Stego-Lab

Stego-Lab Steganography. EXIF. Watermarks. Decode. Batch. Professional image privacy workflows for iPhone, iPad, and macOS. Website · GitLab · Project Page · Privacy Policy · Press Kit · Support · License Why Stego-Lab Stego-Lab brings together workflows that are usually scattered across multiple...

tcpreplay

Tcpreplay Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Windows under Cygwin for editing and replaying network traffic previously captured by tools like tcpdump and Wireshark. It classifies traffic as client or server, rewrites Layer 2/3/4 headers, and replays it back onto the...

APKLab

APKLab The ultimate Android RE experience right inside your VS Code. APKLab seamlessly integrates the best open-source tools: Apktool, smali-lsp, Jadx, uber-apk-signer, apk-mitm and more to the excellent VS Code so you can focus on app analysis and get it done without leaving the IDE. Features...

PyMemoryEditor

PyMemoryEditor A pure-Python library built on ctypes that lets you inspect, modify and search the memory of any running process in a few lines of Python — Cheat Engine workflows on Windows, Linux and macOS! Read, write and scan the memory of any process — straight from Python. One unified API...

CVE-2026-124637

A stored Cross-Site Scripting XSS vulnerability was identified in the profile editing form, in the parameters: cliNom and cliCognoms, in a request to https://www.luxorgymtarrega.com/dadespersonals/modificarClient/ID. User-provided data is neither validated nor escaped before being displayed in th...

CVE-2026-124637

A stored Cross-Site Scripting (XSS) vulnerability exists in the Tankuam Places application (Kompini). The flaw is located in the profile editing form specifically within the cliNom and cliCognoms parameters during a request to https://www.luxorgymtarrega.com/dadespersonals/modificarClient/ID. The...

EUVD-2026-119891

A stored Cross-Site Scripting XSS vulnerability was identified in the profile editing form, in the parameters: cliNom and cliCognoms, in a request to https://www.luxorgymtarrega.com/dadespersonals/modificarClient/ID. User-provided data is neither validated nor escaped before being displayed in th...

CVE-2026-124637 Stored Cross-Site Scripting (XSS) in Tankuam Places

A stored Cross-Site Scripting XSS vulnerability was identified in the profile editing form, in the parameters: cliNom and cliCognoms, in a request to https://www.luxorgymtarrega.com/dadespersonals/modificarClient/ID. User-provided data is neither validated nor escaped before being displayed in th...

PT-2026-140286

A stored Cross-Site Scripting XSS vulnerability was identified in the profile editing form, in the parameters: cliNom and cliCognoms, in a request to https://www.luxorgymtarrega.com/dadespersonals/modificarClient/ID. User-provided data is neither validated nor escaped before being displayed in th...

CVE-2026-124637: Kompini Tankuam Places: A stored Cross-Site Scripting (XSS) vulnerability was identified in the profile editing form, in the parameters: cliNom…

A stored Cross-Site Scripting XSS vulnerability was identified in the profile editing form, in the parameters: cliNom and cliCognoms, in a request to https://www.luxorgymtarrega.com/dadespersonals/modificarClient/ID. User-provided data is neither validated nor escaped before being displayed in th...

CVE-2026-97194

The Secure Custom Fields WordPress plugin before 6.9.8 does not perform a read-permission check when it renders and formats the values of its relational fields, allowing users with post-editing access Contributor and above to disclose the titles and non-public statuses of other users' unpublished...

EUVD-2026-119463

The Secure Custom Fields WordPress plugin before 6.9.8 does not perform a read-permission check when it renders and formats the values of its relational fields, allowing users with post-editing access Contributor and above to disclose the titles and non-public statuses of other users' unpublished...

PT-2026-139919

The Secure Custom Fields WordPress plugin before 6.9.8 does not perform a read-permission check when it renders and formats the values of its relational fields, allowing users with post-editing access Contributor and above to disclose the titles and non-public statuses of other users' unpublished...

Ultrasound-Assisted Biometric Watermarking against Face Video Deepfakes

Currently, artificial intelligence-generated content AIGC poses a severe threat to facial video deepfakes, and many AIGC companies employ video watermarking to mitigate unauthorized fake video usage, but its effectiveness is limited due to watermark tampering and private-model forgery...

filessh

FileSSH A TUI-based file explorer for SSH servers, which allows you to browse and manage files on a remote server, edit them in-place, and recursively download directories with parallel directory traversal. It also has the ability to quickly spawn SSH sessions to paths on the remote server...

CVE-2020-29254

CVE-2020-29254 TikiWiki 21.2 allows to edit templates without the use of a CSRF protection. ========================== Cross-Side-Request-Forgery CSRF: TikiWiki 21.2 allows to edit templates without the use of a CSRF protection. This could allow an unauthenticated, remote attacker to conduct a...

CVE-2025-25062

CVE-2025-25062 Description Usage Example Timeline Description A Stored Cross-Site-Scripting XSS vulnerability exists in the Backdrop CMS 1.29.2 post edit page. This script chains the vulnerability with a CSRF payload to achieve privilege escalation from the role of 'Editor' to 'Administrator'...

CVE-2026-97189

The Advanced Custom Fields ACF® WordPress plugin before 6.8.11 does not perform a read-permission check when it renders and formats the values of its relational fields, allowing users with post-editing access Contributor and above to disclose the titles and non-public statuses of other users'...

CVE-2026-111648

A flaw was found in BuildAdmin. An authenticated administrator with profile editing permissions can modify other administrative accounts by altering the account identifier parameter in requests. This flaw allows an attacker to overwrite sensitive profile details, including email addresses and pho...

EUVD-2026-118955

The Advanced Custom Fields ACF® WordPress plugin before 6.8.11 does not perform a read-permission check when it renders and formats the values of its relational fields, allowing users with post-editing access Contributor and above to disclose the titles and non-public statuses of other users'...