Tivoli-Madness

Tivoli-Madness Advisory for: CVE-2020-28054: An Authorization Bypass vulnerability affecting JamoDat – TSMManager Collector v. = 6.5.0.21 A Stack Based Buffer Overflow affecting IBM Tivoli Storage Manager Command Line Administrative Interface Version 5, Release 2, Level 0.1. Unfortunately, after ...

EUVD-2026-113260

Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files in a shared storage space outside of the sandbox...

EUVD-2026-113264

An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supplying a crafted URI string...

EUVD-2026-113129

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to cleartext storage of sensitive information...

EUVD-2026-113171

Insecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown versionCode 3400 allows unauthorized attackers to arbitrarily write content into another user's private storage via a crafted payload...

spring-cloud__spring-cloud-config_CVE-2020-5410_2-1-8-RELEASE

//// DO NOT EDIT THIS FILE. IT WAS GENERATED. Manual changes to this file will be lost when it is generated again. Edit the files in the src/main/asciidoc/ directory instead. //// image::https://circleci.com/gh/spring-cloud/spring-cloud-config/tree/master.svg?style=svg"CircleCI",...

cve-2025-0364

CVE-2025-0364: BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE The BigAntSoft BigAnt Server, which provides a Windows hosted on-premises chat server that focuses on business use cases, is vulnerable to unauthenticated remote code execution via account registration and PHP...

cve-search

cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...

gapps

Gapps Gapps is an Security compliance platform that makes it easy to track your progress against various security frameworks. ❄️ View the Gapps site 🏠 Interested in contacting me? Please join our discord Table of Contents 1. Getting Started 2. FAQ New Features ❄️ SOC2, NIST CSF, NIST-800-53, CMMC,...

nuclearpond-OFJAAAH

Nuclear Pond V.2 We forked this project so we can continue with this great idea, I hope that together we can improve the code and make it available to everyone - @OFJAAAH To install Nuclear Pond, you need to configure the backend terraform module. You can do this by running terraform apply or by...

screenpipe

DOWNLOAD SCREENPIPE screenpipe | YC S26 Screenpipe finds work worth automating in your company Continuously record your company's computer work, map workflows, help find work worth automating, and power agents' context https://github.com/user-attachments/assets/70fe94eb-6d2a-47ca-b7c3-c8ead13a5b7...

ATAboy

If you don't want to build your own, the hardware can be purchased here: https://obsoletetech.us/products/ataboy-an-open-source-legacy-ide-usb-bridge ATAboy is designed for retro computing enthusiasts, data recovery experts, and archivists. Read and write the oldest of IDE hard drives, without th...

karton

Karton Distributed malware processing framework based on Python, Redis and S3. The idea Karton is a robust framework for creating flexible and lightweight malware analysis backends. It can be used to connect malware analysis systems into a robust pipeline with very little effort. We've been in th...

vulnrepo

VULNRΞPO - Vulnerability Report Generator & Repository A client-side, privacy-first vulnerability report manager for security professionals. All data is encrypted and stored locally in your browser — nothing is sent to any server by default. Live app: https://vulnrepo.com/ | Dev branch:...

Seal

Seal Peer-to-peer, end-to-end encrypted chat. No inbox. No account to recover. Nobody's listening — not even us. github.com/Emn4tor/Seal !GitHub last commithttps://img.shields.io/github/last-commi...

abdal-lockbox

🔐 Abdal LockBox 🌐 Read in your language: 🇬🇧 English | 🇨🇳 中文 | 🇷🇺 Русский | 🇪🇸 Español | 🇯🇵 日本語 | 🇮🇷 فارسی | 🇸🇦 العربية | 🇹🇷 Türkçe | 🇩🇪 Deutsch | 🇮🇳 हिन्दी Secure. Store. Autofill. — A privacy-first Android password manager by Abdal Security Group. Abdal LockBox keeps your credentials encrypted on...

ubercookie

🍪 ubercookie An educational demonstration of how websites persistently identify you — and why "clear your cookies" is no longer enough. ubercookie plants a single random id into 12 different browser storage vectors at once. Every time you visit, it reads them all, takes a consensus, and re-writes...

GHSA-R899-H629-J84R Parse Server vulnerable to stored XSS via malformed Content-Type bypassing file upload extension blocklist

Impact Parse Server's file upload validation uses the fileUpload.fileExtensions option enabled by default with a blocklist to reject files that browsers may render as active content, mitigating stored cross-site scripting XSS. When an uploaded file's extension is not recognized by the mime packag...

foxcage

foxcage Run Firefox in a rootless Podman container for security isolation. Your browser runs with almost no Linux capabilities, in its own user and network namespace, isolated from the host — while still having full GPU acceleration, audio, and DRM support. Why foxcage? Firefox already has a...

gobuster

Gobuster 💻 Introduction A fast and flexible brute-forcing tool written in Go Gobuster is a high-performance directory/file, DNS and virtual host brute-forcing tool written in Go. It's designed to be fast, reliable, and easy to use for security professionals and penetration testers. ✨ Features 🚀...