paniclock

PanicLock is a macOS menu bar utility that instantly disables Touch ID and locks the screen with a single click or closing your laptop lid. PanicLock fills a gap macOS leaves open: there is no built-in way to instantly disable Touch ID when it matters. Biometrics are convenient day-to-day, and...

BridgeBlock

BridgeBlock BridgeBlock is a menu bar app that prevents wireless bridging attacks by detecting bridging conditions and taking action. It also has a commandline version for system administrators. Sponsors: Installing GitLab Releases Zips of the both the GUI and CLI versions are provided in the...

ARC-Browser-Address-Bar-Spoofing-PoC

ARC Browser Address Bar Spoofing - iOS/iPadOS CVE-2024-25733 ARC Browser Address Bar Spoofing PoC - iOS/iPadOS Exploit PoC Proof of Concept function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.random 1000; while randomPort === 0 || randomPort === 443;...

CVE-2026-98640

In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Validate PCI BAR size before mapping The amdsfh driver maps PCI BAR 2 using pcimiomapregions and subsequently accesses MMIO registers at offsets up to 0x10958 e.g., AMDP2CMSG3 at 0x1068C. However, the driver never...

CVE-2026-98640 HID: amd_sfh: Validate PCI BAR size before mapping

In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Validate PCI BAR size before mapping The amdsfh driver maps PCI BAR 2 using pcimiomapregions and subsequently accesses MMIO registers at offsets up to 0x10958 e.g., AMDP2CMSG3 at 0x1068C. However, the driver never...

EUVD-2026-103554

In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Validate PCI BAR size before mapping The amdsfh driver maps PCI BAR 2 using pcimiomapregions and subsequently accesses MMIO registers at offsets up to 0x10958 e.g., AMDP2CMSG3 at 0x1068C. However, the driver never...

CVE-2026-98640

The Linux kernel contains a vulnerability in the amd_sfh driver where it maps PCI BAR 2 using pcim_iomap_regions() without validating if the BAR size is sufficient for subsequent MMIO register accesses (up to offset 0x10958). If the driver binds to a device with a smaller BAR 2, it results in an ...

CVE-2026-98640

In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Validate PCI BAR size before mapping The amdsfh driver maps PCI BAR 2 using pcimiomapregions and subsequently accesses MMIO registers at offsets up to 0x10958 e.g., AMDP2CMSG3 at 0x1068C. However, the driver never...

CVE-2026-98640 HID: amd_sfh: Validate PCI BAR size before mapping

In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Validate PCI BAR size before mapping The amdsfh driver maps PCI BAR 2 using pcimiomapregions and subsequently accesses MMIO registers at offsets up to 0x10958 e.g., AMDP2CMSG3 at 0x1068C. However, the driver never...

CVE-2024-25202

CVE-2024-25202 A vulnerability was found in PHPgurukul visitor management system 1.0. it has been rated as problemic. Affected by the issue is some unknown functionality of the file search bar that called search-result.php and search-visitor.php . The vulnerability is Cross-Site-Scripting XSS...

NoHomeBar

NoHomeBar iOS 14 - 16.1.2 Reboot your device to revert the changes. iOS14❌ Install TrollStore AltStore Credits https://github.com/zhuowei MacDirtyCow exploit https://twitter.com/straighttamago NoHomeBar...

axios-ssrf

Get Started run pnpm install on the root, backend, and frontend directories run pnpm start:dev on the root directory Vulnerabilities This website is published on: https://axios-ssrf.onrender.com/ Server Side Request Forgery: I specifically used a version of axios that is vulnerable to SSRF attack...

Linux Distros Unpatched Vulnerability : CVE-2026-109747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. CVE-2026-109747 Note that Nessus relies on the presen...

Astra Linux – Vulnerability in Firefox and Thunderbird

An attacker could have placed a datalist element to obscure the address bar. This vulnerability affects Firefox 113, Firefox ESR 102.11, and Thunderbird 102.11...

CVE-2023-49471

CVE-2023-49471 Vulnerability Type Blind SSRF Affected Product and Version Bar assistant / -----------------------------8290129562507108753887567115 Content-Disposition: form-data; name="images0copyright" -----------------------------829012956250...

EUVD-2026-101930

The framebuffer device model's maximum resolution constants were duplicated between the framebuffer and RFB modules and had gotten out of sync. Additionally, writes to the framebuffer BAR could set arbitrary width and height values without validation, and the framebuffer BAR I/O and RFB rendering...

CVE-2026-102756

DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users who can edit dataset fields and chart configuration can store an HTML-bearing dimension value in a bar-horizontal chart. When lengthLimit truncates the category axis label,...

CVE-2026-102756 DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scripting

DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users who can edit dataset fields and chart configuration can store an HTML-bearing dimension value in a bar-horizontal chart. When lengthLimit truncates the category axis label,...

CVE-2026-102756 DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scripting

DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users who can edit dataset fields and chart configuration can store an HTML-bearing dimension value in a bar-horizontal chart. When lengthLimit truncates the category axis label,...

CVE-2026-102756

The open-source data visualization tool DataEase is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 2.10.26 . Authenticated users with permissions to edit dataset fields and chart configurations can inject HTML-bearing dimension values into a bar-horizontal chart . The vulner...