frida-wshook

frida-wshook frida-wshook is an analysis and instrumentation tool which uses frida.re to hook common functions often used by malicious script files which are run using WScript/CScript. The tool intercepts Windows API functions and doesn't implement function stubs or proxies within the targeted...

rbndr

rbndr Simple DNS Rebinding Service rbndr is a very simple, non-conforming, name server for testing software against DNS rebinding vulnerabilities. The server responds to queries by randomly selecting one of the addresses specified in the hostname and returning it as the answer with a very low ttl...

stacs

Static Token And Credential Scanner What is it? STACS is a YARA powered static credential scanner which suports binary file formats, analysis of nested archives, composable rulesets and ignore lists, and SARIF reporting. What does STACS support? Currently, STACS supports recursive unpacking of: 7...

autogpt-CVE-2026-30950-poc

AutoGPT CVE-2026-30950 POC Proof-of-concept demonstration for CVE-2026-30950, an authenticated IDOR Missing Authorization in the AutoGPT Platform that lets any logged-in user reassign — and thus hijack — any other user's chat session via a single PATCH request, with no prior access to the session...

CVE-2026-113670

creationtimestamp| type| source ---|---|--- 2026-10-20 17:46:27+00:00| seen| https://infosec.exchange/users/cve/statuses/117474485008043133...

GHSA-HHVR-8M24-QQR3

creationtimestamp| type| source ---|---|--- 2026-10-20 17:45:47+00:00| seen| https://infosec.exchange/users/cve/statuses/117474482366350954...

CVE-2026-113669

creationtimestamp| type| source ---|---|--- 2026-10-20 17:45:47+00:00| seen| https://infosec.exchange/users/cve/statuses/117474482366350954...

GHSA-GQH3-7856-RJJG

creationtimestamp| type| source ---|---|--- 2026-10-20 17:45:06+00:00| seen| https://infosec.exchange/users/cve/statuses/117474479722443786...

CVE-2026-113668

creationtimestamp| type| source ---|---|--- 2026-10-20 17:45:06+00:00| seen| https://infosec.exchange/users/cve/statuses/117474479722443786...

CVE-2026-113667

creationtimestamp| type| source ---|---|--- 2026-10-20 17:44:27+00:00| seen| https://infosec.exchange/users/cve/statuses/117474477056981709...

GHSA-44QR-RRJG-2CQQ

creationtimestamp| type| source ---|---|--- 2026-10-20 17:44:27+00:00| seen| https://infosec.exchange/users/cve/statuses/117474477056981709...

IronFox

IronFox F-Droid QR Code: IronFox is a fork of Divested Computing Group's Mull Browsermull, based on Mozilla Firefox. Our goal is to continue the legacy of Mull by providing a free and open source, privacy and security-oriented web browser for daily use. !TIP Find a bug? Encounter an annoying...

CVE-2026-98606

A flaw was found in the Linux kernel's VirtIO GPU driver. During error handling when creating video memory resources, the driver deallocates memory without properly releasing the object from kernel memory tracking structures. A local user can exploit this vulnerability to trigger a use-after-free...

CVE-2025-50675-GPMAW-Permissions

CVE-2025-50675 – Insecure Permissions in GPMAW 14.2 Summary CVE-2025-50675 affects GPMAW 14.2, a bioinformatics software developed by Lighthouse Data. The installer creates the folder C:\Program Files\gpmaw with full control granted to the 'Everyone' group , allowing any local user to modify file...

Letta-CVE-2025-51482-RCE

Letta-CVE-2025-51482-RCE Vulnerability Cause Analysis 1. Lack of Code Security Inspection Problem: The system does not perform any security inspection on user-provided source code. Evidence: generateexecutionscript method directly inserts user code into the execution script: code += "\n" +...

ssh3

!NOTE SSH3 is probably going to change its name. It is still the SSH Connection Protocol RFC4254 running on top of HTTP/3 Extended connect, but the required changes are heavy and too distant from the philosophy of popular SSH implementations to be considered for integration. The specification dra...

kerbrute

Kerbrute A tool to quickly bruteforce and enumerate valid Active Directory accounts through Kerberos Pre-Authentication Grab the latest binaries from the releases page to get started. Background This tool grew out of some bash scripts I wrote a few years ago to perform bruteforcing using the...

CVE-2026-113670 ApostropheCMS: Page REST API authorization bypass

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the core page REST API reads full page documents with .permissionfalse in getOne and in the all=1 tree dump, bypassing page-type viewRole, visibility: private, and visibility: loginRequired checks. Unauthenticated...

EUVD-2026-105219

ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the core page REST API reads full page documents with .permissionfalse in getOne and in the all=1 tree dump, bypassing page-type viewRole, visibility: private, and visibility: loginRequired checks. Unauthenticated...

CVE-2026-113670

The open-source Node.js content management system ApostropheCMS (prior to version 4.33.0 ) contains an authorization bypass in the core page REST API. The vulnerability occurs because getOne and the all=1 tree dump read full page documents using .permission(false), effectively ignoring viewRole p...