EUVD-2026-109956

boneIO Black directly excludes several API endpoints from the authentication. An unauthenticated remote attacker on the local network can retrieve system logs, firmware version, serial number, MQTT username, configuration file listings, and API documentation. This data aids reconnaissance and...

EUVD-2026-109812

danmuapi before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify server environment configuration when the default TOKEN is used and ADMINTOKEN is unset. Attackers can send POST requests to /api/env/set, /api/env/add, or /api/env/del to set...

EUVD-2026-109790

A vulnerability was found in AllenAI AllenNLP up to 2.10.1. This impacts the function Registrable.resolveclassname of the file allennlp/common/registrable.py of the component Registrable Configuration Machinery. Performing a manipulation of the argument Type results in code injection. The attack...

CVE-2026-77061 Missing Authentication for Critical Function in boneIO

boneIO Black directly excludes several API endpoints from the authentication. An unauthenticated remote attacker on the local network can retrieve system logs, firmware version, serial number, MQTT username, configuration file listings, and API documentation. This data aids reconnaissance and...

CVE-2026-77053

boneIO Black firmware ships with authentication disabled by default. Its management web API listens on all network interfaces and exposes all endpoints without requiring credentials. An unauthenticated remote attacker can fully control the device, causing denial of service, modifying configuratio...

CVE-2026-116275 AllenAI AllenNLP Registrable Configuration Machinery registrable.py Registrable.resolve_class_name code injection

A vulnerability was found in AllenAI AllenNLP up to 2.10.1. This impacts the function Registrable.resolveclassname of the file allennlp/common/registrable.py of the component Registrable Configuration Machinery. Performing a manipulation of the argument Type results in code injection. The attack...

CVE-2026-116275

A code injection vulnerability exists in AllenAI AllenNLP up to version 2.10.1 . The flaw is located in the Registrable Configuration Machinery component, specifically within the Registrable.resolve_class_name function in allennlp/common/registrable.py. By manipulating the Type argument, an attac...

CVE-2026-82945

SOEM version 2.0.0 and earlier contains a vulnerability during device configuration where a malicious device can cause memory corruption. The software writes configuration data to a fixed-size array without checking if the array index exceeds its maximum size of ECMAXFMMU entries. A device...

CVE-2026-82945 Memory Corruption via FMMU Configuration Table Overflow

SOEM version 2.0.0 and earlier contains a vulnerability during device configuration where a malicious device can cause memory corruption. The software writes configuration data to a fixed-size array without checking if the array index exceeds its maximum size of ECMAXFMMU entries. A device...

CVE-2026-82945

SOEM versions 2.0.0 and earlier are vulnerable to memory corruption during device configuration. The root cause is an out-of-bounds write where the software fails to validate that the array index does not exceed the EC_MAXFMMU entries limit. A malicious device can provide more configuration block...

EUVD-2026-109678

SOEM version 2.0.0 and earlier contains a vulnerability during device configuration where a malicious device can cause memory corruption. The software writes configuration data to a fixed-size array without checking if the array index exceeds its maximum size of ECMAXFMMU entries. A device...

php2shell-mitigation

MITIGATION — detect and work around CVE-2026-109618 / CVE-2026...

Docker IPsec VPN Server

English | 简体中文 | 繁體中文 | Русский IPsec VPN Server on Docker Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Based on Alpine 3.23 or Debian 12 with Libreswan IPsec VPN software and xl2tpd L2TP daemon. An IPsec VPN encrypts your network traffic, so that nobody betwee...

DbDat

DbDat Db Database Assessment Tool DbDat performs numerous checks on a database to evaluate security. The categories of checks performed are configuration, privileges, users, and information. Checks are performed by running queries or reading database configuration files. The goal of this tool is ...

machinae

Machinae Security Intelligence Collector Machinae is a tool for collecting intelligence from public sites/feeds about various security-related pieces of data: IP addresses, domain names, URLs, email addresses, file hashes and SSL fingerprints. It was inspired by Automater1, another excellent tool...

subfinder

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

Phoenix

Homepage | Wiki | Contributing Phoenix Phoenix is a suite of configurations & advanced modifications for Mozilla Firefox, designed to put the user first - with a focus on privacy, security, freedom, functionality, & usability. Here a detailed list of Phoenix's features & enhancements. !TIP Find a...

Can’t Patch PHP2Shell Yet? Build a Stopgap with the Controls You Own

Executive Summary PHP2Shell’s fix is to update PHP, but patching at scale is slow. Only 199,000 of 156 million PHP installations were patched in the first 12 hours after disclosure. In the meantime, Qualys’s configuration-level mitigation reduces exposure to the confirmed attack path without code...

CVE-2026-116115

A security vulnerability has been detected in Yoosee GM8135S Camera 21.00.01.36. This impacts an unknown function of the file wpasupplicantX.conf of the component WiFi Configuration. Such manipulation leads to improper initialization. The attack can only be initiated within the local network. Thi...

How-To-Secure-A-Linux-Server

How To Secure A Linux Server An evolving how-to guide for securing a Linux server that, hopefully, also teaches you a little about security and why it matters. Table of Contents Introduction Guide Objective Why Secure Your Server Why Yet Another Guide Other Guides To Do / To Add Guide Overview...