whale-sentinel-services

🐋 Whale Sentinel Services 🔧 Overview Whale Sentinel Services is the centralized backend of the Whale Sentinel threat detection ecosystem. These microservices perform real-time threat detection, agent coordination, DGA analysis, and web attack inspection, enabling deep security observability and...

scan-shai-hulud

scan-shai-hulud A fast, zero-dependency Bash scanner to detect whether your machine is affected by the CVE-2026-45321 "Mini Shai-Hulud" supply chain attack. On May 11, 2026, over 170 npm packages and 2 PyPI packages across TanStack, Mistral AI, UiPath, OpenSearch, and Guardrails AI were...

derf

The DeRF DeRF Detection Replay Framework is an "Attacks As A Service" framework, allowing the emulation of offensive techniques and generation of repeatable detection samples from a UI - without the need for End Users to install software, use the CLI or possess credentials in the target...

CVE-2026-112098

A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released t...

CVE-2020-0796-LPE

CVE-2020-0796-LPE SMBGHOST local privilege escalation https://github.com/ZecOps/CVE-2020-0796-LPE-POC https://github.com/danigargu/CVE-2020-0796...

CVE-2026-112100

A code injection vulnerability exists in DeepPavlov up to version 1.7.0 . The flaw is located in the MultiTaskPipelinePreprocessor.__init__ function within the file deeppavlov/models/preprocessors/multitask_preprocessor.py. An attacker can perform a remote attack by manipulating the preprocessor ...

WPAxFuzz

!Contributorscontributors-shieldcontributors-url !Stargazersstars-shieldstars-url !Forksforks-shieldforks-url !Issuesissues-shieldissues-url !MIT Licenselicense-shieldlicense-url A full-fledged Wi-Fi Fuzzer Report Bug · Request Feature Table of Contents 1. About The Project 2. Fuzz Management and...

CVE-2026-112098

A security flaw exists in DeepPavlov up to version 1.7.0 within the Config Reference Resolver component. Specifically, the resolve function in the file deeppavlov/core/common/params.py is vulnerable to code injection due to improper input handling. This vulnerability can be exploited remotely , a...

CVE-2026-112098 DeepPavlov Config Reference Resolver params.py resolve code injection

A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released t...

CVE-2026-112098 DeepPavlov Config Reference Resolver params.py resolve code injection

A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released t...

mellon

OSDP Vulnerabilities this Exploits OSDP attack tool and the Elvish word for friend Attack 1: Encryption is Optional OSDP supports, but doesn't strictly require , encryption. So your connection might not even be encrypted at all. Attack 1 is just to passively listen and see if you can read the car...

mt6985-CVE-2026-43499

CVE-2026-43499 Failure Log: MT6985 Adaptation Attempt Conclusion : Spent 68M tokens, no root obtained. Reason : KernelSnitch timing attack is unreliable on MTK Dimensity 9200, and CONFIGPANICONOOPS=y leaves no room for trial and error. This article documents the complete troubleshooting process f...

CVE-2026-112097

The SourceCodester Inventory System 1.0 contains a cross-site scripting (XSS) vulnerability within the Sales Management Handler component. The flaw exists in the processing of the file /api/transactions_handler.php?action=save_sale, where manipulating the Hsn_Code argument allows for the executio...

CVE-2026-112097 SourceCodester Inventory System Sales Management transactions_handler.php save_sale cross site scripting

A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file /api/transactionshandler.php?action=savesale of the component Sales Management Handler. The manipulation of the argument HsnCode results in cross site scripting. It is possible...

CVE-2026-38764

CVE-2026-38764 An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...

CVE-2026-112096

The SourceCodester Inventory System 1.0 contains a Cross-Site Scripting (XSS) vulnerability within the Purchase Records Handler component. Specifically, the file /api/transactions_handler.php?action=save_purchase fails to properly neutralize input in the Product_Name , Product_Code , and Vendor_N...

CVE-2026-112096 SourceCodester Inventory System Purchase Records transactions_handler.php save_purchase cross site scripting

A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactionshandler.php?action=savepurchase of the component Purchase Records Handler. The manipulation of the argument ProductName/ProductCode/VendorName leads to cross...

wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash

A flaw was found in Wireshark. An unauthenticated remote attacker could exploit a vulnerability in the C12.22 protocol dissector by sending specially crafted network traffic. This could lead to a crash of the application, resulting in a Denial of Service DoS...

CVE-2026-112161

MobaXterm Personal Edition (Portable) 26.4 GA is vulnerable to a local code execution flaw due to a lack of integrity checks when extracting the CygUtils64.plugin file. An attacker with local write permissions can replace the bin/cygwin1.dll library within that plugin with a malicious version. Wh...

CVE-2026-112161 Lack of integrity checks in Mobatek’s MobaXterm

MobaXterm Personal Edition Portable 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity. A local attacker with write permissions on this file can replace the ‘bin/cygwin1.dll’ library contained within it with a malicious library. When the victim opens a Local Shell...