pFuzz

What is pFuzz / pFuzz Nedir ❓ pFuzz is an advanced red teaming fuzzing tool which we developed for our research. It helps us to bypass web application firewall by using different methods at the same time. pFuzz web uygulama araştırmaları için geliştirdiğimiz, gelişmiş bir fuzzing aracıdır. Farklı...

MCPDebugger

Fatmike's MCP Debugger Server Introduction This project is a self-made, lightweight MCP Debugger Server developed for learning and experimentation. The MCP Debugger Server exposes debugger functionality as MCP tools, enabling external MCP clients to control execution, inspect memory, and analyze...

CVE-2017-2671

Linux kernel CVE-2017-2671 Local Denial of Service Vulnerability what !! CVE-2017-2671 1 Linux kernel CVE-2017-2671 Local Denial of Service consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service panic by leveraging access to the...

GHSA-P4QW-VX5P-G984 SiYuan: The publish filter for database backlinks consults the forbidden list instead of the visibility list, disclosing hidden-tier documents to anonymous readers

Summary /api/av/getAttributeViewBacklinks filters its results for reader roles through FilterAttributeViewBacklinksByPublishAccess. That function resolves its ignore list with GetDisablePublishAccess, which covers only the forbidden tier. Documents at the hidden tier are absent from that list, so...

SiYuan: The publish filter for database backlinks consults the forbidden list instead of the visibility list, disclosing hidden-tier documents to anonymous readers

Summary /api/av/getAttributeViewBacklinks filters its results for reader roles through FilterAttributeViewBacklinksByPublishAccess. That function resolves its ignore list with GetDisablePublishAccess, which covers only the forbidden tier. Documents at the hidden tier are absent from that list, so...

SiYuan: The publish filter for local storage returns the administrator's entire storage map with only three keys sanitized

Relationship to GHSA-hgfg-j9pg-43xw That advisory concerned the administrator's live UI layout, and commit 63c7d5474 resolved it by removing FilterUILayoutByPublishIgnore and nulling Conf.UILayout for readers. That fix is correct and complete for the live layout. This report concerns a different...

GHSA-XP3Q-R38W-VGQM SiYuan: The publish filter for local storage returns the administrator's entire storage map with only three keys sanitized

Relationship to GHSA-hgfg-j9pg-43xw That advisory concerned the administrator's live UI layout, and commit 63c7d5474 resolved it by removing FilterUILayoutByPublishIgnore and nulling Conf.UILayout for readers. That fix is correct and complete for the live layout. This report concerns a different...

obsidian-tc Bridge tools leak denied-note data via unfiltered sibling fields

Impact Bridge tool results filtered only the items array against the read ACL and passed sibling fields through unfiltered: tasksfilter emitted groups whose counts reflected denied notes, makemdquery returned ...result siblings, and listtemplates enumerated Templater template paths and parsed...

GHSA-43R2-C7G8-PRC8 obsidian-tc Bridge tools leak denied-note data via unfiltered sibling fields

Impact Bridge tool results filtered only the items array against the read ACL and passed sibling fields through unfiltered: tasksfilter emitted groups whose counts reflected denied notes, makemdquery returned ...result siblings, and listtemplates enumerated Templater template paths and parsed...

CVE-2025-3419

CVE-2025-3419 - WordPress Eventin = 4.0.26 - Arbitrary File Read 🔥 Vulnerability Summary The Eventin plugin = 4.0.26 for WordPress contains an unauthenticated arbitrary file read vulnerability in the proxyimage function. Attackers exploit insufficient input validation by manipulating the url...

Security Bulletin: IBM Guardium Data Protection is affected by a security vulnerability (CVE-2025-5278)

Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2025-5278 DESCRIPTION: A flaw was found in GNU Coreutils. The sort utility's begfield function is vulnerable to a heap buffer under-read. The program may access memory outside the...

CVE-2026-89974

A flaw was found in the Linux kernel's nvme-fc component, which handles Non-Volatile Memory Express over Fibre Channel. When a controller is being added and the nvmeaddctrl function fails, a specific error handling path does not correctly manage memory. This leads to the same memory region being...

CVE-2026-115754

A flaw was found in serialize-javascript. This vulnerability allows an attacker to conduct cross-site scripting XSS attacks by supplying crafted function source text containing unescaped script closing tags. When serialized into a web page, the malicious payload can prematurely close the enclosin...

CVE-2026-89990

A flaw was found in the Ceph filesystem module of the Linux kernel. A local attacker could trigger a use-after-free vulnerability in the cephmdscheckaccess function. This occurs when a concurrent session reopens and frees an array while it is still being accessed, leading to a system crash and...

mcp-gamehacking

mcp-gamehacking MCP Model Context Protocol server for game hacking & reverse engineering. A structured knowledge base of 4,100+ skills with full source code archives, specialized agents, and workflow tools -- designed to be plugged into Claude, Cursor, or any MCP-compatible client. MCP-server for...

cve-2024-48325

CVE-2024-48325 Description: An authenticated user can abuse SQL injection vulnerability exists in the getDocuments function of the InstituicaoDocumentacaoController class. The instituicaoid parameter in /module/Api/InstituicaoDocumentacao?oper=get&resource=getDocuments&instituicaoid is not proper...

CVE-2022-44318

Description of CVE-2022-44318 PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall. Any project or library that uses Picoc also suffers from this issue. An example of this would be...

CVE-2026-90033

A flaw was found in the Linux kernel's ALSA USB audio subsystem. The sndusbmidius122loutput function, responsible for handling USB MIDI output, incorrectly calculates the buffer size for devices operating at slower than high speed. This error can lead to an out-of-bounds write, where the system...

CVE-2026-85746

A flaw was found in MariaDB. An authenticated remote attacker with low privileges can cause memory corruption and potentially achieve arbitrary code execution by submitting specially crafted Geographic Information System GIS objects. This issue is caused by an out-of-bounds write in the STAsText...

SUSE CVE-2026-115348

Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser's parselinktext function that allows unauthenticated attackers to exhaust CPU with unbalanced brackets. Attackers can submit Markdown containing many unbalanced '' or '!' characters, forcing...