CyberPup

CyberPup 一款免费、开源的网络安全应用，专为普通大众设计。 CyberPup 通过引导式清单、简短课程和泄露检查等工具，帮助非技术用户保障数字生活安全。所有指导均基于 ACSC、CISA 和 NIST 的知名框架，并将其转化为任何人都能实际遵循的通俗语言。 多数个人网络安全工具要么过于技术化，要么只解决单一方面的问题，要么就是彻头彻尾的骗局。CyberPup 试图引导用户全面了解密码、电子邮件安全、设备卫生、社交媒体和泄露检查。 该应用已在 iOS App Store 上线，约有 500...

reconvault

ReconVault 🔍 赏金猎人真正想要的侦察笔记整理工具。 ReconVault 是一款深色主题、终端美学的 Linux 桌面应用，专为安全研究人员、赏金猎人和 CTF 玩家打造。告别散落的文本文件和电子表格——在一个地方管理每个目标的子域名、端口、端点、漏洞和笔记。100% 本地化。无需云端、无需账户、无需网络。 ⚡ 快速开始 前提条件 Linux（Kali、Ubuntu、Debian 系列） Python 3.10+ 安装与运行 Clone the repo git clone https://github.com/parbatzone/reconvault.git cd...

EUVD-2026-90475

A flaw was found in GEGL. The Radiance HDR loader reads past the end of a memory-mapped image when an uncompressed scanline is shorter than the width declared in the file header. Opening a crafted HDR file crashes the application that uses the loader...

CVE-2026-103641

A flaw exists in GEGL where the Radiance HDR loader performs an out-of-bounds read . The vulnerability occurs when an uncompressed scanline in a memory-mapped image is shorter than the width specified in the file header. An attacker can cause an application using this loader to crash by providing...

rails-cve-2012-5664-test

Demo de la vulnerabilidad Rails CVE-2012-5664 Esta aplicación de demostración muestra cómo funciona la vulnerabilidad Rails CVE-2013-5664. Más información: http://blog.phusion.nl/2013/01/03/rails-sql-injection-vulnerability-hold-your-horses-here-are-the-facts...

AlmaLinux 9.2 [TuxCare] Security Update: libxslt / libxslt-devel (ALMALINUX9.2:CLSA-2026:1783418975)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783418975 advisory. - A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and...

The vulnerability of the application software interface of the Cisco Catalyst SD-WAN Manager allows a perpetrator to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the application software interface of the Cisco Catalyst SD-WAN Manager is related to improper handling of data with encoded URLs. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and gain unauthorized access to protected information by...

Linux Distros Unpatched Vulnerability : CVE-2026-102994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.18.0, a crafted PDF containing indirect-object identifiers or generation-number tokens that...

Rocky Linux 9.6 [TuxCare] Security Update: libxslt / libxslt-devel (ALMALINUX9.6:CLSA-2026:1782722295)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782722295 advisory. - A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and...

AlmaLinux 9.6 [TuxCare] Security Update: taglib / taglib-devel (ALMALINUX9.6:CLSA-2026:1777540469)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777540469 advisory. - TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is...

AlmaLinux 9.2 [TuxCare] Security Update: openexr / openexr-devel / openexr-libs Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1784118526)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784118526 advisory. - An integer overflow could occur when OpenEXR processes a crafted file on systems where sizet 64 bits. This could cause an invalid...

CVE-2026-103244: Missing Authentication for Critical Function

ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that allows unauthenticated attackers to execute arbitrary SQL during first-run setup mode. Attackers can invoke setup.restore via Socket.IO to plant admin users and forged session...

PT-2026-103777

Name of the Vulnerable Software and Affected Versions ground-station versions prior to 0.8.0 Description An authentication bypass exists in the setup.restore command during the first-run setup mode. Unauthenticated attackers can use Socket.IO to invoke this command and execute arbitrary SQL,...

AlmaLinux 9.2 [TuxCare] Security Update: gnutls / gnutls-c++ / gnutls-dane / gnutls-devel / gnutls-utils Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1747903683)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1747903683 advisory. - A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems li...

AlmaLinux 9.2 [TuxCare] Security Update: tar (ALMALINUX9.2:CLSA-2026:1778820779)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778820779 advisory. - In GNU tar before 1.35, mishandled extension attributes in a PAX archive can lead to an application crash in xheader.c. CVE-2023-39804 Note...

Linux Distros Unpatched Vulnerability : CVE-2026-102580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. An authenticated attacker can supply an improperly validated audience class name to the Report Builder component, allowing arbitrary...

AlmaLinux 9.6 [TuxCare] Security Update: libxslt / libxslt-devel (ALMALINUX9.6:CLSA-2026:1782722295)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782722295 advisory. - A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and...

EUVD-2026-89206

russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened...

CVE-2026-102125

The sandbox that isolates document conversion on a Kiteworks appliance did not fully confine the code running inside it. Code already executing within that sandbox could potentially escape its confinement and act with the privileges of the service account that runs the application, which could...

CVE-2026-103387

A flaw was found in uri-js. A remote attacker can cause a Denial of Service DoS by providing a specially crafted mailto URI to the parsing function. Improper handling of mailto header arguments triggers an uncaught exception, resulting in an application crash...