darwis-taxii

DARWIS TAXII A high-performance TAXII Trusted Automated eXchange of Indicator Information server written in Rust. Rust port of EclecticIQ OpenTAXII with full database compatibility. Features TAXII 1.x - Discovery, Poll, Inbox, Collection Management, Subscriptions TAXII 2.1 - Full REST API with...

pgbackrest

pgBackRest Reliable PostgreSQL Backup & Restore Introduction pgBackRest is a reliable backup and restore solution for PostgreSQL that seamlessly scales up to the largest databases and workloads. pgBackRest v2.60.0 is the current stable release. Release notes are on the Releases page. Please give ...

dumper

About Dumper This is a CLI utility for creating backups databases of various types with flexible connection and storage settings. Opportunities: Multiple database systems can be managed. Support PostgreSQL , MySQL , MongoDB and etc. Work with SSH-Keys include passphrase. Custom dump name template...

CVE-2026-102927

Prior to version 1.11.1 , HedgeDoc (a collaborative markdown notes application) contained a vulnerability in the WebSocket permission handler . The application failed to validate incoming strings, allowing note owners to store permission values outside the supported set (e.g., freely, editable, l...

GoEnumerator

ABOUT GoEnumerator GoEnumerator is a tool I'm writing for the fun of it but to also use for my own enumeration, so I will be keep adding more features to try to speed up the first steps on any CTF enumeration or profesional pentest, as I will add features and options to make the tool to not trigg...

gitrob

Gitrob: Putting the Open Source in OSINT Gitrob is a tool to help find potentially sensitive files pushed to public repositories on Github. Gitrob will clone repositories belonging to a user or organization down to a configurable depth and iterate through the commit history and flag files that...

KaliIntelligenceSuite

Kali Intelligence Suite Kali Intelligence Suite KIS is an intelligence gathering and data mining tool for penetration testers. It shall aid in the fast, autonomous, central, and comprehensive collection of intelligence by automatically: executing Kali Linux tools e.g., dnsrecon, gobuster, hydra,...

zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...

Sangoma Switchvox < 8.4.0.2 - Unauthenticated SQL Injection

Sangoma Switchvox before version 8.4.0.2 contains an unauthenticated SQL injection vulnerability in the /pa endpoint PhoneAppsHandler.pm. The PhoneIP field extracted from an XML POST body is concatenated directly into an unparameterized PostgreSQL query that runs as a database superuser. An...

phishcollector

PhishCollector PhishCollector is a research framework for collecting, analysing, and tracking phishing sites. It is intentionally designed as a starting point — the detection rules, technology signatures, wordlists, and plugins are all plain data structures that researchers are expected to read,...

CVE-2026-97693 Yuxi sandbox isolation failure allows cross-tenant access and internal service compromise

Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. From 0.6.0.beta1 until 0.7.1, there is insufficient isolation between execution-capable Docker sandboxes and trusted application services. A low-privileged authenticated user who can execute...

CVE-2026-97693

The Yuxi platform (versions 0.6.0.beta1 through 0.7.1) suffers from an isolation failure between Docker sandboxes and trusted application services. A low-privileged authenticated user can bypass sandbox boundaries to access other tenants' APIs, files, and secrets, or manipulate the unauthenticate...

SUSE-SU-2026:3509-1 Security update for php8

This update for php8 fixes the following issues: Update to version 8.3.33. Security issues fixed: - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C stack exhaustion bsc1273077. - CVE-2026-9672: security issues in libgd bsc1273078. -...

Drupal Core - Anonymous SQL Injection via PostgreSQL Entity Query

Drupal core from 8.9.0 before 10.4.10, 10.5.0 before 10.5.10, 10.6.0 before 10.6.9, 11.0.0 before 11.1.10, 11.2.0 before 11.2.12, and 11.3.0 before 11.3.10 contains an SQL injection caused by improper neutralization of special elements in SQL commands, letting attackers execute arbitrary SQL...

PT-2026-137183

Name of the Vulnerable Software and Affected Versions Yuxi versions 0.6.0.beta1 through 0.7.0 Description Insufficient isolation between execution-capable Docker sandboxes and trusted application services allows a low-privileged authenticated user to access other tenants' sandbox APIs, files, and...

CVE-2026-119922

Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 may allow remote authenticated users to elevate their privileges. To remediate this issue, we recommend you upgrade to Babelfish for PostgreSQL extension versions 4.10, 5.6, 6....

CVE-2026-119922 Babelfish for PostgreSQL Privilege Escalation

Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 may allow remote authenticated users to elevate their privileges. To remediate this issue, we recommend you upgrade to Babelfish for PostgreSQL extension versions 4.10, 5.6, 6....

CVE-2026-119922 Babelfish for PostgreSQL Privilege Escalation

Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 may allow remote authenticated users to elevate their privileges. To remediate this issue, we recommend you upgrade to Babelfish for PostgreSQL extension versions 4.10, 5.6, 6....

CVE-2026-119922 Babelfish for PostgreSQL Privilege Escalation

Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 may allow remote authenticated users to elevate their privileges. To remediate this issue, we recommend you upgrade to Babelfish for PostgreSQL extension versions 4.10, 5.6, 6....

EUVD-2026-116115

Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 may allow remote authenticated users to elevate their privileges. To remediate this issue, we recommend you upgrade to Babelfish for PostgreSQL extension versions 4.10, 5.6, 6....