seekr

A multi-purpose toolkit for gathering and managing OSINT-Data with a neat web-interface. Introduction Seekr is a multi-purpose toolkit for gathering and managing OSINT-data with a sleek web interface. Our desktop view enables you to have all of your favourite OSINT tools integrated in one. The...

confused

Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...

pylibemu

Pylibemu |version badge| |downloads badge| .. |version badge| image:: https://img.shields.io/pypi/v/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ .. |downloads badge| image:: https://img.shields.io/pypi/dm/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ Pylibemu is a...

mbadanoiu

Bienvenido al Retiro de Fin de Semana de Matei "Mal" Badanoiu Este GitHub se utiliza para publicar mis CVEs e investigación de seguridad durante mi tiempo libre/fines de semana. Todos los materiales presentes en este perfil de GitHub están destinados a la investigación de seguridad y al hacking...

CVE-2026-87929

creationtimestamp| type| source ---|---|--- 2026-09-09 23:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4nbxmirj25 2026-09-14 15:37:19+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mvigutfurb2p...

WordPress Podlove Podcast Publisher plugin <= 4.5.1 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by an unknown individual in WordPress Plugin Podlove Podcast Publisher versions = 4.5.1...

CVE-2026-37006

A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code execution via malicious Model Context Protocol configurations...

EUVD-2026-67270

A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code execution via malicious Model Context Protocol configurations...

CVE-2026-37006

A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code execution via malicious Model Context Protocol configurations...

CVE-2026-37006

A vulnerability exists in the WebSocket endpoint of gpt-researcher version v0.14.7 and before . This flaw allows an unauthenticated remote attacker to achieve code execution by leveraging malicious Model Context Protocol configurations . The provided documents do not specify a remediation, patch ...

PT-2026-82663

A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code execution via malicious Model Context Protocol configurations...

CVE-2026-37006: Improper Authentication

A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code execution via malicious Model Context Protocol configurations...

CVE-2026-37006

A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code execution via malicious Model Context Protocol configurations...

WordPress TranslatePress - Translate Multilingual sites with AI Translation plugin <= 3.2.5 - Unauthenticated Stored Cross-Site Scripting vulnerability

WordPress TranslatePress - Translate Multilingual sites with AI Translation plugin = 3.2.5 - Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Pham Duc Anh in WordPress Plugin TranslatePress versions = 3.2.5...

WordPress SM Page Duplicator plugin <= 1.0.0 - Editor+ SQL Injection via Page Duplication vulnerability

Editor+ SQL Injection via Page Duplication vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin sm page duplicator versions = 1.0.0...

CVE-2026-60975

creationtimestamp| type| source ---|---|--- 2026-08-19 13:35:05+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwcyy4y2h 2026-08-19 17:47:50+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-54543

creationtimestamp| type| source ---|---|--- 2026-08-19 12:33:17+00:00| seen| https://gist.github.com/alon710/ac73b2e180b3b5bc212b2c31ca85b161...

MINI-GQ8X-XC7H-6XXJ

Bulletin has no description...

CVE-2026-70329

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:14+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:10+00:00| seen|...

WordPress JetElements For Elementor plugin <= 2.9.1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin JetElements For Elementor versions = 2.9.1.1...