second-order

Second Order Scans web applications for second-order subdomain takeover by crawling the app, and collecting URLs and other data that match certain rules, or respond in a certain way. Installation From binary Download a prebuilt binary from the releases page and unzip it. From source Go version 1....

CVE-2026-85306 WordPress MountDev AI MCP Connector for WordPress plugin <= 1.6.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Cascadia Web Services MountDev AI MCP Connector for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MountDev AI MCP Connector for WordPress: from n/a through 1.6.5...

fav-up

Fav-up Lookups for real IP starting from the favicon icon and using Shodan. Installation pip3 install -r requirements.txt Shodan API key not the free one Usage CLI First define how you pass the API key: -k or --key to pass the key to the stdin -kf or --key-file to pass the filename which get the...

bluewall

BLUEWALL Bluewall is a firewall framework designed for offensive and defensive cyber professionals. This framework allows Cybersecurity professionals to quickly setup their environment while staying within their scope. Credit Inspired by Andrew Benson's hostfw iptable generation script. Features...

EUVD-2026-70574

Unauthenticated Denial of Service Attack in MalCare Security = 6.69 versions...

CVE-2026-84776 WordPress MalCare Security plugin <= 6.69 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in MalCare Security = 6.69 versions...

CVE-2026-84776

CVE-2026-84776 affects the MalCare Security WordPress plugin in versions ≤ 6.69 , where an unauthenticated Denial of Service (DoS) attack is possible. The vulnerability requires no user interaction and has low attack complexity , with a network-based attack vector. Per the CVSS 3.1 score of 7.5 (...

mora-hwbp

Mora-HWBP — Hooking de télémétrie AMSI / WLDP / ETW via des points d'arrêt matériels Un Proof-of-Concept POC de recherche en sécurité démontrant le hooking de fonctions basé sur les points d'arrêt matériels registres de débogage du CPU comme alternative au patch de code en mémoire traditionnel...

OWN-Defender

OWN-Defender — Recherche COM sur le Centre de sécurité Windows OWN-Defender est un projet de recherche sur la sécurité Windows axé sur la compréhension de la manière dont le Centre de sécurité Windows WSC représente et gère les produits de sécurité antivirus via ses interfaces COM. Le projet a...

norimaci

Norimaci "Norimaci" is a simple and lightweight malware analysis sandbox for macOS. This tool was inspired by "Noriben". Norimaci uses the features of OpenBSM or Monitor.app to monitor macOS system activity instead of Sysinternals Process Monitor procmon. Norimaci consists of 3 Python scripts...

sitrep

SitRep Extensible, configurable host triage. Purpose SitRep is intended to provide a lightweight, extensible host triage alternative. Checks are loaded dynamically at runtime from stand-alone files. This allows operators to quickly modify existing checks, or add new checks as required. Checks are...

threatspec

threatspec - continuous threat modeling, through code Threatspec is an open source project that aims to close the gap between development and security by bringing the threat modelling process further into the development process. This is achieved by having developers and security engineers write...

MINI-C4Q7-VFGX-VH86

Bulletin has no description...

MINI-4JP8-Q9G2-CRC4

Bulletin has no description...

MINI-QJMM-JWJQ-R8RP

Bulletin has no description...

MINI-42CJ-623R-JXRF

Bulletin has no description...

MINI-XRC7-6QG4-4J6Q

Bulletin has no description...

MINI-8FCQ-W974-64P3

Bulletin has no description...

metlo

Metlo API Security Secure Your API. Metlo is an open-source API security platform Metlo is an open source API security tool you can setup in 15 minutes that inventories your endpoints, detects bad actors and blocks malicious traffic in real time. Detect API attacks in real time. Automatically blo...

llm-prompt-injection-resources

llm-prompt-injection-resources Une collection organisée de ressources pour apprendre et rechercher les attaques par injection de prompt dans les LLM, les défenses et la sécurité. Faire un don Soutenez la maintenance de ce projet via PayPal ou en scannant le code QR ci-dessous...