attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

dismember

🔪 Dismember Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes or particular ones for common secrets and custom regular expressions, among other things. It will eventually become a full /proc toolkit. Using the grep command, it can match a regular...

CVE-2026-98003

In the Linux kernel, the following vulnerability has been resolved: i...

EUVD-2026-86656

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Do not reallocate GA log buffers on resume Commit c5e1a1eb9279 "iommu/amd: Simplify and Consolidate Virtual APIC AVIC Enablement" moved the GA log allocation from iommuinitpci to enableiommusvapic, which is called on...

CVE-2026-98003

The Linux kernel contains a vulnerability in the iommu/amd component where GA log buffers are reallocated during every resume operation. The root cause is that the iommu_init_ga_log() function unconditionally assigns pointers to iommu->ga_log and iommu->ga_log_tail, causing a memory leak of...

CVE-2026-93303

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'formdata' Rich Text Field via Draft Save/Resume in all versions up to, and including, 2.10.1 due to insufficient input sanitization and output escaping. Th...

CVE-2026-93303

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin is vulnerable to Stored DOM-Based Cross-Site Scripting (XSS) in versions up to and including 2.10.1 . The root cause is insufficient input sanitization and output escaping within the 'form_data' Rich Text Field during the Draft S...

CVE-2026-93303 HT Contact Form <= 2.10.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'form_data' Rich Text Field via Draft Save/Resume

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'formdata' Rich Text Field via Draft Save/Resume in all versions up to, and including, 2.10.1 due to insufficient input sanitization and output escaping. Th...

EUVD-2026-86545

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'formdata' Rich Text Field via Draft Save/Resume in all versions up to, and including, 2.10.1 due to insufficient input sanitization and output escaping. Th...

Minimalistic-offensive-security-tools

Minimalistic TCP and UDP port scanners port-scan-tcp.ps1 | port-scan-udp.ps1 A simple yet powerful TCP and UDP port scanners: Detection of open, closed and filtered ports both TCP and UDP Ability to scan a single host, network range or a list of hosts in a file Adjustable timeout values for...

CVE-2026-57179

A flaw was found in social-auth-core. The partial-pipeline resume mechanism processes partial authentication tokens without binding them to the originating browser session. A remote attacker can exploit this vulnerability by initiating an authentication flow to obtain a token and inducing a victi...

EUVD-2026-86319

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the partial-pipeline resume mechanism accepted partialtoken as a bearer credential without binding it to the browser session that created it. Applications using resumable partial pipeline steps could all...

CVE-2026-7071-access-Control

Unauthenticated Resume Exposure in CodeAstro Online Job Portal PHP MySQL Details Vendor: CodeAstro Product: Online Job Portal Project in PHP MySQL Version: 1.0 Vulnerability Type: Improper Access Control / Information Disclosure CWE: CWE-284, CWE-200, CWE-548 Affected Endpoint: /users/user-cvs/...

CVE-2019-15813

CVE-2019-15813 Este contenedor fue creado para explicar y demostrar cómo funciona CVE-2019-15813 Sentrifugo Sentrifugo V3.2 Sentrifugo es un Sistema de Gestión de Recursos Humanos Cómo instalar docker-compose up Credenciales por defecto para probar ----Super Administrador---- Nombre de usuario :...

LinusWare-Source-Code-Internal

Linusware 1.2 — Source Code & Engine Architecture Reconstructed, Reverse-Engineered & Documented by tekkenbugatti Target Platform: Linux x8664 / Luau / Roblox Runtime Engine Overview Linusware 1.2 is a native Linux x8664 runtime extension and execution engine for Roblox / Luau. This repository...

CVE-2026-90390: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: md/bitmap: resume array on backlogstore error path backlogstore suspends the array before checking whether a write-mostly device exists. If no such device exists, the error path only unlocks reconfigmutex and leaves the array...

CVE-2026-90406: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: handle runtime PM resume failure in core deinit Check the return value of pmruntimeresumeandget in iriscoredeinit. If runtime PM resume fails, skip hardware power-off operations but still perform software...

CVE-2026-89997

CVE-2026-89997 affects the Linux kernel device-mapper (dm) subsystem . A race condition occurs when the resume and remove ioctls are issued simultaneously: the device may be resumed after being suspended in __dm_destroy, causing the table to be destroyed without invoking the postsuspend method. S...

EUVD-2026-80605

In the Linux kernel, the following vulnerability has been resolved: dm: fix resume-vs-remove race If the user issues the resume ioctl and the remove ioctl at the same time, it may be possible that the device is resumed after it is suspended in dmdestroy. The result is that the table is destroyed...

CVE-2026-89997: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm: fix resume-vs-remove race If the user issues the resume ioctl and the remove ioctl at the same time, it may be possible that the device is resumed after it is suspended in dmdestroy. The result is that the table is destroyed...