ReadyScript e-commerce management system Sequence Data Compromise

The vulnerability of the ReadyScript e-commerce management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

CRM Platform SQL Injection

The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

REDAAM IT-infrastructure Management System Auth Bypass

The vulnerability of the “REDAAM” IT-infrastructure centralized management system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

KOMTEK Cassa Kurier Module Authentication Bypass

Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management is associated with the absence of authentication for a critical function. Exploitation of this vulnerability may allow an attacker to compromise the integrity and accessibility of...

Test IT testing management system Default Login Credentials Compromise

The vulnerability of the Test IT testing management system is related to the use of default login credentials. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

FOQUZ Platform Path Restriction Data Compromise

The vulnerability of the FOQUZ platform is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

FOQUZ Platform Session Duration

The vulnerability of the FOQUZ platform is related to an incorrect session duration. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

FOQUZ Platform Data Compromise

The vulnerability of the FOQUZ platform is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

Enlogic SCADA System ENTek Authentication Hash Use

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the use of a password hash instead of a password for authentication. Exploiting this vulnerability allows an intruder to compromise the confidentiality, integrity, and accessibility of the protected informati...

Directum RX Data Compromise

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

pmanager

Pmanager Demo Description Store and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse attacks. Why develop another password manager ? This project was initially born from my desire to learn Rust. I was tired of...

lazywarden

Secure, Automated, and Multi-Cloud Bitwarden Backup and Import System Lazywarden is a Python automation tool designed to Backup and Restore data from your vault, including Bitwarden attachments. It allows you to upload backups to multiple cloud storage services and receive notifications across...

gaia

Gaia: Global API Integrity Assessor Dependencies Install opam to build the tests API. Install git, python3, pip and .NET to build RESTler and Schemathesis. Install cargo to build Gaia. Install docker v26.0.1 and docker compose v2.26.1 to build Gaia with the ELK Stack optionnal if not. Install nod...

CVE-2024-37742

CVE-2024-37742: Clipboard Exploit in SEB ≤ 3.5.0 Windows This repository contains a proof-of-concept PoC for exploiting CVE-2024-37742, a vulnerability in Safe Exam Browser SEB ≤ 3.5.0 on Windows. The vulnerability allows an attacker to share clipboard data between the SEB kiosk mode and the...

meesho-android-improper-encryption-cve-2026-5682

🔐 Proof of Concept: Meesho Android App – Insecure Cryptographic Implementation AES-CBC without Integrity + Weak Key Derivation Author: Soyam Arya aka honestcorrupt Date of Discovery: March 2026 Affected App: Meesho Android App com.meesho.supply Status: Under Verification Category: Insufficient...

in-toto

in-toto in-toto provides a framework to protect the integrity of the software supply chain. It does so by verifying that each task in the chain is carried out as planned, by authorized personnel only, and that the product is not tampered with in transit. in-toto requires a project owner to create...

wazuh

Wazuh Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh solution consists of an endpoint security agent, deployed to the monitored...

EUVD-2026-102305

undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens...

CVE-2026-98845

A flaw was found in the Linux kernel's Trusted Platform Module TPM subsystem. This vulnerability allows an attacker to bypass TPM reset protections because the driver fails to disable the device when a null key integrity check fails. Consequently, the TPM continues serving requests and...

ved-ebpf

VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF VED Vault Exploit Defense-eBPF leverages eBPF extended Berkeley Packet Filter to implement runtime kernel security monitoring and exploit detection for Linux systems. Introduction eBPF is an in-kernel virtual machine that allows code...