yara

!IMPORTANT This project is in maintenance mode. More info: https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARA in a nutshell YARA is a tool aimed at but not limited to helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malwar...

starboard

Starboard is joining Trivy. We've announced our plans to discontinue Starboard and merge it into Trivy. Starboard CLI has been reintroduced as trivy kubernetes command and starboard-operator with a focus on trivy capabilities is available as Trivy-Operator. We will not be accepting new...

CVE-2026-66092

In openEQUELLA before 2026.2, the pre-login notice is stored as HTML and rendered on the legacy logon page without encoding or sanitisation. A user holding the EDITSYSTEMSETTINGS permission can set a notice containing an arbitrary script PUT /api/preloginnotice, resulting in stored cross-site...

OpenMetaData - SpEL Injection in PUT /api/v1/policies

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. CompiledRule::validateExpression is also called from PolicyRepository.prepare. prepare is called from...

CVE-2026-66092 Stored XSS in pre-login notice via reachable legacy logon route

In openEQUELLA before 2026.2, the pre-login notice is stored as HTML and rendered on the legacy logon page without encoding or sanitisation. A user holding the EDITSYSTEMSETTINGS permission can set a notice containing an arbitrary script PUT /api/preloginnotice, resulting in stored cross-site...

EUVD-2026-112568

In openEQUELLA before 2026.2, the pre-login notice is stored as HTML and rendered on the legacy logon page without encoding or sanitisation. A user holding the EDITSYSTEMSETTINGS permission can set a notice containing an arbitrary script PUT /api/preloginnotice, resulting in stored cross-site...

CVE-2026-66092

In openEQUELLA versions before 2026.2 , a stored cross-site scripting (XSS) vulnerability exists because the pre-login notice is stored as HTML and rendered on the legacy logon page without proper encoding or sanitization. An attacker with the EDIT_SYSTEM_SETTINGS permission can use the PUT /api/...

CVE-2026-16889 Stored XSS via Pre-Login Notice Image Upload Serves Attacker HTML from Application Origin

In openEQUELLA before 2026.1, the pre-login notice image upload endpoint PUT /api/preloginnotice/image/name does not validate the type of uploaded files and serves them with a Content-Type derived from the supplied filename. A user holding the EDITSYSTEMSETTINGS permission can upload an HTML file...

CVE-2026-16889

In openEQUELLA versions before 2026.1 , the pre-login notice image upload endpoint (PUT /api/preloginnotice/image/{name} ) fails to validate uploaded file types. This allows a user with the EDIT_SYSTEM_SETTINGS permission to upload an HTML file that the application serves with a text/html Content...

zeekjs-notice-telegram

Zeek Notice Telegram ZeekJS edition This package re-implements zeek-notice-telegram in TypeScript ZeekJS to work around unreliability in ActiveHTTP. It borrows both Yacin's package above and the ZeekJS reimplementation of that package's original inspiration zeek-notice-slack which is now...

owt

Currently unstable will be updated eventually. Offensive Wifi Toolkit owt created by Brennan Mccown clu3bot This tool compiles some necessary tools for wifi auditing in a unix bash script with a user friendly interface. The goal of owt is to have the smallest file size possible while still...

CVE-2026-0745

⚠️ Security Research & Legal Disclaimer - CVE-2026-0745 📌 Purpose of This Repository This repository is provided strictly for educational, academic, and authorized cybersecurity research purposes only. It is intended to support understanding of: Security vulnerabilities and exploitation concepts i...

zeek-long-connections

Long Connections Zeek normally logs connections at the end of the connection, but this can cause trouble for incident responders in the case of very long lived connections that end up being unknown to defenders until too late. This package provides a new log named connlong which will log...

PT-2026-127854

The Avada Fusion Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tab index, empty notice' parameter in all versions up to, and including, 3.16.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2019-19231

CVE-2019-19231 https://techdocs.broadcom.com/us/product-content/recommended-reading/security-notices/CA20191218-01-security-notice-for-ca-client-automation-agent-for-windows.html...

CS_Lab4_Stored-XSS

Campus Notice Board — Stored XSS Lab Course: Cyber Securi...

proxmark3

Deprecated Iceman fork THIS FORK HAS BEEN DEPRECATED, USE RRG/ICEMAN REPO INSTEAD! Ref: Proxmark3 RDV4.0 github repository The RRG/Iceman repo is based upon this repo. Much development has been put into the RRG repo to bring support to all new hardware features. The repo fully support all of them...

advisories

This is deprecated. All advisories can be found on https://www.rcesecurity.com/advisories/...

CVE-2026-113501

The LiteSpeed Cache WordPress plugin before 7.9.2 does not perform a capability check on its admin-notice dismissal handler, and the nonce it relies on is not bound to the specific notice being dismissed, so on sites in certain configurations a low-privileged authenticated user Subscriber can...

CVE-2026-113501 LiteSpeed Cache < 7.9.2 - Subscriber+ Pinned Administrative Notice Dismissal

The LiteSpeed Cache WordPress plugin before 7.9.2 does not perform a capability check on its admin-notice dismissal handler, and the nonce it relies on is not bound to the specific notice being dismissed, so on sites in certain configurations a low-privileged authenticated user Subscriber can...