subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

scout

Scout Scout is a URL fuzzer and spider for discovering undisclosed VHOSTS, files and directories on a web server. A full word list is included in the binary, meaning maximum portability and minimal configuration. Aim and fire! Usage Usage: scout command Available Commands: help Help about any...

node-ip-vex

node-ip-vex This sample project depends on the node-ip npm package which is vulnerable to CVE-2024-29415. However, because our project does not directly use the vulnerable function .isPublic, it is not exploitable to CVE-2024-29415. Run an analysis with Docker Scout I can package my project as a...

WooCommerce Help Scout - Arbitrary File Upload

WooCommerce Help Scout plugin before version 2.9.1 contains an unrestricted file upload vulnerability. The vulnerability allows unauthenticated users to upload arbitrary files to the server which by default will end up in wp-content/uploads/hstmp/ directory, potentially leading to remote code...

scout-browser (>=4.10.1, <=4.47.0) potentially affected by CVE-2026-106443 via weasyprint (0.42.3)

weasyprint PYPI version 0.42.3 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - scout-browser =4.10.1, =4.47.0 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

scout

Scout Scout es un fuzzer de URLs y un spider para descubrir VHOSTS, archivos y directorios no revelados en un servidor web. Una lista completa de palabras está incluida en el binario, lo que significa máxima portabilidad y mínima configuración. ¡Apunta y dispara! Usage Usage: scout command...

scout-browser (>=4.10.1, <=4.47.0) potentially affected by CVE-2026-106443 via weasyprint (0.42.3)

weasyprint PYPI version 0.42.3 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - scout-browser =4.10.1, =4.47.0 Source cves: CVE-2026-106443 Source advisory: OSV:GHSA-R543-Q48M-4C9J...

scout-browser (>=4.10.1, <=4.47.0) potentially affected by CVE-2026-55073 via weasyprint (0.42.3)

weasyprint PYPI version 0.42.3 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - scout-browser =4.10.1, =4.47.0 Source cves: CVE-2026-55073 Source advisory: OSV:PYSEC-2026-3940...

scout-browser (>=4.10.1, <=4.47.0) potentially affected by CVE-2026-55073 via weasyprint (0.42.3)

weasyprint PYPI version 0.42.3 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - scout-browser =4.10.1, =4.47.0 Source cves: CVE-2026-55073 Source advisory: OSV:GHSA-JF6Q-CHMF-3H3V...

CVE-2026-16731

OMICRON StationScout before version 3.05 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate...

EUVD-2026-53923

OMICRON StationScout before version 3.05 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate...

CVE-2026-53596

CVE-2026-53596 affects FreeScout (Laravel-based help desk). Before version 1.8.224, the file upload endpoint lacks rate limiting, allowing unauthenticated users to flood uploads, risking database overload and DoS for all users. The cited fix is in FreeScout v1.8.224. No exploitation details are p...

EUVD-2026-46094

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the public endpoint POST /user-setup/hash/invitesentat OpenController@userSetupSave selects the target account solely by its invitehash column, then overwrites that account's email and...

CVE-2026-53592 FreeScout vulnerable to prototype pollution in getQueryParam

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. A Prototype Pollution condition in the getQueryParam function /public/js/main.js and was addressed in version 1.8.139 by blocking URL query keys matching the pattern proto. However, this mitigation is incomplete: i...

CVE-2026-53592 FreeScout vulnerable to prototype pollution in getQueryParam

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. A Prototype Pollution condition in the getQueryParam function /public/js/main.js and was addressed in version 1.8.139 by blocking URL query keys matching the pattern proto. However, this mitigation is incomplete: i...

CVE-2026-53591

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.223, an unauthenticated attacker can inject messages into any existing support conversation by sending a single email to the helpdesk's public address with a crafted In-Reply-To header. No...

CVE-2026-53591 FreeScout Vulnerable to Unauthenticated Conversation Thread Injection via HMAC Length Bypass in FetchEmails

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.223, an unauthenticated attacker can inject messages into any existing support conversation by sending a single email to the helpdesk's public address with a crafted In-Reply-To header. No...

CVE-2026-48812

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.221, FreeScout's attachment download route skips token authentication for any attachment whose tokentype is set to 1 TOKENTYPELEGACY. Because this route is unauthenticated and the file path is...

CVE-2026-45295

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.219, the open tracking endpoint GET /thread/read/conversationid/threadid allows unauthenticated attackers to enumerate valid conversation and thread IDs, and modify thread state openedat...

scout-browser (>=4.10.1, <=4.47.0) potentially affected by CVE-2026-49452 via weasyprint (0.42.3)

weasyprint PYPI version 0.42.3 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - scout-browser =4.10.1, =4.47.0 Source cves: CVE-2026-49452 Source advisory: OSV:PYSEC-2026-3412...