EUVD-2026-107380

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

EUVD-2026-107377

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

EUVD-2026-107372

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability

A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary commands as the Snort 3 process user. This vulnerability is due to a lack of authentication when a local user connects to the...

Cisco Open Source Snort3 numerical error vulnerability

Multiple versions of Cisco Open Source Snort3, Cisco Secure Firewall Threat Defense FTD software, and Cisco UTD SNORT IPS Engine software contain a numerical error vulnerability. This vulnerability stems from incomplete error checks during Snort 3’s parsing of GRE packet data. It could allow...

Cisco Cyber Vision Resource Management Error Vulnerability

Cisco Cyber Vision 3.0.0 version to 5.8.1 version, Cisco Open Source Snort3 3.1.2.0 version to 3.12.2.0 version, Cisco Secure Firewall Threat Defense FTD Software 7.0.0 version to 10.0.0 version, and Cisco UTD SNORT IPS Engine Software 17.12.1a version to 26.1.2 version contain a resource...

Cisco Open Source Snort3 Resource Management Error Vulnerability

Cisco Open Source Snort3 has a resource management vulnerability. This vulnerability stems from logical flaws in the codec used by the Snort 3 detection engine when processing GTP extension headers. Unauthenticated remote attackers can send specially crafted fragmented UDP packets, causing the...

Cisco Open Source Snort3 Resource Management Error Vulnerability

Several affected versions of Cisco Open Source Snort3, Cisco Secure Firewall Threat Defense FTD software, and Cisco UTD SNORT IPS Engine software have a resource management vulnerability. This vulnerability stems from incomplete error checking during Snort 3’s parsing of UDP NetFlow protocol...

Cisco Open Source Snort3 Resource Management Error Vulnerability

Cisco Open Source Snort3 and Cisco Secure Firewall Threat Defense FTD software have a resource management vulnerability. This vulnerability stems from incomplete error checks during Snort 3’s processing of files, which may lead to unreleased memory. A remote attacker without authentication can...

Cisco Open Source Snort3 buffer error vulnerability

Cisco Open Source Snort3 contains a buffer error vulnerability. This vulnerability arises from incomplete validation during Snort 3’s parsing of Teredo packets; it may allow unauthenticated remote attackers to send specially crafted Teredo packets to target devices. As a result, the Snort 3...

Cisco Open Source Snort3 Authorization Issue Vulnerability

The Cisco Open Source Snort3 has an authorization issue vulnerability. This vulnerability stems from the lack of authentication in the control channel socket implementation. It may allow authenticated, low-privilege local attackers to execute arbitrary commands as the Snort 3 process user, and to...

spyder-osint

Spyder🕷 Spyder is a universal open-source intelligence OSINT research tool that performs searches using large global databases. Features 1. Phone number information 2. IP address information 3. SocialsFacebook, Instagram, Telegram, Twitter information 4. Email information & Email bomber 5. Person...

Open Source Social Network: Input validation error vulnerability

The Open Source Social Network versions 9.0, 9.1, 9.2, 9.3, 9.4, 9.5, 9.6, 9.7, 9.8, 9.9, 9.10, 9.11, 10.0, and 10.1 have security vulnerabilities. These vulnerabilities stem from improper handling of parameters such as host, port, username, password, type, and status in the...

Online Store Template Code Execution

The vulnerability of programming platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to the lack of measures taken to neutralize special elements in the template creation mechanism. Exploiting this vulnerability can...

Magento Open Source 2.4.9-2026-sep Block Directive Injection

Magento Open Source version 2.4.9-2026-sep and earlier contains a template directive-injection vulnerability. This lab provides proof of concept A/B validation for an unauthenticated block-directive primitive and bounded file side effect, with a separately labeled synthetic fixed-command gadget...

Mzanzi Open Source Solutions Schroedinger buffer error vulnerability

Mzanzi Open Source Solutions’ schroedinger 1.0.11 and earlier versions contain a buffer error vulnerability. This vulnerability arises from the lack of validation for wavelet filter indices or transformation depth values, which may lead to out-of-bounds reading of static quantization tables...

SUSE CVE-2026-15176

A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $requestfilename variable. Alternatively, the same result could be achieved when the $requestfilename variable...

KisMac2

PLEASE NOTE, THIS PROJECT IS NO LONGER BEING MAINTAINED KisMac2 KisMAC is a free, open source wireless stumbling and security tool for Mac OS X. Issue tracking: Going forward, please use the tracker here on GitHub. The Trac for the original KisMac is at http://trac.kismac-ng.org Whats new: Mac OS...

Duc Minh, Nguyen Arkon – The Open-Source Enterprise AI Knowledge Hub & MCP Server Authorization Vulnerability

Duc Minh, Nguyen Arkon – The Open-Source Enterprise AI Knowledge Hub & MCP Server 0.9.2 and earlier versions have an authorization issue. This vulnerability stems from the lack of an authorization check for the GET /api/wiki/graph interface. Certified employees can access wiki metadata from other...

Cassio Santos Whaticket Open Source: Permissions, licensing, and access control issues

Cassio Santos Whaticket Open Source versions from cf04795 onwards have vulnerabilities related to permission and access control. These vulnerabilities stem from authentication bypasses. Unauthenticated attackers can register as administrators by omitting the profile field or setting it to ‘admin’...