electronegativity

Electronegativity ⚠️ This project has been archived ⚠️ Use ElectroNG instead! What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations,...

EUVD-2026-119010

Missing Authorization vulnerability in WP ManageNinja LLC Fluent Booking fluent-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Booking: from n/a through 2.5.0...

Blackcat-cms-v1.2-xss-POC-by-Provensec-llc

Blackcat-cms-v1.2-xss-POC-by-Provensec-llc BlackCat-CMS-Bundle-v1.2 Cross Site ScriptingXSS Assigned CVE Number: CVE-2017-9609...

Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC

Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC Zurmo-Stable-3.1.1 Cross Site Scripting XSS Assigned CVE Number: CVE-2017-7188...

CLEANSTART-2023-EE67042 LLC/SNAP parser in tcpdump before 4

Security vulnerability affects the tcpdump package. The LLC/SNAP parser in tcpdump before 4...

Fourteen_Endpoints

The Middlemen Shell Companies Inside Apple's Privacy Relay An anonymous Delaware LLC publishes a Bible prayer app, a daily journal, and a caller ID tool on the App Store. That entity operates encrypted relay infrastructure inside Apple's privacy network. That relay terminates at Taiwan Mobile Co....

cve-disclosures

CVE Disclosures Coordinated vulnerability disclosures and CVE references published by Anindya Sankar Roy GitHub: @fr3akhacks. Each entry below links to a public advisory containing the affected product, affected/fixed versions, CVE ID, prose description, vulnerability type, root cause, and impact...

CVE-2026-62056

Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent CRM: from n/a through 3.2.6...

EUVD-2026-114278

Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent CRM: from n/a through 3.2.6...

CVE-2026-62141

Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent CRM: from n/a through 3.2.6...

EUVD-2026-114129

Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent CRM: from n/a through 3.2.6...

CVE-2026-62056: WP ManageNinja LLC Fluent CRM: Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly…

Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent CRM: from n/a through 3.2.6...

PT-2026-133668

Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent CRM: from n/a through 3.2.6...

CVE-2026-62141: WP ManageNinja LLC Fluent CRM: Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly…

Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent CRM: from n/a through 3.2.6...

VulnCheck KEV: CVE-2026-28177

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Code Atlantic LLC Popup Maker popup-maker allows DOM-Based XSS.This issue affects Popup Maker: from n/a through 1.23.0...

fake-useragent

fake-useragent Up-to-date simple useragent faker with real world database. Features Data is pre-downloaded & post-processed from Intoli LLC and the data is part of the package itself The data consists of a wide range of browser agents and various browsers Retrieves user-agent strings both of type...

SUSE CVE-2026-98555

In the Linux kernel, the following vulnerability has been resolved: llc: fix skb UAF and leaks on llcmachdrinit failure In llcconnacresendixxxxset0orsendrr, if llcmachdrinit fails, kfreeskbskb is called instead of kfreeskbnskb. This leaks the newly allocated nskb, reads from the freed skb via...

CVE-2026-98555

A flaw was found in the Linux kernel's Logical Link Control LLC subsystem. When an error occurs during network packet header initialization, the kernel mistakenly frees the incorrect memory buffer, resulting in a use-after-free condition, a double-free, and memory leaks. An attacker could exploit...

Linux Distros Unpatched Vulnerability : CVE-2026-98526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llc: reserve device headroom for allocated frames llcallocframe reserves link-layer headroom using the device type. This is insufficient for stacked Ethernet...

Linux Distros Unpatched Vulnerability : CVE-2026-98555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llc: fix skb UAF and leaks on llcmachdrinit failure In llcconnacresendixxxxset0orsendrr, if llcmachdrinit fails, kfreeskbskb is called instead of kfreeskbnskb...