Astra Linux – Vulnerability in Chromium

The use of after-free in WebRTC in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Chromium: CVE-2021-30612 – Use after free in WebRTC...

Astra Linux – Vulnerability in Chromium

The use of after-free in the Input mechanism in Google Chrome before version 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The use of “after free” in browsers with Google Chrome before version 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Zabbix

Stored or persistent cross-site scripting XSS is a type of XSS attack where the attacker first sends the malicious payload to the web application. The application then stores the payload e.g., in a database or server-side text files. Eventually, the application inadvertently executes the payload...

Astra Linux – Vulnerability in Chromium

Before version 88.0.4324.96, using Blink with a "after free" mechanism allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure

A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...

permanet

Permanet Kryptografisch verifizierbares Web-Archiv. Sende eine URL, erhalte einen gerenderten Schnappschuss mit einem SHA-256 Merkle-Hash, der über OpenTimestamps in Bitcoin verankert und dauerhaft auf Arweave gespeichert wird. Jeder kann einen Schnappschuss unabhängig verifizieren, nur mit dem...

web-mitm-lab

WebMITM Lab - Framework de Pesquisa de Segurança Python 3.x | Licença Educacional | Ver Licença ⚠️ Apenas para Fins Educacionais e Pesquisa de Segurança Autorizada 📌 Descrição WebMITM Lab é um framework educacional projetado para demonstrar conceitos de ataques Man-in-the-Middle MITM em treinament...

duckLogger

DuckLogger DuckLogger è un Key Logger USB basato su ESP32-S3. Registra le sequenze di tasti in un file di testo e fornisce accesso wireless per scaricare i log tramite un punto di accesso Wi-Fi integrato. Ricreare questo progetto non richiede alcun PCB personalizzato. L'hardware utilizzato costa ...

lulzbuster

Description A multithreaded, very fast and smart HTTPS directory and file bruteforcer written in C on top of libcurl. Given a target URL and a wordlist, it enumerates valid paths by firing concurrent HTTP requests and reporting back the responses that look like real hits i.e. status codes the use...

RatRace

RatRace Ein leichtgewichtiges CLI-Tool zur systematischen Erkennung und Ausnutzung von Race Conditions in Webanwendungen, APIs und modernen Diensten. Welches Problem es löst Race Conditions gehören zu den Sicherheitslücken mit der größten Auswirkung in modernen Anwendungen, werden aber von...

UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit

Cybersecurity researchers have disclosed details of a Chinese-speaking cybercrime group dubbed UAT-10147 that's targeting Windows and Linux web servers globally across the education, media, technology, and gaming sectors. The vast majority of the targets are located in Brazil, Bolivia, China,...

WordPress Tourmaster plugin <= 5.4.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin TourMaster Plugin versions = 5.4.9...

AgentCyTE

CORE TopoGen Genera topologie di rete CORE riproducibili da file XML di scenario utilizzando una ricca GUI Web o un'interfaccia a riga di comando. Indice dei contenuti Punti salienti Schermate Avvio rapido Prerequisiti Installa le dipendenze Avvia la Web UI Esegui la CLI Flusso di lavoro...

poisontap

PoisonTap - sottrae cookie, espone il router interno e installa backdoor web su computer bloccati Creato da @SamyKamkar || https://samy.pl Quando PoisonTap Raspberry Pi Zero e Node.js viene collegato a un computer bloccato/protetto da password , esso: emula un dispositivo Ethernet tramite USB o...

cygor

Cygor Panoramica Generale Cygor è un framework modulare di scoperta degli asset che riunisce scansione, parsing ed enumerazione dei servizi in un unico flusso di lavoro. Sostituisce l'insieme eterogeneo di strumenti separati con un processo automatizzato che gestisce senza soluzione di continuità...

CVE-2026-8173

The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web...

BlackThrone

BlackThrone PHP BlackThrone Script Uma alternativa de código aberto ao burp collaborator BlackThrone criado para detectar tráfego WebSocket e HTTP no site principal, fornecendo alguns cabeçalhos de servidor e informações do cliente. BlackThrone é uma ferramenta baseada na web para executar em...

CVE-2026-8173

The web GUI of Murrelektronik Xelity switches is affected by an information disclosure vulnerability. When an authenticated administrator uses the 'Copy learned MAC Addresses' function, MAC addresses from the device's MAC address table are logged. Due to improper generation of error messages , an...