ActiveScanPlusPlus

ActiveScan++ ActiveScan++ extends Burp Suite's active and passive scanning capabilities. Designed to add minimal network overhead, it identifies application behaviour that may be of interest to advanced testers: Potential host header attacks password reset poisoning, cache poisoning, DNS rebindin...

NextJS-CVE-2025-29927

Here's a clean and informative README.md for your GitHub repo that explains it's a vulnerable Next.js application for CVE-2025-29927 and includes a link to your setup YouTube video: 🔓 NextJS-CVE-2025-29927 - Vulnerable Demo Application This is a vulnerable Next.js application that demonstrates...

-CVE-2024-45352

🚨 CVE-2024-45352 – Xiaomi Smarthome Remote Code Execution RCE 📌 Summary A critical vulnerability CVE-2024-45352 was discovered in the Xiaomi Smarthome application, allowing unauthenticated remote code execution RCE via improper input handling in the internal API parser. This vulnerability can be...

CVE-2024-23113

CVE-2024-23113 The script is designed to detect CVE-2024-23113, which is a format string vulnerability in the FortiGate FGFM service FortiGate to FortiManager protocol running on TCP port 541. The vulnerability occurs because an attacker can control a format string, which could lead to Remote Cod...

Alfred

WIP - Revamped Alfred 2.0 Alfred - A Modular Recon and Exploitation Framework EXPIREMTNAL PHASE Alfred is a Python-based framework designed to assist in various reconnaissance, exploitation, and post-exploitation tasks. It is highly modular, allowing users to easily add plugins to extend...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : PCRE2 vulnerabilities (USN-8974-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8974-1 advisory. It was discovered that PCRE2 did not correctly manage memory when processing certain...

CVE-2026-116767

CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service...

CVE-2026-116766

CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61. Attackers can cause a persistent denial of service of the server...

CVE-2026-116767

Secure Access servers running versions prior to 14.61 are vulnerable to an improper input handling vulnerability. This flaw allows authenticated attackers to trigger a persistent denial of service (DoS). No specific remediation or exploit details are provided in the documents.

CVE-2026-116767 Improper input handling in Secure Access servers

CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service...

EUVD-2026-115614

CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61. Attackers can cause a persistent denial of service of the server...

CVE-2026-116766

CVE-2026-116766 describes an improper input handling vulnerability in the Secure Access server affecting versions 13.0 through prior to 14.61 . An attacker can exploit this flaw to cause a persistent denial of service (DoS) of the server. No specific exploit information or remediation details are...

CVE-2026-116766 Improper input handling in Secure Access server

CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61. Attackers can cause a persistent denial of service of the server...

PT-2026-135796

CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61. Attackers can cause a persistent denial of service of the server...

PT-2026-135797

CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service...

CVE-2026-116767: Absolute Software Secure Access: CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61

CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service...

CVE-2026-116766: Absolute Software Secure Access: CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior…

CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61. Attackers can cause a persistent denial of service of the server...

Drupal MathJax: Cross-site scripting vulnerability in LaTeX for Drupal

Drupal MathJax: In Drupal versions 0.0.0 through 4.1.2, there is a cross-site scripting vulnerability in LaTeX. This vulnerability stems from improper input handling during web page generation and may lead to cross-site scripting attacks...

Cross-site scripting vulnerability in WordPress Media Player Addons for Elementor

WordPress Media Player Addons for Elementor versions 1.1.10 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper handling of input during web page generation, potentially enabling stored cross-site scripting attacks...

WordPress Video Gallery Block cross-site scripting vulnerability

WordPress Video Gallery Block versions 1.6.0 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input handling during web page generation and may lead to stored cross-site scripting attacks...