CVE-2026-81342

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during user registration before using it, allowing unauthenticated attackers to redirect users to arbitrary external URLs...

cipher387.github.io

Questa pagina contiene tutti i miei servizi e le mie raccolte utili agli appassionati di OSINT. https://cipher387.github.io/ Ti consiglio di prestare particolare attenzione a: https://cipher387.github.io/osintmap/ Grazie per avermi seguito! https://cybdetective.com...

PsyloDbg

PsyloDbg PsyloDbg è un debugger Windows open source in rapida crescita e facile da usare, interamente scritto in Delphi. L'obiettivo principale di questo progetto è offrire agli analisti di malware uno strumento in più per ridurre i tempi di risposta durante il processo di analisi. Il progetto è...

EUVD-2026-68064

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during user registration before using it, allowing unauthenticated attackers to redirect users to arbitrary external URLs...

CVE-2026-81342

MasterStudy LMS WordPress Plugin versions prior to 3.7.43 are affected by an unauthenticated open redirect . The plugin fails to validate a redirect parameter supplied during user registration before using it, allowing an attacker to redirect users to arbitrary external URLs. The vulnerability re...

CVE-2026-81342 MasterStudy LMS < 3.7.43 - Unauthenticated Open Redirect

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during user registration before using it, allowing unauthenticated attackers to redirect users to arbitrary external URLs...

mi-x

Am I Exploitable? Autor: 2022 - Now, Rezilion Beschreibung: Schwachstellenvalidierung Entwicklung: Januar 2022 - Now Dokumentation: Siehe Website, README Einführung Beschreibung ‘Am I Exploitable?’ ist ein python Open-Source-Projekt, das dem Bedarf gerecht wird, zu validieren, ob Ihr System für...

Endurance-Wiper

Endurance-Wiper Beta – Open Source Ein kleiner Wiper-Malware, geschrieben in C mit dem .NET-Framework. Wenn du von Twitter oder einer anderen Quelle kommst, kannst du deutlich erkennen, dass dies aktiv entwickelt wird. Du kannst die Updates hier einsehen...

GCTI

GCTI Dieses Repository enthält die Open-Source-Erkennungssignaturen von GCTI...

TJ-OSINT-Notebook

TJ-OSINT-Notebook Erstveröffentlichung 18. November 2022 Hauptzweck: Dieses OSINT-Notizbuch bietet einen Überblick über die Werkzeuge, Techniken und Ressourcen, die ich in verschiedenen Situationen für Aufklärungs- und OSINT-Operationen verwende. Dieses Notizbuch hat mir in vielen Situationen...

certificate-ripper

Certificate Ripper 🔐...

EUVD-2026-67962

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers to gain unauthorized root access by placing an unsigned empty file named igel.conf on a partition. Attackers can exploit...

CVE-2026-55891

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, Request::getRequestUri in lib/Request.php passes $SERVER'REQUESTURI' through FILTERSANITIZEURL, which does not remove quotation marks, angle brackets, or apostrophes, and Controller::init stores t...

abusech

abusech ThreatFox è una piattaforma aperta di condivisione di threat intelligence, che consente a chiunque di condividere indicatori di compromissione IOC. Questo repository fornisce uno strumento da riga di comando CLI per interagire con l'API di ThreatFox. Installazione ed esecuzione Brew...

marshalsec

Java Unmarshaller Security - Превращение ваших данных в выполнение кода Если вы попали сюда из-за Log4Shell/CVE-2021-44228, возможно, вам стоит прочитать о векторах эксплуатации и затронутых версиях Java runtime: https://mbechler.github.io/2021/12/10/PSALog4ShellJNDIInjection/ Статья Прошло более...

CVE-2026-82274

Twenty through 2.35.0 contains an open redirect vulnerability in the OAuthPropagatorController.propagateOAuthCallback endpoint that treats the state query parameter as a redirect URL. Attackers can craft malicious requests to redirect users to arbitrary hosts while forwarding OAuth authorization...

CVE-2026-55834

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.6.0 until 2.9.0, frontend/src/routes/authorize/+page.ts reads the redirecturi query parameter and frontend/src/routes/authorize/+page.svelte uses the raw callbackURL in redirectWithError when...

blind-ssrf-chains

Einführung Was ist Server Side Request Forgery SSRF? Server Side Request Forgery tritt auf, wenn du einen Server dazu bringen kannst, in deinem Namen beliebige Anfragen auszuführen. Da die Anfragen vom Server gestellt werden, ist es möglicherweise möglich, auf interne Ressourcen zuzugreifen, je...

training-application-security

Treinamento Gratuito de Codificação Segura e Segurança de Aplicações — Exercícios SCORM de Código Aberto 40 exercícios gratuitos de codificação segura em código aberto que ensinam segurança de aplicações web da forma como os desenvolvedores aprendem — explorando vulnerabilidades reais como injeçã...

RedTeam_toolkit

RedTeam Toolkit ملاحظة: يجب استخدام هذا المشروع فقط في الأنشطة القانونية. Red Team Toolkit هي تطبيق ويب هجومي مفتوح المصدر مبني على Django يحتوي على أدوات هجومية مفيدة تستخدم في اختبار الاختراق Red Teaming معًا لمساعدة متخصصي الأمن في تحديد الثغرات. تم دمج مشاريع الأمن السيبراني مفتوحة المصدر...