RHEL 8 : abrt (RHSA-2026:48864)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:48864 advisory. The Automatic Bug Reporting Tool ABRT recognizes defects in applications and creates bug reports that help maintainers fix the defects. ABR...

Exploit for Relative Path Traversal in Fortinet Fortiweb

FortiWeb-cve-2025-64446-RCE-exploit Security research tool for...

CVE-2026-17817

An inappropriate implementation flaw was found in the ReportingAndNEL component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517461759...

CVE-2026-17817

Inappropriate implementation in ReportingAndNEL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

sysreptor v2026.61

An easy and customizable pentest reporting platform designed to simplify pentest report creation for security professionals. Playground • Ideas • Questions • Documentation • Features and Pricing • Installation • Buy SysReptor SysReptor is a fully customizable pentest reporting platform designed f...

claude-pentest

claude-pentest A local pentesting toolkit built for Claude Co...

SUSE SLES16 Security Update : alloy (SUSE-SU-2026:22946-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:22946-1 advisory. This update for alloy fixes the following issue: Update to version 1.17.1. Security issue fixed: - CVE-2026-10722: github.com/cilium/ebpf:...

Vulnera

Strix The open-source AI pentesting tool. Autonomous AI h...

BIT-KIBANA-2026-63142 Incomplete List of Disallowed Inputs in Kibana Leading to Server-Side Request Forgery

Incomplete List of Disallowed Inputs CWE-184 in Kibana can allow an authenticated attacker with access to the Reporting feature to bypass outbound request restrictions configured by an administrator, causing the reporting service to send requests to network destinations that should be denied by t...

BIT-ELK-2026-63142 Incomplete List of Disallowed Inputs in Kibana Leading to Server-Side Request Forgery

Incomplete List of Disallowed Inputs CWE-184 in Kibana can allow an authenticated attacker with access to the Reporting feature to bypass outbound request restrictions configured by an administrator, causing the reporting service to send requests to network destinations that should be denied by t...

Web-Server-Log-Parser-Threat-Detector

Log threat detector A lightweight Python security tool that pa...

django-DefectDojo v3.1.300

DefectDojo | ---|--- DefectDojo is a DevSecOps, ASPM application security posture management, and vulnerability management tool. DefectDojo orchestrates end-to-end security testing, vulnerability tracking, deduplication, remediation, and reporting. Demo Pro Edition: pro.demo.defectdojo.com OWASP...

CVE-2026-55973

A flaw was found in Unbound. When the 'dns-error-reporting: yes' option is enabled, a remote attacker can send a specially crafted DNS response containing a malformed EDNS Report-Channel option from a delegated zone they control. This can lead to a stack variable overwrite, causing the Unbound...

DeepFaith: Evidence-Grounded LLMs for Faithful Incident Reporting in Multi-Stage APT Defense

Advanced Persistent Threats APTs are difficult to detect and interpret due to their multi-stage and stealthy nature. While recent autonomous defense systems leverage provenance graphs and learning-based models for detection and mitigation, their outputs remain largely machine-oriented and difficu...

globaleaks-whistleblowing-software v5.0.99

GlobaLeaks is free and open-source whistleblowing software enabling anyone to easily set up and...

Exploit for Missing Authentication for Critical Function in Cpanel

cPanel-CVE-2026-41940-auth-bypass-exploit Critical authenticat...

Exploit for Missing Authentication for Critical Function in Cpanel

cPanel-CVE-2026-41940-auth-bypass-exploit Critical authenticat...

abva

Autonomous Binary Vulnerability Agent ABVA Educational po...

CVE-2026-64461

The CVE-2026-64461 entry concerns a Linux kernel PCIe Mediatek issue where IRQ domains are leaked when a port fails to enable. The fix refactors IRQ teardown into a per-port helper (mtk_pcie_irq_teardown_port()) and invokes it from the setup path when mtk_pcie_enable_port() fails. This ensures IR...

Linux Distros Unpatched Vulnerability : CVE-2026-55973

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream...