5187 matches found
CVE-2026-72906: Missing Authorization
ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, the sendautoemail function in erpnext/accounts/doctype/processstatementofaccounts/processstatementofaccounts.py lacks a Process Statement Of Accounts permission check, allowing an authenticated...
AutoSRC-AISkill
AutoSRC-AISkill A fully automated SRC vulnerability discover...
PT-2026-68744
Name of the Vulnerable Software and Affected Versions OpenReception versions prior to 1.0.6 Description The bootstrap challenge endpoint /api/tenants/id/appointments/bootstrap-challenge implements a SHA-256 proof-of-work PoW mechanism intended to rate-limit unauthenticated clients. However, the...
Breaking Customized LLMs for Coding: Automated Red Teaming for Instruction Backdoor Attacks
LLM customization platforms allow users to build task-specific models for code intelligence tasks by embedding instructions into system prompts, without modifying the underlying model parameters. While these platforms lower the barrier to developing customized LLMs, they also introduce a new atta...
ChainDrop supply chain compromise: Anatomy of a self-propagating worm
In this article 1. Attack chain overview 2. Mitigation and protection guidance 3. Indicators of compromise IOC 4. Microsoft Defender XDR detections 5. Advanced hunting queries 6. Learn more Microsoft Threat Intelligence identified a large-scale npm supply chain attack affecting more than 400...
django-automated-logging (0.0.1a0) potentially affected by CVE-2026-15830 via django (1.10.0rc1)
django PYPI version 1.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-automated-logging 0.0.1a0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...
django-automated-logging (0.0.1a0) potentially affected by CVE-2026-15307 via django (1.10.0rc1)
django PYPI version 1.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-automated-logging 0.0.1a0 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...
django-automated-logging (0.0.1a0) potentially affected by CVE-2026-15830 via django (1.10.0rc1)
django PYPI version 1.10.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-automated-logging 0.0.1a0 Source cves: CVE-2026-15830 Source advisory: OSV:PYSEC-2026-3717...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...
certgraveyard_yara v2026.08.03
CertGraveyard YARA Rules Generator Automated YARA rule generation from the CertGraveyard compromised certificate database. Features ๐ Daily Updates : Automatically checks CertGraveyard for new compromised certificates ๐ YARA Rule Generation : Creates individual YARA rules for each certificate โ ...
A Multi-Objective AutoML-Based Efficient Intrusion Detection System for EV Charging Networks
Electric Vehicle Charging Systems EVCSs are increasingly connected with Internet of Things IoT devices, which improves charging intelligence but also expands their exposure to cyber-attacks. Intrusion Detection Systems IDSs are essential for securing EV charging networks; however, conventional...
Exodia
Exodia Autonomous AI-driven penetrat...
Setup IPsec VPN โ Updated!
English | ็ฎไฝไธญๆ | ็น้ซไธญๆ | ๆฅๆฌ่ช | ะ ัััะบะธะน IPsec VPN Server Auto Setup Scripts Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. An IPsec VPN encrypts your network traffic, so that nobody between you and the VPN server can eavesdrop on your data as it...
Supporting Cybersecurity Risk Management for Medical Devices Via the SECUMAN Ontology and Shapes
We propose the SECUMAN ontology and shapes for representing and analysing cybersecurity risk-management documentation for medical devices. Cybersecurity risks are increasingly relevant for connected medical devices and may have direct consequences for patient safety. Current risk-management files...
certgraveyard_yara v2026.07.31
CertGraveyard YARA Rules Generator Automated YARA rule generation from the CertGraveyard compromised certificate database. Features ๐ Daily Updates : Automatically checks CertGraveyard for new compromised certificates ๐ YARA Rule Generation : Creates individual YARA rules for each certificate โ ...
BountySkiller
BountySkiller โ hacktivity & writeup collector Flask app that...
Exploit for Relative Path Traversal in Fortinet Fortiweb
FortiWeb-cve-2025-64446-RCE-exploit Security research tool for...
certgraveyard_yara v2026.07.30
CertGraveyard YARA Rules Generator Automated YARA rule generation from the CertGraveyard compromised certificate database. Features ๐ Daily Updates : Automatically checks CertGraveyard for new compromised certificates ๐ YARA Rule Generation : Creates individual YARA rules for each certificate โ ...
