The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from improper external control of file names or paths, allowing attackers to delete arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to incorrect external control using filenames or paths. Exploiting this vulnerability could allow a malicious actor to delete any files at will...

EUVD-2026-92635

Ghost: Regular Expression Denial of Service in External Media Inliner...

NPM: Ghost: Regular Expression Denial of Service in External Media Inliner

NPM: Ghost: Regular Expression Denial of Service in External Media Inliner vulnerability discovered by ? in WordPress Npm ghost versions = 5.37.0, 6.67.0...

EUVD-2026-93507

Payload external upload trust validation issue...

NPM: Payload external upload trust validation issue

NPM: Payload external upload trust validation issue vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.90.0...

EUVD-2026-94008

Backstage: Improper authorization enforcement for TechDocs static content...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Content Cortex(CCx) 26.0.0-IF003 for September 2026

Summary IBM Content Cortex CCx 26.0.0-IF003 addresses CVEs across components including CPE, GraphQL, External share and Content Based Search Vulnerability Details CVEID:CVE-2026-19032 DESCRIPTION: jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without...

amass

OWASP Amass Project Le projet OWASP Amass effectue la cartographie réseau des surfaces d'attaque et la découverte d'actifs externes en utilisant des techniques de collecte d'informations open source et de reconnaissance active. Installation Vous trouverez des instructions d'installation...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

fusionauth-samlv2

fusionauth-samlv2 Этот репозиторий содержит реализации привязок SAML v2.0 на Java с использованием JAXB. Эту библиотеку можно использовать для обработки SAML-запросов и SAML-ответов. Примеры кода смотрите в тестах. Раскрытие информации о безопасности Если вы обнаружили уязвимость или другую ошибк...

java-cve-2021-29425-tika-xxe

java-cve-2021-29425-tika-xxe...

plecost

Plecost Профессиональный сканер безопасности WordPress Async-first, удобен для библиотек, не требует внешних API. Содержание Что такое Plecost? Plecost vs WPScan Быстрый старт Установка База данных CVE Движок обнаружения CVE Сканирование Модули обнаружения Безопасность WooCommerce Безопасность WP...

yara

!IMPORTANT This project is in maintenance mode. More info: https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARA in a nutshell YARA is a tool aimed at but not limited to helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malwar...

androguard

Androguard Androguard: Reverse engineering and pentesting for Android applications Androguard 5 is a Python toolkit for Android reverse engineering: open an APK, inspect the manifest and DEX, disassemble or decompile code, hunt references and vulnerabilities, and optionally patch or analyze nativ...

evilgrade

Faraday Security Research -- | ISR-evilgrade | www.faradaysec.com | -- .:: BRIEF OVERVIEW ::. Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration...

EasyEASM

EasyEASM Outil de gestion de la surface d'attaque à zéro dollar présenté au Black Hat Arsenal 2023 et au Recon Village @ DEF CON 2023. Description Easy EASM est exactement ce que son nom indique... l'outil le plus simple à configurer pour donner à votre organisation une visibilité sur ses actifs...

bitchat-android

!WARNING Это программное обеспечение не проходило внешнюю проверку безопасности и может содержать уязвимости, а также может не соответствовать заявленным целям безопасности. Не используйте его для чувствительных сценариев и не полагайтесь на его безопасность, пока оно не будет проверено. Работа в...

CVE-2019-2888

CVE-2019-2888 WebLogic EJBTaglibDescriptor XXE Уязвимость https://www.oracle.com/security-alerts/cpuoct2019.html fernflower.jar weblogic.jar/weblogic/servlet/ejb2jsp/dd/EJBTaglibDescriptor.class ╭─root@jas502n /var ╰─ find ./ |grep EJBTaglibDescriptor  ✔  8388  18:32:43...

CVE-2026-26287

A flaw was found in external-secrets. An issue during webhook generator initialization incorrectly clears the label enforcement setting, bypassing provider-side validation. An authenticated user with permissions to create webhook generators can target arbitrary secrets lacking the required label...

armory

dM. ,MMb d'YM. ,P Mb MM 6MM MM 6MMb 6MMb 6MMMMMb MM 6MM MM M' d' YM. MM69 " MM69 MM69 Mb 6M' Mb MM69 " Mb d' ,PMbMMMMMMMMMMMMMMYM.,P d' YM. MM MM MM MM MM MM MM MM M \ ,MMMMMMMMbMMMMMMMMMMMMMMMbd'\ d' YM. MM MM MM MM YM. ,M9 MM YMP dM dMMMM MM MM MM YMMMMM9 MM M d' 8,P YMM Description This is...