EUVD-2026-81266

RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.1.0, the rmcp crate's StreamableHttpClientTransport in crates/rmcp/src/transport/common/reqwest/streamablehttpclient.rs builds its defaulthttpclient with reqwest's automatic redirect policy and applies caller-supplied values...

CVE-2026-64684

RMCP , the official Rust SDK for the Model Context Protocol, is affected in StreamableHttpClientTransport (prior to version 2.1.0). The custom_headers configured via StreamableHttpClientTransportConfig are applied to the reqwest client without being marked as sensitive. When a malicious or compro...

fwknop

fwknop - Autorización de Paquete Único Introducción fwknop implementa un esquema de autorización conocido como Autorización de Paquete Único SPA, por sus siglas en inglés para un fuerte ocultamiento de servicios. SPA requiere solo un único paquete que está cifrado, no reproducible y autenticado...

CVE-2026-92773 Trigger.dev before 4.6.0 GitHub App Installation Takeover

Trigger.dev before 4.6.0 fails to verify that an authenticated user controls a GitHub App installation before binding it to their organization. Attackers can claim another user's GitHub App installation by replaying state cookies and supplying sequential installation identifiers, gaining...

CVE-2026-92773

Trigger.dev before 4.6.0 contains a GitHub App installation takeover vulnerability in its GitHub integration service (gitHub.server.ts). The root cause is a failure to verify that an authenticated user actually controls a GitHub App installation before binding it to their organization. An attacke...

EUVD-2026-81037

Trigger.dev before 4.6.0 fails to verify that an authenticated user controls a GitHub App installation before binding it to their organization. Attackers can claim another user's GitHub App installation by replaying state cookies and supplying sequential installation identifiers, gaining...

ferret

Ferret The collaborative MITM proxy for security testers. Capture HTTP traffic, annotate requests with AI, run hunt sessions, replay traffic, and track findings from one interface. Quick start · Features · Screenshots · Configuration · Security · Contributing Quick start Install root@kitploit: gi...

ESP-RFID-Tool

ESP-RFID-Tool By Corey Harding Official website: www.rfid-tool.com April Brother is currently manufacturing this hardware and it can be purchased direct from China from their Official Store: https://blog.aprbrother.com/product/esp-rfid-tool AliExpress Store:...

tusk-cli

...

CVE-2026-73443

On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running can capture a legitimate authenticated VRRP advertisement and replay it indefinitely. Replayed advertisements can be...

fortinet-cve-2024-50562

Vulnerabilidad de Reutilización de Sesión SSL-VPN de Fortinet CVE-2024-50562 Escáner profesional, solo con permiso que comprueba si un FortiGate invalida las cookies de sesión después del cierre de sesión. Un hallazgo positivo confirma CVE-2024-50562 — una falla de Expiración de Sesión Insuficien...

fzy

fzy fozzylang Lenguaje de sistemas de propósito general y cadena de herramientas de producción con una superficie de lenguaje seguro incorporado, corrección verificable, ejecución determinista y depuración basada en repetición integrada. fzy incluye una CLI de producción, fz, tanto para flujos de...

CVE-2026-73443

Arista EOS is vulnerable to a VRRPv2 IP-AH authentication capture-replay attack (CWE-294). An unauthenticated attacker on the same layer 2 segment can replay a legitimate authenticated VRRP advertisement to advertise stale state, preventing a backup router from assuming the virtual gateway role a...

EUVD-2026-80996

On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running can capture a legitimate authenticated VRRP advertisement and replay it indefinitely. Replayed advertisements can be...

rep-chrome

rep+ rep+ es una extensión ligera para Chrome DevTools inspirada en Repeater de Burp Suite, ahora potenciada con IA. A menudo necesito modificar algunas solicitudes sin iniciar todo el stack de Burp, así que construí esta extensión para mantener mi flujo de trabajo rápido, enfocado e inteligente...

ams-failopen

Fail-Open Signing in AppleMediaServices Zero-Day Disclosure Summary This issue constitutes a live Zero-Day vulnerability and reflects a systemic design flaw in AppleMediaServices.framework, rather than a regression or version-specific bug. A critical fail-open flaw in Apple’s AppleMediaServices...

nrf24-playset

nRF24 Playset El nRF24 Playset es una colección de herramientas de software para dispositivos de entrada inalámbricos como teclados, ratones y presentadores basados en transceptores nRF24 de Nordic Semiconductor, p. ej. nRF24LE1 y nRF24LU1+. Todas las herramientas de software son compatibles con...

linux-fingerprint-r503

linux-fingerprint-r503 — fingerprint login for Linux using a Grow R503 + Arduino A from-parts USB fingerprint reader for Linux desktops. Total parts cost under $15. Drop-in replacement for upstream fprintd — PAM, KDE Settings, GNOME Settings, fprintd-verify, sudo with finger, screen-unlock with...

tcpreplay

Tcpreplay Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Windows under Cygwin for editing and replaying network traffic previously captured by tools like and . It classifies traffic as client or server, rewrites Layer 2/3/4 headers, and replays it back onto the network through...

Autorize

Autorize Autorize es una extensión de código abierto para Burp Suite que realiza detección automática de aplicación de autorización y autenticación. Está diseñada para ayudar a los ingenieros de seguridad de aplicaciones y probadores de penetración a identificar evasiones de autorización y...