CVE-2026-79319: Exposure of Sensitive Information to an Unauthorized Actor

Stencil core 4.43.5 is vulnerable to Incorrect Access Control...

CVE-2026-91867: Uncontrolled Resource Consumption

When Neethi fetches a remote policy reference, it only limits the time per read, not the whole transfer, so a server that trickles bytes slowly can keep the fetch alive indefinitely and tie up the calling thread denial of service. Users are recommended to upgrade to version 3.2.4, which fixes thi...

CVE-2026-94381: Improper Privilege Management

MISP has a security issue that can let a user gain more access than their API key is supposed to allow. A read-only API key should only let someone view information. However, after logging in with such a key, a specific MISP function could accidentally restore the user’s normal account permission...

exploit-priority-scanner

exploit-priority-scanner Vulnerability prioritization pipelin...

unruly

unruly Security scanner for backend-as-a-service databases...

CVE-2026-94084: Use After Free

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.responseheader with and without a transform...

vigolium v0.4.8

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...

CVE-2026-77875: Insecure Storage of Sensitive Information

The application protects access through its calculator-style vault passcode, but the stored data is not bound to that authentication boundary. A local actor who can access shared external storage, such as through an authorized non-root ADB shell or another local file-reading context with suitable...

CVE-2026-94055: Use After Free

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

grype v0.119.0

Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...

Vulnerability-Scanner

🛡️ Vulnerability Scanner - Defensive Cybersecurity Assessment...

Syntecxhub_Web-Vulnerability-Scanner

Syntecxhub Web Vulnerability Scanner A Python-based web vulne...

user-scanner v1.5.2

User Scanner A powerful 2-in-1 OSINT suite engineered for deep Email and Username Intelligence. With 2720+ total scan vectors —including 210+ email-integrated sites and 2510+ username platforms —you can map digital footprints, analyze target behavior, uncover interests, full metadata of usernames...

CVE-2026-84241: Improper Authorization

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization...

CVE-2026-84036: Improper Authorization

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...

CVE-2026-11722: Inconsistent Interpretation of HTTP Requests

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...

CVE-2026-1030: Generation of Error Message Containing Sensitive Information

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data...

CVE-2026-82892: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-88622: Improper Neutralization of Special Elements used in a Command

NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handleimportprivilege.php...

CVE-2025-36421: Cleartext Transmission of Sensitive Information

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques...