CLEANSTART-2026-MC48922 brace-expansion library generates arbitrary strings containing a common prefix and suffix

CVE-2026-102276 affects multiple packages. The brace-expansion library generates arbitrary strings containing a common prefix and suffix. See references for individual vulnerability details...

CVE-2026-42617

A flaw was found in NTFS-3G. A heap-based buffer overflow occurs when expanding a directory on a specially crafted NTFS filesystem image, such as during file creation. A local attacker can exploit this vulnerability to corrupt memory within the privileged binary, potentially leading to arbitrary...

CVE-2026-42945-POC

CVE-2026-42945 NGINX Rift — Эксплойт для HTB Автономный эксплойт для уязвимости переполнения кучи NGINX, обнаруженной в 2024 году. Эта версия оптимизирована для окружений HackTheBox и CTF, где невозможно настроить Docker-контейнеры. Детали уязвимости CVE-2026-42945 — это критическое переполнение...

mapcidr

Un programme utilitaire pour effectuer plusieurs opérations pour un sous-réseau/plage CIDR donnée. Fonctionnalités • Installation • Utilisation • Bibliothèque • Rejoindre Discord mapCIDR est développé pour faciliter la distribution de charge lors d'opérations de scan massif ; il peut être utilisé...

CVE-2022-28346

CVE-2022-28346 В пакете Django была обнаружена ошибка, приводящая к SQL-инъекции. Эта ошибка позволяет злоумышленнику, использующему специально созданный словарь с вредоносными SQL-запросами, полностью скомпрометировать базу данных. Содержание CVE-2022-28346 Описание Окружение Доказательство...

sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

ROOT-APP-NPM-CVE-2026-102278 CVE-2026-102278 in brace-expansion - Patched by Root

Root has patched CVE-2026-102278 in the brace-expansion package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-69152 CVE-2026-69152 in brace-expansion - Patched by Root

Root has patched CVE-2026-69152 in the brace-expansion package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-102276 CVE-2026-102276 in brace-expansion - Patched by Root

Root has patched CVE-2026-102276 in the brace-expansion package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-14257 CVE-2026-14257 in brace-expansion - Patched by Root

Root has patched CVE-2026-14257 in the brace-expansion package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-13149 CVE-2026-13149 in brace-expansion - Patched by Root

Root has patched CVE-2026-13149 in the brace-expansion package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-33750 CVE-2026-33750 in brace-expansion - Patched by Root

Root has patched CVE-2026-33750 in the brace-expansion package for Root:npm. Multiple fixed versions available...

Puwr

Table des matières À propos de Puwr Utilisation de Puwr Scan de ports Démonstrations Avertissement Futur Puwr Étendez facilement votre surface d'attaque sur un réseau local en découvrant davantage d'hôtes, via SSH. En utilisant une machine exécutant un service SSH, Puwr exploite une plage de...

glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

A flaw was found in glibc. When processing paths that start with a tilde followed by a username, the wordexp function can be forced to allocate an excessive amount of memory on the program's stack. A remote attacker could exploit this by providing a very long username, leading to a stack exhausti...

prowler

Prowler Prowler is a Network Vulnerability Scanner implemented on a Raspberry Pi Cluster, first developed during Singapore Infosec Community Hackathon - HackSmith v1.0. Capabilities Scan a network a particular subnet or a list of IP addresses for all IP addresses associated with active network...

day03-jenkins-23897

Day 3 — Jenkins CLI 임의 파일 읽기 CVE-2024-23897 개념: Jenkins ≤ 2.441 LTS ≤ 2.426.2는 CLI 인수 내의 @/path를 확장합니다. 인증되지 않은 사용자는 Jenkins가 로컬 파일을 읽고 해당 파일의 첫 줄 을 CLI 도움말 출력을 통해 노출하도록 만들 수 있습니다. 2.442 / 2.426.3에서 수정되었습니다. 빌드 → 실행 1 Build docker build -t day3-jenkins-23897 . 2 Run docker rm -f day3 2/dev/null |...

RHEL 8 : glibc (RHSA-2026:76777)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:76777 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name...

climber

Climber Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections ov...

CVE-2026-49975

CVE-2026-49975 Bombe HTTP/2 ★ CVE-2026-49975 PoC de la Bombe HTTP/2 ★ Aperçu CVE-2026-49975 est une vulnérabilité Denial of Service DoS dans Apache HTTP Server. La vulnérabilité se produit dans le chemin de traitement des requêtes HTTP/2, où plusieurs champs d'en-tête cookie peuvent être fusionné...

cve-2024-23897-jenkins-poc

CVE-2024-23897: произвольное чтение файлов в Jenkins args4j @-синтаксис Полностью автономная локальная воспроизводимость CVE-2024-23897 — критической базовая оценка CVSS 3.1 — 9.8 уязвимости произвольного чтения файлов в Jenkins CLI. Проект поднимает два Docker-стека, различающихся только минорно...