1449018 matches found
CVE-2026-76462
A vulnerability exists in the interprocess communication (IPC) channel of the Secure Firewall Posture module within Cisco Secure Client . Due to insufficient validation of user-supplied input , an authenticated local attacker can send crafted IPC messages to a local socket to elevate privileges. ...
PHP2Shell: Why websites are going offline for emergency security updates
If you’ve encountered websites in maintenance mode today, it may be a security precaution. Reports of attacks targeting two critical PHP vulnerabilities have prompted warnings to install emergency updates and consider temporarily taking affected services offline until they can be patched. The...
GCVE-123-2026-0001
creationtimestamp| type| source ---|---|--- 2026-10-21 16:14:02+00:00| seen| https://infosec.exchange/users/cve/statuses/117479783951299462...
PwnLnX
PwnLnX An advanced multi-threaded , multi-client python reverse shell for hacking linux systems. There's still more work to do so feel free to help out with the development. Disclaimer : This reverse shell should only be used in the lawful, remote administration of authorized systems. Accessing a...
self-service-password
LDAP Tool Box Self Service Password Presentation Self Service Password is a PHP application that allows users to change their password in an LDAP directory. The application can be used on standard LDAPv3 directories OpenLDAP, OpenDS, ApacheDS, Sun Oracle DSEE, Novell, etc. and also on Active...
Stitch
DISCLAIMER Stitch is for education/research purposes only. The author takes NO responsibility and/or liability for how you choose to use any of the tools/source code/any files provided. The author and anyone affiliated with will not be liable for any losses and/or damages in connection with use o...
PAGASUS-PRO
██████╗ ███████╗ ██████╗ █████╗ ███████╗██╗ ██╗███████╗ ██╔══██╗██╔════╝██╔════╝ ██╔══██╗██╔════╝██║ ██║██╔════╝ ██████╔╝█████╗ ██║ ███╗███████║███████╗██║ ██║███████╗ ██╔═══╝ ██╔══╝ ██║ ██║██╔══██║╚════██║██║ ██║╚════██║ ██║ ███████╗╚██████╔╝██║ ██║███████║╚██████╔╝███████╗ ╚═╝ ╚══════╝ ╚═════╝...
badPods
Bad Pods A collection of manifests that create pods with different elevated privileges. Quickly demonstrate the impact of allowing security sensitive pod attributes like hostNetwork, hostPID, hostPath, hostIPC, and privileged. For additional background, see our blog post: Bad Pods: Kubernetes Pod...
CVE-2026-91397
A flaw was found in OpenJDK's Serviceability component. An unauthenticated attacker with local access to the host system can exploit this vulnerability with user interaction, such as by supplying crafted input to Serviceability application programming interfaces APIs. A successful attack can resu...
CVE-2026-114118
creationtimestamp| type| source ---|---|--- 2026-10-21 16:13:22+00:00| seen| https://infosec.exchange/users/cve/statuses/117479781304515345...
GHSA-FXG7-4WQG-C8GH
creationtimestamp| type| source ---|---|--- 2026-10-21 16:13:22+00:00| seen| https://infosec.exchange/users/cve/statuses/117479781304515345...
HybridTestFramework
HybridTestFramework Supported By In the era of cloud-native world we cannot stick to a particular framework, however due to projects requirement we often need to evolve the existing testing solution in such a way so that it can cater multiple testing requirement, hence HybridTestFramework is...
CVE-2026-91334
A flaw was found in OpenJDK's ImageIO component. This vulnerability allows an unauthenticated remote attacker to cause information disclosure by submitting crafted inputs to applications or web services using the ImageIO application programming interface API. Successful exploitation can result in...
sj
sj Swagger Jacker sj is a command line tool designed to assist with auditing of exposed Swagger/OpenAPI definition files by checking the associated API endpoints for weak authentication. It also provides command templates for manual vulnerability testing. It does this by parsing the definition fi...
GHSA-6J9C-GVCW-74FJ
creationtimestamp| type| source ---|---|--- 2026-10-21 16:12:42+00:00| seen| https://infosec.exchange/users/cve/statuses/117479778659659372...
CVE-2026-114117
creationtimestamp| type| source ---|---|--- 2026-10-21 16:12:42+00:00| seen| https://infosec.exchange/users/cve/statuses/117479778659659372...
foxcage
foxcage Run Firefox in a rootless Podman container for security isolation. Your browser runs with almost no Linux capabilities, in its own user and network namespace, isolated from the host — while still having full GPU acceleration, audio, and DRM support. Why foxcage? Firefox already has a...
webanalyze
webanalyze This is a port of Wappalyzer in Go. This tool is designed to be performant and allows to test huge lists of hosts. !NOTE Because Wappalyzer removed the public access to their app definitions, webanalyze currently loads definitions from enthec. Installation and usage Precompiled release...
juicy-potato
Juicy Potato abusing the golden privileges A sugared version ofRottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM Summary RottenPotatoNG and its variants leverages the privilege escalation chain based on BITS...