Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: kernel/printk/index.c: fixed the memory leak that occurred when using debugfslookup. When calling debugfslookup, the result must be passed to dput, otherwise a memory leak will occur over time. To simplify things, simply call...

firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Text and Fonts component...

firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: WebAssembly component...

endsfuzzer

endsfuzzer endsfuzzer ist ein einfaches Werkzeug, um eine Liste von Domains auf bestimmte Endpunkte zu fuzzen. Es prüft alle Domains in einer Liste auf einen einzelnen Endpunkt und wechselt dann zum nächsten Endpunkt. Funktionen Schnell. Nutzt Go-Routinen. Schonender für Server. Fuzzt alle Hosts...

nuclei-burp-plugin

Nuclei Template Generator Burp Plugin A Burp Suite plugin intended to help with nuclei template generation...

spamscanner

Spam Scanner is the best anti-spam, email filtering, and service...

safenet-soho-security-framework

SafeNet SOHO Security Framework SafeNet è un framework per Accesso Zero-Trust alla Rete ZTNA di livello produttivo, progettato specificamente per ambienti Small Office/Home Office SOHO. Orchestrando un overlay VPN sicuro e consapevole dell'identità che utilizza il protocollo WireGuard , SafeNet...

grapefruit

Grapefruit: suite open-source per test di sicurezza mobile Toolkit di strumentazione runtime per applicazioni mobile basato su Frida. Ispeziona, applica hook e modifica le app mobile tramite un'interfaccia web. Ora supporta sia iOS che Android! Avvio rapido Richiede il server Frida in esecuzione...

graylog2-server

Graylog Benvenuti! Graylog è una piattaforma gratuita e open source per la gestione dei log. Puoi saperne di più sul progetto sul nostro sito web e consultare la documentazione sul sito dedicato. Segnalazione dei Problemi Hai trovato un bug? Hai un'idea per un miglioramento? Non esitare ad aprire...

rr

Panoramica rr è uno strumento leggero per registrare, riprodurre e fare debugging dell'esecuzione di applicazioni alberi di processi e thread. Il debugging estende gdb con un'efficientissima reverse-execution che, in combinazione con le funzionalità standard di gdb/x86 come gli hardware data...

ROOT-OS-DEBIAN-11-CVE-2025-38300 CVE-2025-38300 in linux - Patched by Root

Root has patched CVE-2025-38300 in the linux package for Root:Debian:11. Multiple fixed versions available...

SharpGmailC2

SharpGmailC2 Unser freundliches Gmail fungiert als Server und der Implantat exfiltriert Daten über SMTP und liest Befehle vom C2 Gmail über das IMAP-Protokoll. HAFTUNGSAUSSCHLUSS: Dieses Projekt funktioniert nach dem 29. November 2022 nicht mehr gegen Windows Defender. Dieses Tool wird von MS...

CVE-2026-75933

Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts and styles option. Injected script is executed in the context of any visiting user's domain...

CVE-2026-75933

Jet Admin is vulnerable to a stored cross-site scripting (XSS) flaw in the sign-in page's scripts and styles option. An authenticated attacker can inject arbitrary JavaScript that executes in the context of any visiting user's domain, enabling session hijacking, data exfiltration, or further comp...

CVE-2026-75933 Jet Admin Stored XSS

Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts and styles option. Injected script is executed in the context of any visiting user's domain...

WordPress Quiz And Survey Master plugin < 11.2.4 - Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR vulnerability

Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Quiz And Survey Master versions 11.2.4...

WordPress Quiz And Survey Master plugin < 11.2.4 - Contributor+ Arbitrary Quiz Text Settings Update via IDOR vulnerability

Contributor+ Arbitrary Quiz Text Settings Update via IDOR vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Quiz And Survey Master versions 11.2.4...

CVE-2026-18781

The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not validate the final name of an uploaded file after stripping characters from it, allowing unauthenticated users to defeat its file type restrictions and execute arbitrary code on the server...

EUVD-2026-63821

The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not validate the final name of an uploaded file after stripping characters from it, allowing unauthenticated users to defeat its file type restrictions and execute arbitrary code on the server...

CVE-2026-18781 Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass

The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not validate the final name of an uploaded file after stripping characters from it, allowing unauthenticated users to defeat its file type restrictions and execute arbitrary code on the server...