026-81052
Dell ThinOS 10, versions prior to 260510.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to arbitrary code execution...