1205 matches found
progress-burp
Progress Tracker Burp Suite extension to track vulnerability assessment progress. Features Capturing items unique requests from the Burp Suite tools Proxy, Repeater, Target. Request unique key is defined as follows: target host, port, protocol, path and method. Items have following editable...
Discourse - Private User Field Disclosure via Directory Items IDOR
Discourse prior to 2025.12.2, 2026.1.1, and 2026.2.0 contains an IDOR vulnerability caused by lack of authorization checks on userfieldids parameter in DirectoryItemsControllerindex, letting any user retrieve private user field values, exploit requires no authentication. id: CVE-2026-26265 info:...
MacPersistenceChecker
MacPersistenceChecker See EVERYTHING that runs on your Mac. Understand WHY it runs. Decide WHAT stays. TL;DR MacPersistenceChecker shows you everything that runs automatically on your Mac , explains why it matters , and helps you decide what to keep or remove. → Find malware → Detect hidden...
peer-tweet
PeerTweet Decentralized feeds using BitTorrent's DHT. Idea from Arvid and The8472 "DHT RSS feeds" http://libtorrent.org/dhtrss.html Screenshot Quick links Download the latest binaries from the releases page. Find and share PeerTweet addresses from the addresses issues page. What is PeerTweet?...
cvelistV5
Note 2026-2-17 Adding Additional day of processing for date normalization to addreess potential inconsistencies New Date Normalization schedule: 2/16/26 - 2/28/26 Note 2026-2-10 Record Date NormalizationdeltaLog.json file change The deltaLog.json file normally retains a rolling 30 days worth of C...
CVE-2023-43878-RiteCMS-Stored-XSS---MainMenu
Rite CMS v3.0 Multiple Stored XSS Author: Sergio Description: Rite CMS 3.0 is affected by a Multiple Cross-Site scripting XSS stored vulnerability that allows attackers to execute arbitrary code via a crafted payload i to the Main Menu - Items in the Administration Menu. Attack Vectors:...
CVE-2026-55179
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's GET /items/:id/content route in packages/server/src/routes/index/items.ts loads item content from an attacker-supplied internal server ID without checking...
CVE-2026-55179
Joplin Server (the self-hosted component of the open-source note-taking app Joplin) contains an authorization flaw in its GET /items/:id/content route (defined in packages/server/src/routes/index/items.ts). Prior to version 3.7.2 , the route loads item content using an attacker-supplied internal ...
Occ
基于遮挡感知双层建模的违禁物品分割（ICME 2025） 官方 PyTorch 实现：基于遮挡感知双层建模的违禁物品分割。 论文链接：IEEE，Arxiv。 快速开始 依赖 代码已在 Linux + Pytorch 2.1.2 + CUDA 11.8 环境下成功测试。 如有必要，请安装 numpy2.0.0（我们使用 1.24.0）： root@kitploit: conda create -n occ python=3.10 conda activate occ pip install torch==2.1.2 torchvision==0.16.2 torchaudio==2.1.2...
CVE-Disclosures
CVE 披露 本仓库包含由 Sahil Arya 研究并报告的漏洞公告与安全披露。 CVE 列表 CVE-2025-70336 — PodcastGenerator 3.2.9 存储型 XSS（实时条目）...
CVE-2025-60378
CVE-2025-60378：RISE Ultimate Project Manager & CRM 中的存储型 HTML 注入漏洞 ⚠️ 安全公告 影响发票、消息传递和自动化通信的关键存储型 HTML 注入漏洞 -ff6600 📋 概述 在 RISE Ultimate Project Manager & CRM 中发现了一个关键的存储型 HTML 注入漏洞，该漏洞允许已认证用户将恶意 HTML 注入到发票行项目、客户备注和消息传递模块中。这些注入的内容会持久化存储在数据库中，并自动在面向客户的电子邮件、PDF...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: btrfs: Fixed the lockdep splat issue and potential deadlock that occurs after running delayed items. When running delayed items, we hold the mutex of the delayed node. Then, we attempt to modify a subvolume btree to insert, updat...
Astra Linux – Vulnerability in Zabbix
The cause of the vulnerability is improper validation of the “Name” field in the form input on the Graph page in the Items section...
EUVD-2026-77385
Joomla Extension - joomshaper.com - Missing Access Control in Menu Item Creation in SP Page Builder Free and Pro 4.0.0 - 6.9.0 - The add-to-menu routine invoked the commenus item model's save method directly. That model does not perform authorisation itself, because the relevant checks reside in...
EUVD-2026-76857
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authentication vulnerability in the plugin/TopMenu/menuItems.json.php endpoint that allows unauthenticated attackers to read inactive admin menu items by submitting a POST request with a menuId parameter...
JetBrains TeamCity 2021.2 - 2022.10 Improper Access Control (CVE-2022-44622)
The version of JetBrains TeamCity installed on the remote host is version 2021.2 up to but not including 2022.10. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity version between 2021.2 and 2022.10 access permissions for secure token health items were excessive CVE-2022-4462...
DEBIAN-CVE-2026-80918
In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confusion on long items When fetchitem is called by hidscanreport on an item with HIDITEMTAGLONG, it stores a pointer to the item data in item-data.longdata instead of storing a value directly i...
CVE-2026-80918 HID: core: fix number/pointer type confusion on long items
In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confusion on long items When fetchitem is called by hidscanreport on an item with HIDITEMTAGLONG, it stores a pointer to the item data in item-data.longdata instead of storing a value directly i...
PT-2026-89088
In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confusion on long items When fetch item is called by hid scan report on an item with HID ITEM TAG LONG, it stores a pointer to the item data in item-data.longdata instead of storing a value...
