natlas

Natlas Summary You've got a lot of maps and they are getting pretty unruly. What do you do? You put them in a book and call it an atlas. This is like that, except it's a website and it's a collection of nmaps. Natlas' objective is to make it easy to perform continuous scanning and review collecte...

bulwark

Инструмент управления активами и уязвимостями организации с интеграцией Jira, предназначенный для создания отчетов по безопасности приложений. Возможности Управление уязвимостями для нескольких клиентов Генерация отчетов по безопасности Интеграция с Jira Авторизация на основе ролей команд API-клю...

RapidWebRecon

Генератор PDF-отчётов на основе Nuclei Профессиональный инструмент автоматизации, предназначенный для устранения разрыва между техническим сканированием уязвимостей и отчётностью для руководства. Разработан Adi Mahluf Tenroot Cyber Security. 🚀 Обзор Этот проект предоставляет простой в использован...

firmware-reverse-engineering

펌웨어 리버스 엔지니어링 스킬 OrbitCurve의 펌웨어 추출, 정적 분석, Ghidra 리버스 엔지니어링, 에뮬레이션 및 보안 보고를 위한 5가지 에이전트 스킬로, Hussein Muhaisen이 작성했습니다. 이 컬렉션은 Claude Code 및 Codex용 기존 워크플로우, 참조 자료, 템플릿 및 Ghidra 스크립트를 패키징합니다. 설치하면 에이전트가 지침을 사용할 수 있게 되며, 분석 도구는 별도로 설치해야 합니다. 검증: Claude Code 및 Codex 패키징/검색 확인, Ghidra 스크립트 회귀 테스트, 선...

disclosure-check

Disclosure Check Disclosure Check는 오픈 소스 프로젝트의 취약점 공개 메커니즘을 식별하기 위한 도구입니다. 경고 이 프로젝트는 아직 개발 중이며, 많은 프로젝트에서 제대로 작동하지 않을 수 있습니다. 버그를 발견하면 이슈를 열어주시면 최선을 다해 해결하도록 하겠습니다. 풀 리퀘스트를 환영합니다! 이 도구가 필요한 이유 대부분의 오픈 소스 프로젝트는 인바운드 요청, 버그 리포트 등을 위해 공개 이슈 트래커를 사용합니다. 이는 새로운 취약점을 보고하기에 적합하지 않기 때문에, 많은 프로젝트에서 사용자가...

CVE-2026-69151

creationtimestamp| type| source ---|---|--- 2026-08-03 16:52:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6xhvahdl2o 2026-08-03 18:20:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cpivbdhgtqa6k 2026-08-03 19:31:37+00:00| seen|...

PT-2026-42559

Name of the Vulnerable Software and Affected Versions Concrete CMS versions prior to 9.5.1 Description An Insecure Direct Object Reference IDOR exists where the '/ccm/frontend/conversations/message detail' endpoint returns the full content of any conversation message. This allows an unauthenticat...

CVE-Exploit-Research-Development

Objective To research, replicate, and develop a working expl...

CVE-2025-51479

creationtimestamp| type| source ---|---|--- 2025-07-22 21:14:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lulgdh7nd722...

Data-Driven Understanding of Security Issue Reporting in GitHub Repositories of Open Source Npm Packages

The npm Node Package Manager ecosystem is the most important package manager for JavaScript development with millions of users. Consequently, a plethora of earlier work investigated how vulnerability reporting, patch propagation, and in general detection as well as resolution of security issues i...

Fortinet FortiAnalyzer Input Validation Error Vulnerability (CNVD-2025-12793)

Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat Fortinet. The product is mainly used to collect network log data, and through the reporting suite of security events in the log, network traffic, Web content, etc. to analyze, report,...

bic.at Cross Site Scripting vulnerability OBB-4043498

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

xlivetchat.hautetfort.com Cross Site Scripting vulnerability OBB-4041757

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

michiganassessmentconsortium.org Cross Site Scripting vulnerability OBB-4040560

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

heinonline.org Cross Site Scripting vulnerability OBB-4037903

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sv-virnsberg.de Cross Site Scripting vulnerability OBB-4033907

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

snowflake-connector-python vulnerable to SQL Injection in write_pandas

Issue Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. A function from the snowflake.connector.pandastools module is vulnerable to SQL injection. This vulnerability affects versions 2.2.5 through 3.13.0. Snowflake fixed the issue in version 3.13.1...

CVE-2024-48125

creationtimestamp| type| source ---|---|--- 2025-01-15 20:57:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113834371576114098 2025-01-15 21:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsor2cczi2t 2025-01-15 21:38:18+00:00| seen|...

CVE-2024-37758

creationtimestamp| type| source ---|---|--- 2024-12-20 19:01:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113686693262617989 2024-12-20 19:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldr3wooi472x 2024-12-20 20:55:57+00:00| seen|...

iranpedia.ir Cross Site Scripting vulnerability OBB-3870563

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...