cdf

CDF – crypto differential fuzzing CDF is a tool to automatically test the correctness and security of cryptographic software. CDF can detect implementation errors, compliance failures, side-channel leaks, and so on. CDF implements a combination of unit tests with "differential fuzzing", an approa...

CVE-2026-108583

zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because fetchembeddedmetadata fetches URLs without destination validation. Attackers can steer the agent via prompt injection into calling zoteroaddbyurl, causing...

tachyon

Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...

phpinfo-files-leaks

배지 라이선스 MIT 설치 1. Python3과 pip를 설치하세요 설치 안내 이것을 해결할 수 없다면, 이 도구를 사용하면 안 됩니다 pip로 설치 pip install phpinfo-file-leaks 아래 명령을 실행하여 확인 phpinfo-file-leaks -h 구성 2. 취약점 탐지에 대한 즉시 알림을 받기 위해 Telegram API를 통합했습니다. 텔레그램 알림 phpinfo-file-leaks --chatid 텔레그램을 열고 @CappricioSecuritiesToolsbot을를 검색한 다음 시작을 클릭하세요...

Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite...

SUSE-SU-2026:4606-1 Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: - Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infini...

LeakLooker

LeakLooker - Работает на Binaryedge.io Найти открытые базы данных/сервисы GUI https://www.offensiveosint.io/leaklooker-gui-discover-browse-and-monitor-database-source-code-leaks/ https://github.com/woj-ciech/LeakLooker-X Новая версия поддерживает: Elasticsearch CouchDB MongoDB Gitlab Rsync Jenkin...

appspec-yaml-leaks

배지 라이선스 MIT 설치 1. Python3과 pip를 설치하세요 여기 지침 이것조차 해결할 수 없다면, 이 도구를 사용하지 않는 것이 좋습니다 pip로 설치 pip install appspec-yaml-leaks 확인하려면 아래 명령을 실행하세요 appspec-yaml-leaks -h 설정 2. 취약점 탐지에 대한 즉시 알림을 받기 위해 Telegram API를 통합했습니다. Telegram 알림 appspec-yaml-leaks --chatid Telegram을 열고 @CappricioSecuritiesToolsbot을...

behat-config-leaks

배지 라이선스 MIT 설치 1. Python3 및 pip 설치 지침 보기 이것조차 해결할 수 없다면, 이 도구를 사용하지 않는 것이 좋습니다 pip로 설치 pip install behat-config-leaks 확인을 위해 아래 명령 실행 behat-config-leaks -h 설정 2. 취약점 탐지에 대한 즉시 알림을 받기 위해 Telegram API를 통합했습니다. Telegram 알림 behat-config-leaks --chatid Telegram을 열고 @CappricioSecuritiesToolsbot을를 검색한 다...

shell-history-leaks

배지 라이선스 MIT 설치 1. Python3 및 pip를 설치하세요 지침은 여기 이것을 해결할 수 없다면, 이것을 사용하면 안 됩니다 pip로 설치 pip install shell-history-leaks 확인을 위해 아래 명령을 실행하세요 shell-history-leaks -h 구성 2. 취약점 탐지에 대한 즉시 알림을 받기 위해 Telegram API를 통합했습니다. Telegram 알림 shell-history-leaks --chatid 텔레그램을 열고 @CappricioSecuritiesToolsbot을를 검색한 후...

Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 inpu...

Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 inpu...

system_prompts_leaks — Updated!

Thanks to Open Source Agent Analytics Understand your agents in production System Prompts Leaks The full verbatim system prompts behind the most popular chatbots in the world. Carefully curated and complete. Feel free to open up a PR or get in contact if you got a different result. The Washington...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60. Usage The default payloads are stored in payloads/ after a successful run, the ELF loader listens on port 9021. Stability notes Webkit may need several attempts, reload the page if the browser stalls. The kernel exploit may hang or panic...

vLLM 0.8.3 < 0.14.1 Information Disclosure (GHSA-4r2x-xpjr-7cvv)

The version of the vLLM Python package installed on the remote host is 0.8.3 prior to 0.14.1. It is, therefore, affected by an information disclosure vulnerability. When an invalid image is sent to the vLLM multimodal endpoint, PIL throws an error that vLLM returns to the client, leaking a heap...

Malicious code in css-jptvix-polyfill (npm)

Source: amazon-inspector cea61788c370593a2720461d06b74942933d38d30b449851a05541b5b7f189aa The package ships thunderboltRegistry.js, a Proxy-based shim that exports names mimicking internal Wix thunderbolt modules thunderboltRegistry, siteAssetsRegistry, editorRegistry, corvidRegistry,...

EUVD-2026-93213

In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing switchdev to prevent vlan deletion and error out in vlandel could cause multiple different issues - inconsistent state, memory leaks when flushing, NULL...

psbug-host

psbug-host Open the host: https://sliptripfalldown.github...

Authenticated Doesn’t Mean Safe: Why AI Agents Need Action-Level Security

AI agents can misuse legitimate access. Learn why action-level security, trusted policy enforcement and verified approvals are critical to stop data leaks...

CVE-2026-90364

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface processor initialization. During the setup process, if certain driver registration or CPU hotplug state configurations fail, a cpufreq notifier may remain improperly registered. This improper resource cleanup c...