CVE-2026-48786 Fleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint

Fleet is an open-source device management platform built on osquery. In versions prior to 4.87.0, the target search endpoint POST /api/latest/fleet/targets returned unmasked team enroll secrets and full team configuration, including credential-bearing agent options, to low-privilege observer-clas...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

svn-extractor

Svn-Extractor Molte volte i penetration tester di applicazioni web si imbattono nella presenza di cartelle .svn. Per chi non lo sapesse, la cartella .svn viene usata dal sistema di version control SVN per eseguire le sue operazioni. Per un pentest blackbox questa cartella contiene una grande...

keepass-password-dumper

KeePass 2.X Master Password Dumper CVE-2023-32784 Atualização A vulnerabilidade recebeu o identificador CVE-2023-32784 e foi corrigida no KeePass 2.54. Agradeço mais uma vez a Dominik Reichl pela resposta rápida e pela correção criativa! Esclarecimento: a senha precisa ser digitada no teclado, nã...

CloudScraper

CloudScraper è uno strumento per spiderare e raschiare i target alla ricerca di risorse cloud. Inserisci un URL e spiederà e cercherà nel sorgente delle pagine spidate stringhe come 's3.amazonaws.com', 'windows.net' e 'digitaloceanspaces'. Attualmente sono supportate risorse AWS, Azure e Digital...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

CVE-2026-79258

A flaw was found in WebXR within Google Chrome. This incorrect authorization vulnerability allows a remote attacker, by leveraging social engineering tactics and a specially crafted HTML page, to obtain sensitive cross-origin data. This could lead to unauthorized information disclosure...

CVE-2026-79265

A flaw was found in Google Chrome. A remote attacker, who has compromised the renderer process and leveraged social engineering, could exploit an incomplete cleanup vulnerability in the GetUserMedia component. This could allow them to obtain sensitive information via a crafted HTML page...

CVE-2026-79288

A flaw was found in Google Chrome's Autofill feature on Android. Improper input validation allows a remote attacker to obtain sensitive information by tricking a user into visiting a specially crafted HTML page. This vulnerability could lead to the exposure of sensitive user data...

system_prompts_leaks

Come visto su The Washington Post: Scopri le regole nascoste dietro l'IA. Poi usale per riscrivere questo articolo. 11 maggio 2026 Fughe di System Prompt Lo scopo di questa repository è documentare le istruzioni dei System Prompt per tutti i chatbot AI disponibili - Claude, ChatGPT, Gemini ecc...

CVE-2026-79126

A flaw was found in Proxy in Google Chrome. An adjacent attacker could exploit this vulnerability by sending crafted network traffic, potentially leading to the disclosure of sensitive information. This issue stems from an incorrect provision of specified functionality within the Proxy component...

CVE-2026-79287

A flaw was found in chromium-browser. A remote attacker could exploit an observable discrepancy in Forms by crafting a malicious HTML page. This could allow the attacker to obtain sensitive information from the user...

CVE-2026-79242

A flaw was found in Google Chrome. This vulnerability, stemming from an observable discrepancy in HTML processing, could be exploited by a remote attacker. By crafting a malicious HTML page, an attacker could gain access to sensitive information...

CVE-2026-79253

A flaw was found in the Network component of Google Chrome. A remote attacker, leveraging social engineering tactics, could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This improper input validation could lead to the disclosure of sensitive information...

CVE-2026-53959

CVE-2026-53959 - 4gaBoards 3.3.9 - Divulgazione di informazioni utente Questa repository contiene un exploit Proof of Concept PoC per CVE-2026-53959 Dichiarazione di non responsabilità Questo progetto è fornito esclusivamente a scopo educativo e per test di sicurezza autorizzati. Non utilizzarlo...

CVE-2026-79045

A flaw was found in the V8 JavaScript engine within Chromium. A remote attacker could exploit a type confusion vulnerability by leveraging social engineering tactics and enticing a user to visit a specially crafted HTML page. This could allow the attacker to read sensitive memory within the...

CVE-2026-79041

A flaw was found in Google Chrome. A remote attacker, through social engineering, could exploit a missing authorization vulnerability to bypass the web origin policy. By convincing a user to open a specially crafted HTML page, the attacker could gain access to privileged browser pages, potentiall...

CVE-2026-79038

A flaw was found in WebProtect in Google Chrome. This incorrect authorization vulnerability allows a remote attacker to obtain sensitive information by tricking a user into visiting a specially crafted HTML page...

CVE-2026-79023

A flaw was found in chromium-browser. This incorrect authorization vulnerability in the Editing component allows a remote attacker to obtain sensitive information. The attacker can achieve this by persuading a user to open a specially crafted HTML page...

CVE-2026-79030

A flaw was found in Chromium's Autofill feature. A remote attacker could exploit an observable discrepancy by crafting a malicious HTML page. This could allow the attacker to obtain sensitive user information...