dismember

🔪 Dismember Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes or particular ones for common secrets and custom regular expressions, among other things. It will eventually become a full /proc toolkit. Using the grep command, it can match a regular...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

CVE-2026-2256-

CVE-2026-2256- CVE-2026-2256 diagram...

PrettyTrusts

PrettyTrusts Try it out at:http://peewpw.github.io/PrettyTrusts Visualizes the output of PowerView's Get-DomainTrustMapping | Export-CSV -NoTypeInformation trusts.csv. Hand it the csv file and get a pretty diagram to play with! Should work with older and new PowerView outputs. Everything is...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

AI-Threat-Modeler

AI Threat Modeler Point it at a codebase. Get a code-grounded threat model back — ready to review, challenge, and act on. The parts the code can't see — the business context and the architecture behind it — are where you and your architects come in. Upload a ZIP or import a GitHub repo, and AI...

CVE-2026-96384

Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9...

CVE-2026-96384 Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180

Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9...

CVE-2026-96384 Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180

Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9...

EUVD-2026-107821

Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9...

CVE-2026-96384 Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180

Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9...

CVE-2026-96384

The Drupal Mermaid Diagram Field module (versions 1.0.4 through 1.0.9 ) is vulnerable to an Incorrect Authorization issue that allows Forceful Browsing . The root cause is that the module does not properly limit access to modal content and fails to sufficiently respect default revision behavior. ...

Drupal Mermaid Diagram Field authorization issue vulnerability

Drupal Mermaid Diagram Field versions 1.0.4 through 1.0.9 contain an authorization issue vulnerability. This vulnerability stems from improper authorization checks and may lead to forced browsing...

pytm

pytm: Un marco Pythonico para modelado de amenazas Introducción El modelado de amenazas tradicional a menudo llega tarde a la fiesta, o a veces no llega en absoluto. Además, crear flujos de datos e informes manuales puede ser extremadamente lento. El objetivo de pytm es desplazar el modelado de...

DRUPAL-CONTRIB-2026-180

This module enables you to add mermaid diagram that displays either inline on an entity or optionally in a modal. The module doesn't sufficiently respect default revision behavior and does not properly limit access to the modal content. This vulnerability is mitigated by the fact that an attacker...

Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180

This module enables you to add mermaid diagram that displays either inline on an entity or optionally in a modal. The module doesn't sufficiently respect default revision behavior and does not properly limit access to the modal content. This vulnerability is mitigated by the fact that an attacker...

PT-2026-97674

Name of the Vulnerable Software and Affected Versions Drupal Mermaid Diagram Field versions 1.0.4 through 1.0.9 Description An incorrect authorization issue allows forceful browsing. The module fails to properly limit access to modal content and does not sufficiently respect default revision...

CVE-2026-58504

draw.io is a configurable diagramming and whiteboarding application. Prior to version 30.2.5, opening or importing a crafted .drawio file can execute attacker-controlled JavaScript in the draw.io origin when selected cells are processed by TextFormatPanel.addFont in...

CVE-2026-91197

Flowable flowable-engine through 8.0.0 contains an XML external entity injection vulnerability in ProcessDiagramLayoutFactory.parseXml that fails to disable external entity resolution when parsing deployed BPMN resources. Attackers with process deployment privileges can embed DOCTYPE declarations...

EUVD-2026-66417

A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, busload reads the number of bus handles from the file attribute "bushandles" using attributenumdata without validating an upper...