Bugs-feed

Bug's feed Bug's feed é um portal hospedado localmente onde você pode pesquisar as últimas notícias, vídeos, CVEs, vulnerabilidades... É implementado como uma aplicação PWA, para que você possa se livrar do navegador e usá-lo como um aplicativo de desktop. Navegue por diferentes abas e dê uma...

C2-Tracker

C2 Tracker C2 Tracker è un feed IOC gratuito e guidato dalla community che utilizza ricerche su Shodan eCensys per raccogliere indirizzi IP di infrastrutture C2 note di malware/botnet. Questo Progetto è stato Archiviato Questo progetto è stato archiviato. I file di testo in data/ sono stati rimos...

c2finder

c2finder Disclaimer obbligatorio: non sono affatto un programmatore esperto, quindi questo è uno script molto semplice. Non fare affidamento su di esso per essere perfetto. Sono comunque aperto a feedback o idee per miglioramenti : Descrizione Questo script scarica la lista principale C&C da...

secfixes-tracker

Alpine Security Fix Tracker Este é um aplicativo web Flask que rastreia correções de segurança no Alpine. Ao usar o secdb do Alpine, podemos geralmente deduzir quais CVEs foram e não foram corrigidas. Algumas extensões ao esquema de relatórios do secfixes serão adicionadas para permitir que os...

ShunyaNet-Sentinel

ShunyaNet Sentinel ATUALIZADO: 03/02/2026 O ShunyaNet Sentinel é um programa leve, com tema cyberpunk, que ingere feeds RSS ex.: notícias de última hora, redes sociais, os envia para um LLM para análise e entrega alertas e relatórios resumidos diretamente na GUI e no Slack em intervalos regulares...

CVE-2023-5612

Divulgazione dell'email pubblica nel feed RSS dei tag https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ root@kitploit: An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was...

CVE-2026-77507

Weblate , a web-based continuous localization platform, is affected by an information disclosure vulnerability in its object-scoped RSS feeds prior to version 2026.8 . The root cause is that these feeds fail to enforce the permission checks applied elsewhere, allowing unauthorized users to read c...

opencve

What is OpenCVE? OpenCVE is a Vulnerability Intelligence Platform that helps you monitor and manage CVEs efficiently. It aggregates vulnerabilities from multiple sources MITRE, NVD, RedHat, Vulnrichment... and lets you filter, track, and organize them by vendor, product, severity, and more. You c...

exploit-CVE-2023-38490

Kirby XML External Entity XXE - CVE-2023-38490 exploit Kirby 3.9.6 Entità Esterna XML Exploit per CVE-2023-38490 / GHSA-q386-w6fg-gmgp. Dimostrazione dello sfruttamento Build ed esegui l'app demo vulnerabile: root@kitploit: cd docker docker buildx build -t kirby-starterkit-3.9.5 . docker run -d...

WordPress Project Manager plugin 2.2.0-4.0.7 - 4.0.6 - Subscriber+ User Activity Feed Disclosure vulnerability

WordPress Project Manager plugin 2.2.0-4.0.7 - 4.0.6 - Subscriber+ User Activity Feed Disclosure vulnerability discovered by Usama Arshad in WordPress Plugin WP Project Manager versions 2.2.0-4.0.6...

CVE-2026-74930

The WordPress Project Manager plugin (versions 2.2.0–4.0.6 ) contains an IDOR flaw in one of its REST API routes: it fails to verify that the user whose activity feed is being requested is the same user making the request. As a result, any authenticated user at subscriber level or above can read ...

CVE-2026-79663

Ech0 before 4.7.3 contains a stored cross-site scripting vulnerability in the public RSS feed where tag names and markdown content are rendered without HTML escaping. Attackers with admin privileges can inject malicious tag names or raw HTML in echo content that executes as JavaScript in RSS...

CVE-2026-79663 Ech0 before 4.7.3 Stored XSS via RSS feed tag names

Ech0 before 4.7.3 contains a stored cross-site scripting vulnerability in the public RSS feed where tag names and markdown content are rendered without HTML escaping. Attackers with admin privileges can inject malicious tag names or raw HTML in echo content that executes as JavaScript in RSS...

EUVD-2026-65451

Ech0 before 4.7.3 contains a stored cross-site scripting vulnerability in the public RSS feed where tag names and markdown content are rendered without HTML escaping. Attackers with admin privileges can inject malicious tag names or raw HTML in echo content that executes as JavaScript in RSS...

CVE-2026-79663

Ech0 before 4.7.3 is affected by a stored cross-site scripting vulnerability in its public RSS feed . Tag names and Markdown content are rendered without HTML escaping, allowing an attacker with admin privileges to inject malicious tag names or raw HTML into echo content. The injected script exec...

CVE-2026-79663 Ech0 before 4.7.3 Stored XSS via RSS feed tag names

Ech0 before 4.7.3 contains a stored cross-site scripting vulnerability in the public RSS feed where tag names and markdown content are rendered without HTML escaping. Attackers with admin privileges can inject malicious tag names or raw HTML in echo content that executes as JavaScript in RSS...

CVE-2002-0748

Sinossi Gold exploit - il server web remoto è soggetto a un attacco denial of service. Descrizione È stato possibile far crashare il server web inviando una richiesta che termina con due caratteri LF invece della normale sequenza CR LF CR LF CR = carriage return, LF = line feed. Un attaccante può...

CVE-2022-34963

OpenTeknik LLC OSSN RÉSEAU SOCIAL OPEN SOURCE v6.3 LTS Explication de la vulnérabilité : OpenTeknik LLC OSSN RÉSEAU SOCIAL OPEN SOURCE v6.3 LTS a été découvert comme contenant une vulnérabilité de script intersite stocké XSS via le module News Feed. Vecteurs d'attaque : L'attaquant doit publier...

log4shell-iocs

Log4Shell-IOCs Feed IOC curati dal WatchGuard Threat Lab che contengono recenti tentativi di sondare o sfruttare CVE-2021-44228 in Log4j2 Commenti degli analisti 2021-12-17 Le minacce condivise in questo feed dovrebbero essere utilizzate per THREAT HUNTING e aggiunte a una WATCHLIST. Raccomandiam...

CVE-2026-78380

RansomLook fails to enforce the privacy status of ransomware groups and markets when distributing newly collected victim posts to external notification channels. The post-processing logic checks whether an individual post is marked private but does not verify whether the group or market to which...