EUVD-2026-101497

The GUIX binary resource theme loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic. Because gxpageheaderdatasize is never validated against the glyph data a page actually contains, the two passes can read different page...

CVE-2026-103414

The GUIX binary resource (theme) loader is vulnerable to an out-of-bounds write (CWE-787) due to independent cursor arithmetic used in two separate passes while traversing resource files. Because gx_page_header_data_size is not validated against actual glyph data, the loader may derive inconsiste...

popeye

Popeye: Kubernetes Live Cluster Linter Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestra...

CVE-2026-68081

A flaw was found in the KVM Kernel-based Virtual Machine component of the Linux kernel, specifically within its nested virtualization nVMX feature. When a nested virtual machine VM attempts to enter an invalid guest state during VMLAUNCH or VMRESUME operations, the system fails to properly releas...

file-unpumper

file-unpumper file-unpumper is a powerful command-line utility designed to clean and analyze Portable Executable PE files. It provides a range of features to help developers and security professionals work with PE files more effectively. Features PE Header Fixing : file-unpumper can fix and align...

CVE-2026-102080

An Improper Resource Locking vulnerability in the clock synchronization daemon clksyncd of Juniper Networks Junos OS on MX Series allows a unauthenticated, logically adjacent attacker to cause a Denial-of-Service DoS. If a SyncE or PTP upstream node sends a malformed message to an MX device...

CVE-2026-101966

A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause persistent telemetry dial-out denial of service via a crafted analytics sensor resource submitted through gNMI listener...

CVE-2026-92154

The F´ (F Prime) framework, used for spaceflight and embedded software applications, contains a file size bounds bypass in Svc::FileUplink prior to version 4.2.0 . The vulnerability stems from an unsigned integer overflow during DATA packet validation , where the component uses wrapping U32 arith...

scour

Scour - AWS Detection Framework This tool is used to emulate attack patterns inside of the AWS Controlplane. Each attack is tagged with a specific UA for the blue team to signal off of. Status This is still an active work in progress. Lots of Bugs Not ready for production Where to file issues :...

CVE-2026-105659

The mtrudel bandit library (version 1.4.0 and onward) is vulnerable to an Uncontrolled Resource Consumption vulnerability. An unauthenticated remote attacker can pin HTTP/2 stream processes indefinitely by sending a trickle of small WINDOW_UPDATE frames. The root cause is that the Bandit.HTTP2.Co...

NodeSecurityShield

Node Security Shield Node Security Shield NSS is an Open source Runtime Application Self-Protection RASP tool which aims at bridging the gap for comprehensive NodeJS security by enabling Developer and Security Engineer to declare what resources an application can access. Inspired by the Log4Shell...

CVE-2025-20281-2-Cisco-ISE-RCE

CVE-2025-20281-2-Cisco-ISE-RCE Unauthenticated Python PoC for CVE-2025-20281 RCE against Cisco ISE API CVE-2025-20281 Unauthenticated PoC A minimal Python proof-of-concept that exploits the unauthenticated RCE in Cisco ISE’s ERS API CVE-2025-20281 by injecting arbitrary shell commands into the...

systeminformer

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

CVE-2026-102083 Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crash

An Improper Resource Locking vulnerability in the UTM processing of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. When UTM WebFiltering is configured and the WebFiltering cloud server is unreachable, sustained HTTP...

CVE-2026-102083

An Improper Resource Locking vulnerability in the UTM processing of Juniper Networks Junos OS on SRX Series devices allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS) . When WebFiltering is enabled and the cloud server is unreachable, sustained HTTP traffic load ...

CVE-2026-59951

The MCP Python SDK (PyPI: mcp) versions 1.8.0 through 1.30.0 and 2.2.0 are vulnerable to unbounded session accumulation within the StreamableHTTP transport . Specifically, stateful servers—including FastMCP , MCPServer , Server.streamable_http_app() , and StreamableHTTPSessionManager —fail to exp...

CVE-2026-110735

Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader core/io/resourceformatbinary.cpp, ResourceLoaderBinary::getunicodestring. A string length is read from the resource file into a signed 32-bit integer and compared against the destination buffer size with a...

CVE-2026-101966 Junos OS Evolved: A crafted analytics sensor resource causes telemetry dial-out daemon denial of service

A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause persistent telemetry dial-out denial of service via a crafted analytics sensor resource submitted through gNMI listener...

EUVD-2026-101425

A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause persistent telemetry dial-out denial of service via a crafted analytics sensor resource submitted through gNMI listener...

CVE-2026-102695

The OmniFaces utility library (versions before 1.14.3, 2.7.33, 3.14.23, 4.7.12, and 5.4.2) contains a vulnerability in CombinedResourceHandler because it accepts structurally valid deflated and base64 encoded combined resource IDs without verifying server issuance. This shared authenticity failur...