537 matches found
Exploit for Improper Access Control in Fortinet Forticlientems
CVE-2026-35616 Vulnerability Assessment Tool Safely detect wh...
Kernel Observability for Data Movement
Kernel-level visibility reveals hidden data movement in breaches, exposing gaps in modern security tools and improving detection, compliance, and system behavior tracking...
CVE-2026-33545 MobSF has SQL Injection in its SQLite Database Viewer Utils
MobSF is a mobile application security testing tool used. Prior to version 4.4.6, MobSF's readsqlite function in mobsf/MobSF/utils.py lines 542-566 uses Python string formatting % to construct SQL queries with table names read from a SQLite database's sqlitemaster table. When a security analyst...
CVE-2026-4761
When a certificate and its private key are installed in the Windows machine certificate store using Network and Security tool, access rights to the private key are unnecessarily granted to the operator group. Installations based on Panorama Suite 2025 25.00.004 are vulnerable unless update...
CVE-2026-4761
The CVE-2026-4761 issue affects Windows machines where a certificate and its private key are installed in the certificate store via the Network and Security tool. The underlying problem is that access rights to the private key are unnecessarily granted to the operator group. Affected installation...
PT-2026-27762
When a certificate and its private key are installed in the Windows machine certificate store using Network and Security tool, access rights to the private key are unnecessarily granted to the operator group. Installations based on Panorama Suite 2025 25.00.004 are vulnerable unless...
PortSwigger Web Security: Out of scope: Improper Input Validation Order on /api-internal/login via password field leads to unnecessary resource consumption
A security issue was discovered in the /api-internal/login authentication endpoint of the internal login interface of Burp Suite DAST Enterprise. The issue was caused by improper input validation order, where the application processed user-supplied input before enforcing field-level validation...
Malicious code in snort-security-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27bb4a30a492a84e3b126941b2ca78dd48b2c494c55ee4e4861527e7c2bf1524 The package snort-security-tool was found to contain malicious code...
MAL-2026-1851 Malicious code in snort-security-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27bb4a30a492a84e3b126941b2ca78dd48b2c494c55ee4e4861527e7c2bf1524 The package snort-security-tool was found to contain malicious code...
Claude Code Security and Magecart: Getting the Threat Model Right
When a Magecart payload hides inside the EXIF data of a dynamically loaded third-party favicon, no repository scanner will catch it – because the malicious code never actually touches your repo. As teams adopt Claude Code Security for static analysis, this is the exact technical boundary where AI...
Exploit for CVE-2026-21385
Qualcomm Vulnerability Scanner The Qualcomm Vulnerability Scan...
Exploit for Command Injection in Microsoft
🛡️ CVE-2026-20841-PoC - Simple Proof of Concept Tool !Downl...
Exploit for CVE-2025-36911
BLUE-SPY - Fast Pair Vulnerability Research Tool SECURITY...
Exploit for CVE-2025-2304
🚀 CVE-2025-2304 - Simple Privilege Escalation Tool 📦 Downl...
Exploit for CVE-2025-36911
ZWhisper CVE-2025-36911 WhisperPair Vulnerability Scanner...
Exploit for Deserialization of Untrusted Data in Facebook React
🔍 Next.js Security Testing Tool Professiona...
commix
Commix short for command injection exploi...