paragon

Deprecation Notice This project has been deprecated, please refer to our new Realm project, which builds upon many of the ideas we had when building this repo. Paragon Paragon is a Red Team engagement platform. It aims to unify offensive tools behind a simple UI, abstracting much of the backend...

EUVD-2026-14512

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in Salesforce Marketing Cloud Engagement allows Web Services Protocol Manipulation. This issue affects Marketing Cloud Engagement: before January 30th, 2026...

EUVD-2025-17722

Malicious code in bioql PyPI...

CVE-2025-47977

Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-47977

Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-47977

Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-47977

CVE-2025-47977 is a cross-site scripting (XSS) flaw in Nuance Digital Engagement Platform caused by improper neutralization of input during web page generation. The vulnerability allows an unauthenticated or unauthorized user to craft input that the system renders, enabling spoofing over a networ...

Nuance Digital Engagement Platform Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...

PT-2025-24883 · Nuance · Nuance Digital Engagement Platform

Name of the Vulnerable Software and Affected Versions: Nuance Digital Engagement Platform affected versions not specified Description: The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting. This allows an authorized attacker to...

CVE-2025-47977: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Nuance Digital Engagement Platform allows an unauthorized attacker to perform spoofing over a network...

iClicker Website Hacked with Fake CAPTCHA in ClickFix Attack

Popular student engagement platform iClicker's website was compromised with a ClickFix attack. A fake "I'm not a robot"…...

Paragon - Red Team Engagement Platform With The Goal Of Unifying Offensive Tools Behind A Simple UI

Paragon is a Red Team engagement platform. It aims to unify offensive tools behind a simple UI, abstracting much of the backend work to enable operators to focus on writing implants and spend less time worrying about databases and css. The repository also provides some offensive tools already...