GHSA-FP3H-C4FM-7VVF vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-G9CG-PRRW-2R8Q vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-102993 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-102996 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2026-103000 vulnerabilities

Vulnerabilities for packages: open-webui...

training-application-security

Free Secure Coding & Application Security Training — Open Source SCORM Exercises 40 free, open-source secure coding exercises that teach web application security the way developers learn — by exploiting real vulnerabilities like SQL injection, cross-site scripting XSS, and broken access control,...

Exploits

Exploits Real world and CTFs exploit POCs. Real World CVE| Short description| Exploit ---|---|--- CVE-2017-5343| Wordpress SQL Injection| POC CVE-2018-8880| Unauthenticated Lutron Quantum Bacnet v2 network info exfiltration| POC CVE-2018-11629| Default and unremovable credentials in Homeworks QS...

snorby

Snorby github.com/Snorby/snorby github.com/Snorby/snorby/issues github.com/Snorby/snorby/wiki irc.freenode.net snorby Description Snorby is a ruby on rails web application for network security monitoring that interfaces with current popular intrusion detection systems Snort, Suricata and Sagan. T...

OVSwrap

OVSwrap CVE-2026-64531 Writeup !WARNING The PoC is provided solely to help defenders, maintainers, and authorized security teams validate patches, mitigations, detections, and exposure on systems they own or are explicitly authorized to test. You are solely responsible for ensuring that your use ...

CVE-2026-39600

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Mehul Gohil Aculect AI Companion aculect-ai-companion allows Phishing.This issue affects Aculect AI Companion: from n/a through 0.8.2...

SecureCivic

SecureCivic SecureCivic is a citizen-built, open source identity verification platform designed to enable the Social Security Administration SSA to adopt a modern, privacy-first verification system. It removes reliance on private data brokers and middlemen by enabling secure, real-time identity...

CVE-2026-68770 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-JHR6-GM9C-RQJV vulnerabilities

Vulnerabilities for packages: open-webui...

EUVD-2026-91663

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Mehul Gohil Aculect AI Companion aculect-ai-companion allows Phishing.This issue affects Aculect AI Companion: from n/a through 0.8.1...

CVE-2026-39600

The Mehul Gohil Aculect AI Companion WordPress plugin (versions

CVE-2026-39600 WordPress Aculect AI Companion plugin <= 0.8.2 - Unvalidated Redirects and Forwards vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Mehul Gohil Aculect AI Companion aculect-ai-companion allows Phishing.This issue affects Aculect AI Companion: from n/a through 0.8.2...

CVE-2026-39600 WordPress Aculect AI Companion plugin <= 0.8.2 - Unvalidated Redirects and Forwards vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Mehul Gohil Aculect AI Companion aculect-ai-companion allows Phishing.This issue affects Aculect AI Companion: from n/a through 0.8.2...

armadito-av

Armadito core Armadito is an open-source antivirus. This repository contains Armadito core library, daemon and service. Copyright C Teclib', 2015, 2016 Project home : http://www.teclib-edition.com/teclib-products/armadito-antivirus See Online documentation at :...

CVE-2026-104446 YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail Handler

YesWiki before 4.6.7 contains an authentication bypass in the contact mail AJAX handler that allows unauthenticated attackers to send email through the wiki's SMTP server. Attackers can POST an XMLHttpRequest to the mail handler without field or type parameters, supplying arbitrary recipient,...

CVE-2026-104446 YesWiki before 4.6.7 Unauthenticated Open Mail Relay via Contact Mail Handler

YesWiki before 4.6.7 contains an authentication bypass in the contact mail AJAX handler that allows unauthenticated attackers to send email through the wiki's SMTP server. Attackers can POST an XMLHttpRequest to the mail handler without field or type parameters, supplying arbitrary recipient,...