iris-web

Sistema de Investigación de Respuesta a Incidentes Versión actual v2.4.20 Demostración en línea IRIS Iris es una plataforma web colaborativa que tiene como objetivo ayudar a los respondedores de incidentes a compartir detalles técnicos durante las investigaciones. Tabla de contenido Primeros paso...

zsteg

zsteg Description detect stegano-hidden data in PNG & BMP Installation root@kitploit: gem install zsteg Detects: LSB steganography in PNG & BMP zlib-compressed data OpenStego Camouflage 1.2.1 LSB with The Eratosthenes set Usage root@kitploit: zsteg -h Usage: zsteg options filename.png paramstring...

wvctf

WebVulnCTF WVCTF o WebVulnCTF è una piattaforma web gamificata che promuove la formazione nel pentesting e nella sicurezza dello sviluppo di applicazioni web in modo divertente. Attraverso un sistema di ricompense, l'utente deve cercare una serie di flag nell'applicazione vulnerabile, che...

CVE-2025-58780

CVE-2025-58780 Divulgação de Vulnerabilidade: Injeção de SQL na ScienceLogic Visão Geral Este documento descreve uma vulnerabilidade de injeção de SQL divulgada de forma responsável, encontrada na plataforma web da ScienceLogic. A vulnerabilidade foi reportada aos mantenedores do projeto de acord...

VolWeb

Introduzione VolWeb è una piattaforma digitale di analisi forense della memoria che sfrutta la potenza del framework Volatility 3. È pensata per assistere nelle indagini e nelle risposte agli incidenti. 🧬 Obiettivi L'obiettivo di VolWeb è migliorare l'efficienza della raccolta della memoria e...

natlas

Natlas Sommario Hai un sacco di mappe e stanno diventando piuttosto ingestibili. Cosa fai? Le metti in un libro e lo chiami atlante. Questo è simile, tranne per il fatto che è un sito web e una raccolta di nmap. L'obiettivo di Natlas è semplificare la scansione continua e la revisione dei dati...

grepmarx

Grepmarx - Piattaforma di Sicurezza delle Applicazioni Grepmarx è un'applicazione web che fornisce una piattaforma unica per comprendere, analizzare e identificare rapidamente le vulnerabilità in basi di codice potenzialmente grandi e sconosciute. Caratteristiche Capacità SAST Static Analysis...

CVE-2026-77264

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code WordPress plugin (versions ≤ 4.8.6 ) contains a critical authentication bypass (CVSS 9.8). The handle_email_otp_return() function returns the secret magic login token directly in the HTTP response to a publ...

CVE-2026-77264 Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handleemailotpreturn function returning the secret magic login token in the response t...

CVE-2026-45743

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. 16 file-manager endpoints in Termix prior to version 2.3.2 do not verify that the requesting user owns the SSH session identified by sessionId. An authenticated attacker who knows or...

CVE-2026-42540 IRIS has a Mass Assignment issue

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 allow a user to alter values in the database via manipulated API requests. Version 2.4.28 contains a patch...

EUVD-2026-34327

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 return sensitive data to the user which are not required for the client’s operation. Version 2.4.28 contains a patch...

EUVD-2026-34325

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 contain a weakness where an attacker can misuse it to redirect the user to a malicious website controlled by an attacker. Version 2.4.28 fixes the issue...

PT-2026-46385

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 do not properly validate uploaded files. The application can therefore be misused to host phishing pages, amongst other things. This also creates another...

Malicious Package

Overview @pulse-web-platform-core/scripts-loader is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizatio...

PT-2026-47095

Versions of the package raysan5/raylib before 4.5.0 are vulnerable to Cross-site Scripting XSS such that the SetClipboardText API does not properly escape the ' character, allowing attacker-controlled input to break out of the string and execute arbitrary JavaScript via emscripten run script...

MAL-2026-4421 Malicious code in @pulse-web-platform-core/scripts-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c69fc52eb76aa05711ea0c128624eb1fc8c70655a58f2f3e646da1dcd20f254 On npm install, the package's preinstall.js performs an HTTP GET to http://$pkg.$scope.oob.moika.tech/poc.js and passes the response body directly to...

CVE-2026-44738

Grav is a file-based Web platform. Prior to 2.0.0-rc.2, the Twig sandbox allow-list permits any user with the admin.pages role to call config.toArray from within a page body, dumping the entire merged site configuration — including all plugin secrets SMTP passwords, AWS keys, OAuth client secrets...

Directory Traversal

Overview potato-annotation is an A flexible, stand-alone, web-based platform for text annotation tasks Affected versions of this package are vulnerable to Directory Traversal via the validatepathsecurity function. An attacker can gain unauthorized access to files outside the intended project...

ROS-20260429-73-0044

A vulnerability in the ASP.NET Core software platform is related to unrestricted resource allocation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...