1448898 matches found
NSEC3-X
DISCLAIMER: This project was generated by Artificial Intelligence AI but has undergone a rigorous "Human-in-the-Loop" HITL process. This means the code has been reviewed and refactored by a human software engineer, the architectural design was human-directed, and a basic security audit was...
the-backdoor-factory
The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...
CVE-2026-91652
creationtimestamp| type| source ---|---|--- 2026-10-21 14:47:05+00:00| seen| https://infosec.exchange/users/cve/statuses/117479442022575121...
kyverno
Kyverno Cloud Native Policy Management 🎉 📑 Table of Contents About Kyverno Non-Goals Documentation Demos & Tutorials Popular Use Cases Explore the Policy Library Getting Help Contributing Software Bill of Materials Contributors License About Kyverno Kyverno is a Kubernetes-native policy engine...
CVE-2026-91650
creationtimestamp| type| source ---|---|--- 2026-10-21 14:45:44+00:00| seen| https://infosec.exchange/users/cve/statuses/117479436724380462...
CVE-2026-114252
A SQL injection vulnerability exists in the itsourcecode Sales-and-Inventory-System (up to commit 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac) within an unknown function of the /pages/cust_searchfrm.php file. An attacker can initiate a remote attack by manipulating the ID argument to execute unautho...
CVE-2026-114252 itsourcecode Sales-and-Inventory-System cust_searchfrm.php sql injection
A vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The affected element is an unknown function of the file /pages/custsearchfrm.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated...
EUVD-2026-107287
A vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The affected element is an unknown function of the file /pages/custsearchfrm.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated...
CVE-2026-91649
creationtimestamp| type| source ---|---|--- 2026-10-21 14:45:04+00:00| seen| https://infosec.exchange/users/cve/statuses/117479434080709821...
CVE-2026-91648
creationtimestamp| type| source ---|---|--- 2026-10-21 14:44:23+00:00| seen| https://infosec.exchange/users/cve/statuses/117479431434194969...
CVE-2021-28378
CVE-2021-28378 Details about this CVE here. This CVE targets a missing string escaping on the client-side from content fetched from the server. It enables an attacker to inject arbitrary code easily, by creating a comment on an issue or a pull request. This was introduced in commit...
CVE-2025-70899
This repository contains the Proof of Concept demonstrating the missing CSRF protection vulnerability in PHPgurukul Online Course Registration System. 📄 View the complete PoC here: MissingCSRFprotectionpoc.md...
CVE-2026-91646
creationtimestamp| type| source ---|---|--- 2026-10-21 14:43:03+00:00| seen| https://infosec.exchange/users/cve/statuses/117479426140437512...
react-CVE-2025-55182-fixer
React Server Components Security PR Automation This repository provides a script to automatically bump and create pull requests PRs for repositories affected byCVE-2025-55182, which affects vulnerable versions of react-server-dom- and related React packages. What does this tool do? Scans for...
CVE-2026-91645
creationtimestamp| type| source ---|---|--- 2026-10-21 14:42:22+00:00| seen| https://infosec.exchange/users/cve/statuses/117479423491996111...
CVE-2026-91643
creationtimestamp| type| source ---|---|--- 2026-10-21 14:41:02+00:00| seen| https://infosec.exchange/users/cve/statuses/117479418203422191...
HostHunter
HostHunter v2.0 A tool to efficiently discover and extract hostnames providing a large set of target IPv4 or IPv6 addresses. HostHunter utilises simple OSINT and active reconaissance techniques to map IP targets with virtual hostnames. This is especially useful for discovering the true attack...
freddy
Freddy the Serialisation Killer - Deserialization Bug Finder A Burp Suite extension to aid in detecting and exploiting serialisation libraries/APIs. This useful extension was originally developed by Nick Bloor @nickstadb for NCC Group and is mainly based on the work of Alvaro Muñoz and Oleksandr...