[SECURITY] [DLA 4813-1] open-iscsi security update

Debian LTS Advisory DLA-4813-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert October 02, 2026 https://wiki.debian.org/LTS Package : open-iscsi Version : 2.1.8-1+deb12u1 CVE ID : CVE-2026-18724 CVE-2026-18725 CVE-2026-18726 CVE-2026-18727 CVE-2026-18728...

yararules

yararules Yara rulez; reglas también. Este es un repositorio de mis propias reglas YARA agrupadas junto con reglas YARA disponibles públicamente, recopiladas de fuentes abiertas, pulidas y probadas por mí. Contacto: craiu at protonmail.ch...

CVE-2026-97318

The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly validate a giveaway's parent page URL before saving it and later redirecting visitors to it, allowing unauthenticated attackers to make the site's own giveaway confirmation and referral links redirect...

lightwave

Qué es Lightwave Project Lightwave es un proyecto de código abierto que comprende servicios de gestión de identidad y acceso de nivel empresarial, dirigidos a los desafíos críticos de seguridad, gobierno y cumplimiento para aplicaciones nativas de la nube dentro de la empresa. Mediante la...

WordPress Giveaways and Contests by RafflePress plugin < 1.12.27 - Unauthenticated Stored Open Redirect vulnerability

Unauthenticated Stored Open Redirect vulnerability discovered by Dick Snel in WordPress Plugin Giveaways and Contests by RafflePress versions 1.12.27...

CVE-2026-97318 Giveaways and Contests by RafflePress < 1.12.27 - Unauthenticated Stored Open Redirect via 'parent_url' Parameter

The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly validate a giveaway's parent page URL before saving it and later redirecting visitors to it, allowing unauthenticated attackers to make the site's own giveaway confirmation and referral links redirect...

EUVD-2026-91197

The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly validate a giveaway's parent page URL before saving it and later redirecting visitors to it, allowing unauthenticated attackers to make the site's own giveaway confirmation and referral links redirect...

CVE-2026-97318 Giveaways and Contests by RafflePress < 1.12.27 - Unauthenticated Stored Open Redirect via 'parent_url' Parameter

The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly validate a giveaway's parent page URL before saving it and later redirecting visitors to it, allowing unauthenticated attackers to make the site's own giveaway confirmation and referral links redirect...

CVE-2026-20660

CVE-2026-20660 Paquete PoC Esta carpeta incluye una prueba de concepto independiente para: CVE-2026-20660 CFNetwork NSGZipDecoder traversal de ruta mediante FNAME de gzip Impacto en Safari de macOS vulnerable con apertura automática habilitada 1. Estructura de directorios server.py: servidor PoC...

security-bulletins

Boletines de seguridad A continuación se muestran las notificaciones de eventos de seguridad y privacidad en las aplicaciones de código abierto de Netflix. Fecha| Tipo| Tema ---|---|--- Septeember 27, 2024| Alta| Path Traversal en E2Nest August 1, 2024| Crítica| Server-Side Template Injection en...

SOARCA

使用CACAO安全剧本自动化威胁与事件响应工作流程 背景与上下文...

Sourcetrail

Sourcetrail 重要提示： 该项目已于2021年底被原始作者和维护者归档。如果您想了解更多关于这一决定的信息，请阅读我们的博客。 Sourcetrail 是一款免费开源的跨平台源代码浏览器，帮助您快速熟悉陌生的源代码。 Windows： Linux： 链接 下载 快速入门指南 文档 更新日志 Sourcetrail 具备以下特点： 免费 离线工作 支持 Windows、macOS 和 Linux 支持 C、C++、Java 和 Python 提供 SDK（SourcetrailDB）用于编写自定义语言扩展 Sourcetrail 在 Patreon 上...

VulnWhisperer

从您的漏洞扫描中创建可操作的数据 VulnWhisperer 是一个漏洞管理工具和报告聚合器。VulnWhisperer 将从不同的漏洞扫描器中拉取所有报告，并为每个报告创建一个具有唯一文件名的文件，随后将这些数据用于同步到 Jira 并馈送到 Logstash。Jira 会利用扫描器提供的数据执行完整的闭环同步，而 Logstash 则对报告内的所有信息进行索引和标记（请参见 /resources/elk6/pipeline/ 下的 logstash 文件）。数据随后被传输到 ElasticSearch 进行索引，最终在 Kibana 中以可视化且可搜索的格式呈现，并带有预定义的仪表板...

securitybot

Securitybot Distributed alerting for the masses! Securitybot is an open-source implementation of a distributed alerting chat bot, as described in Ryan Huber's blog post. Distributed alerting improves the monitoring efficiency of your security team and can help you catch security incidents faster...

portSpider

██████╗ ██████╗ ██████╗ ████████╗███████╗██████╗ ██╗██████╗ ███████╗██████╗ ██╔══██╗██╔═══██╗██╔══██╗╚══██╔══╝██╔════╝██╔══██╗██║██╔══██╗██╔════╝██╔══██╗ ██████╔╝██║ ██║██████╔╝ ██║ ███████╗██████╔╝██║██║ ██║█████╗ ██████╔╝ ██╔═══╝ ██║ ██║██╔══██╗ ██║ ╚════██║██╔═══╝ ██║██║ ██║██╔══╝ ██╔══██╗ ██║...

rekall

Rekall discontinuation This project is no longer maintained. In December 2011, a new branch within the Volatility project was created to explore how to make the code base more modular, improve performance, and increase usability. This branch was later forked to become Rekall. The modularity allow...

doork

doork 描述 doork 是一款开源被动漏洞审计工具，它基于 dorks 自动化在 Google 上搜索特定网站信息的过程。 doork 可以从 ghdb 更新自己的数据库，并利用它来发现漏洞，而无需直接接触目标端点。 你可以提供自定义的单词列表，并将输出保存到任何位置。 安装 你可以通过克隆 Git 仓库来下载 doork： git clone https://github.com/AeonDave/doork doork doork 可在任何平台上与 Python 版本 2.6.x 和 2.7.x 配合使用。 你还需要安装 pip install beautifulsoup4 p...

SocialFishMobile

SocialFish Mobile 本应用是一个用于远程控制 SocialFish 的开源项目，不能独立运行。 如何构建 准备你的 Flutter 环境 前往 https://flutter.dev/docs/get-started/install 配置完成后继续执行 克隆此仓库 $ git clone https://github.com/UndeadSec/SocialFishMobile.git socialfish 进入仓库目录 $ cd socialfish 检查问题 $ flutter doctor 获取依赖 $ flutter packages get 构建 APK $...

vbscan

OWASP VBScan OWASP VBScan（全称 VBulletin Vulnerability Scanner）是一个基于 Perl 编程语言的开源项目，用于检测 VBulletin CMS 漏洞并对其进行分析。 为什么选择 OWASP VBScan？ 如果你想对 vBulletin 论坛进行渗透测试，OWASP VBScan 绝对是你最好的选择！ 该项目比以前更快，并且更新了最新的 VBulletin 漏洞。 项目负责人 : Mohammad Reza Espargham rezadotesparghamatowaspdotorg Github :...

pafish

Pafish Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do. The project is free and open source; the code of all the anti-analysis techniques is publicly available. Pafish executables for...